METHOD, SYSTEM AND APPARATUS FOR REGION ACCESS CONTROL

• US 20130305006A1
• Filed: 09/30/2011
• Published: 11/14/2013
• Est. Priority Date: 09/30/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Schmisseur, Mark A., Swanson, Robert C., Slaight, Thomas M., Altman, Asher M.
• Granted Patent: US 9,268,712 B2
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 12/14 Protection against unauthorised use of memory or access to memory
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0667 at data level, e.g. file, record or object virtualisation
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: G06F 9/545 where tasks reside in different layers, e.g. user- and kernel-space

Abstract

Techniques and mechanisms for providing access to a storage device of a computer platform. In an embodiment, an agent executing on the platform may be registered for access to the storage device, the agent being allocated a memory space by a host operating system of the platform. Registration of the agent may result in a location in the allocated memory space being mapped to a location in the storage device. In another embodiment, the agent may write to the location in the allocated memory space to request access to the storage device, wherein the request is independent of any system call to the host OS which describes the requested access.

Claims

1. A method at an object-based storage device (OSD) of a computer platform, the method comprising:

detecting a write to a first location of the OSD caused by an application of the computer platform performing a write to a second location in a memory space of a memory coupled to the OSD, the memory space allocated to the application, the write to the second location to request a first information exchange; and

performing the first information exchange with the memory space, wherein the first information exchange is independent of the application sending to a host operating system of the computer platform any system call describing the first information exchange.

2. The method of claim 1, further comprising:

determining an identifier of the application in response to detecting the writing to the first location; and

identifying an access permission for the application based on the determined identifier, wherein the first information exchange is based on the identified access permission.

3. The method of claim 1, wherein the write to the first location stores an identifier of a memory region of the OSD provided to the application by the host operating system in response to a request from the application.

4. The method of claim 1, wherein the write to the first location is caused by the write to the second location based on a memory mapping of the first location to the second location.

5. The method of claim 1, wherein performing the first information exchange includes accessing a first memory region of the OSD, the method further comprising:

receiving from the host operating system a registration of the application for access to the first memory region of the OSD.

6. The method of claim 1, further comprising:

receiving a request to access a memory region of the OSD, wherein the host operating system is to be prevented access to information describing the memory region;

detecting an indication that a processor is operating in a system management mode; and

based on the detecting the indication, accepting the request to access the memory region of the OSD.

7. The method of claim 6, wherein the system management mode is for operation of a BIOS management agent.

8. An object-based storage device for operation in a computer platform, the object-based storage device comprising:

a first location to receive a write caused by an application of the computer platform performing a write to a second location in a memory space of a memory coupled to the object-based storage device, the memory space allocated to the application, the write to the second location to request a first information exchange; and

an access engine to detect the write to a first location, the access engine further to perform the first information exchange with the memory space, wherein the first information exchange is independent of the application sending to a host operating system of the computer platform any system call describing the first information exchange.

9. The object-based storage device of claim 8, wherein the access engine further to determine an identifier of the application in response to the write to the first location, and to identify an access permission for the application based on the determined identifier, wherein the first information exchange is based on the identified access permission.

10. The object-based storage device of claim 8, wherein the write to the first location stores an identifier of a memory region of the OSD provided to the application by the host operating system in response to a request from the application.

11. The object-based storage device of claim 8, wherein the write to the first location is caused by the write to the second location based on a memory mapping of the first location to the second location.

12. The object-based storage device of claim 8, wherein the access engine to perform the first information exchange includes the access engine to access a first memory region of the OSD, the access engine further to receive from the host operating system a registration of the application for access to the first memory region of the OSD.

13. The object-based storage device of claim 8, the access engine further to receive a request to access a memory region of the ODS, wherein the host operating system is to be prevented access to information describing the memory region, to detect an indication that a processor is operating in a system management mode, and based on the detecting the indication, to accept the request to access the memory region of the OSD.

14. The object-based storage device of claim 13, wherein the system management mode is for operation of a BIOS management agent.

15. A method by an agent executing with a processing unit of a computer platform, the method comprising:

performing a write to a first location in a memory space allocated to the agent, the write to the first location to request a first information exchange between the memory space of a memory device of the computer platform and an object-based storage device (OSD) of the computer platform coupled to the memory device, wherein the write to the first location causes a write to a second location of the OSD; and

based on the write to the second location, performing the first information exchange with the OSD, wherein the first information exchange is independent of the agent sending to a host operating system of the computer platform any system call describing the first information exchange.

16. The method of claim 15, wherein the agent is an application running in a user space supported by the host operating system.

17. The method of claim 16, further comprising:

sending a request to the host operating system, wherein the host operating system registers the agent with the ODS in response to the system call; and

receiving an identifier of a memory region of the OSD provided by the host operating system in response to the request, wherein the write to the second location stores the identifier of the memory region.

18. The method of claim 16, wherein the write to the second location stores an identifier of the agent.

19. The method of claim 16, wherein the write to the first location is caused by the write to the second location based on a memory mapping of the first location to the second location.

20. A computer-readable storage medium having stored thereon instructions which, when executed by one or more processing units, cause an agent of a computer platform to perform a method comprising:

performing a write to a first location in a memory space allocated to the agent, the write to the first location to request a first information exchange between the memory space and an object-based storage device (OSD) of the computer platform, wherein the write to the first location causes a write to a second location of the OSD; and

based on the write to the second location, performing the first information exchange with the OSD, wherein the first information exchange is independent of the agent sending to a host operating system of the computer platform any system call describing the first information exchange.

21. The computer-readable storage medium of claim 20, wherein the agent is an application running in a user space supported by the host operating system.

22. The computer-readable storage medium of claim 21, the method further comprising:

sending a request to the host operating system, wherein the host operating system registers the agent with the ODS in response to the system call; and

receiving an identifier of a memory region of the OSD provided by the host operating system in response to the request, wherein the write to the second location stores the identifier of the memory region.

23. The computer-readable storage medium of claim 21, wherein the write to the second location stores an identifier of the agent.

24. The computer-readable storage medium of claim 21, wherein the write to the first location is caused by the write to the second location based on a memory mapping of the first location to the second location.