METHOD AND SYSTEM FOR SECURELY SHARING CONTENT

• US 20090182860A1
• Filed: 12/12/2008
• Published: 07/16/2009
• Est. Priority Date: 01/15/2008
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: SUH, Sang-Bum, HWANG, Joo-Young
• Granted Patent: US 8,275,884 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes

Abstract

A method and apparatus for securely sharing content are provided, which can securely share the content without allowing access by unauthorized third parties. The method of securely sharing content includes a first domain, which has content that requires security among a plurality of domains logically generated on a hardware platform, sharing the content with at least one second domain, and if the second domain intends to write the content in a region in which wrntent is not permitted, preventing the writing of the content.

Claims

1. A method of securely sharing content, comprising:

a first domain, which has content that requires security among a plurality of domains logically generated on a hardware platform, sharing the content with at least one second domain; and

preventing the writing of the content if the second domain intends to write the content in a region in which writing of the content is not permitted.

2. The method of claim 1, wherein the sharing comprises marking pages of a memory sharing the content so as to indicate that the content is stored in the pages of the memory, and tagging information of the first domain that is the domain having the content.

3. The method of claim 2, wherein the sharing comprises when the content stored in the marked pages is loaded in processor registers, including a mark indicating that the content is stored in the respective registers and a tag having information of the first domain that is the domain having the content in the respective registers.

4. The method of claim 2, further comprising limiting a change of the domain having the marked pages.

5. The method of claim 1, wherein the second domain is a domain having peer relations with the first domain.

6. The method of claim 1, wherein the region in which the writing of the content is not permitted includes memory regions of peripheral devices that correspond to any one of external transmission types of printing, displaying, and networking.

7. The method of claim 1, wherein the region in which the writing of the content is not permitted includes memory regions shared by a domain that does not have peer relations with the first domain.

8. The method of claim 6, further comprising setting a flag indicating that a corresponding page is the memory region in which the writing of the content is not permitted in the memory region;

wherein the preventing comprises preventing the writing of the content if the flag is set in the region in which the content is to be written.

9. The method of claim 7, further comprising setting a flag indicating that a corresponding page is the memory region in which the writing of the content is not permitted in the memory region;

wherein the preventing comprises preventing the writing of the content if the flag is set in the region in which the content is to be written.

10. The method of claim 1, wherein the sharing comprises setting a memory sharing of the content to “

read only”

.

11. The method of claim 3, further comprising when the content is operated, comparing the tag of a register in which the content is stored with the tag of an operation result register, and if the tags are not the same, stopping an operation process.

12. A system for securely sharing content, comprising:

a virtualization layer unit which logically generates a plurality of domains on a hardware platform;

wherein the plurality of domains include a first domain having content that requires security and at least one second domain sharing the content with the first domain; and

wherein if the second domain intends to write the content in a region in which writing of the content is not permitted, the virtualization layer unit prevents the writing of the content.

13. The system of claim 12, wherein the virtualization layer unit marks pages of a memory sharing the content so as to indicate that the content is stored in the pages of the memory, and tags information of the first domain that is the domain having the content.

14. The system of claim 13, wherein the virtualization layer unit operates to include a mark indicating that the content is stored in processor registers and a tag having information of the first domain that is the domain having the content in the respective registers when the content stored in the marked pages is loaded in the processor registers.

15. The system of claim 13, wherein the virtualization layer unit limits a change of the domain having the marked pages.

16. The system of claim 12, wherein the second domain is a domain having peer relations with the first domain.

17. The system of claim 12, wherein the region in which the writing of the content is not permitted includes memory regions of peripheral devices that correspond to any one of external transmission types of printing, displaying, and networking.

18. The system of claim 12, wherein the region in which the writing of the content is not permitted includes memory regions shared by a domain that does not have peer relations with the first domain.

19. The system of claim 17, wherein the virtualization unit operates to set a flag indicating that the corresponding page is the memory region in which the writing of the content is not permitted in the memory region, and to prevent the writing of the content if the flag is set in the region in which the content is to be written.

20. The system of claim 18, wherein the virtualization unit operates to set a flag indicating that a corresponding page is the memory region in which the writing of the content is not permitted in the memory region, and to prevent the writing of the content if the flag is set in the region in which the content is to be written.

tent if the flag is set in the region in which the content is to be written.

21. The system of claim 12, wherein the virtualization layer unit sets a memory sharing of the content to “

read only”

.

22. The system of claim 14, wherein the virtualization layer unit compares the tag of the register in which the content is stored with the tag of an operation result register when the content is operated, and if the tags are not equal to each other, the virtualization layer unit stops an operation process.