Managing accesses in a processor for isolated execution

• US 7,089,418 B1
• Filed: 03/31/2000
• Issued: 08/08/2006
• Est. Priority Date: 03/31/2000
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Thakkar, Shreekant S., Neiger, Gilbert, Ellison, Carl M., Mittal, Millind, Reneris, Ken, Lin, Derrick C., McKeen, Francis X., Sutton, James A., Herbert, Howard C., Golliver, Roger A.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): Tran, Ellen C
• Application Number:
  US09/540,611
• Time in Patent Office: 2,321 Days
• Field of Search: 703 23- 24, 709100-250, 710/128, 711100-200, 712/229, 713100-200, 395/186
• US Class Current: 713/166
• CPC Class Codes: G06F 12/0831 using a bus scheme, e.g. with bus monitoring or watching means
• CPC Class Codes: G06F 12/1491 in a hierarchical protection system, e.g. privilege levels, memory rings

Abstract

In one embodiment, a method comprises configuring an access transaction generated by a processor by a configuration storage containing configuration parameters. The processor has a normal execution mode and an isolated execution mode. The access transaction has access information. In a further embodiment, a method comprises checking the access transaction by an access checking circuit using at least one of the configuration parameters and the access information.

Claims

1. A method comprising:

setting a first processor in a processing system to operate in an isolated execution mode, wherein the first processor supports (a) the isolated execution mode in a ring 0 operating mode, (b) a normal execution mode in the ring 0 operating mode, and (c) one or more higher ring operating modes;

configuring the processing system to establish an isolated memory area in a memory of the processing system;

detecting, at the first processor, a snoop transaction from a second processor; and

disallowing the snoop transaction if (a) the snoop transaction requests access to an address that is cached by the first processor, (b) said address resides in the isolated memory area, and (c) the second processor is not set to operate in the isolated execution mode.

2. A method according to claim 1, further comprising:

detecting, at the first processor, a transaction that requests access to the memory of the processing system; and

disallowing the transaction if (a) the transaction involves the isolated memory area and (b) the first processor is not set to operate in the isolated execution mode.

3. A method according to claim 2 further comprising:

in response to detecting the transaction that requests access to the memory, determining, based at least in part on a physical address from a translation lookaside buffer (TLB) of the processor, whether the transaction involves the isolated memory area.

4. A method according to claim 1, wherein the operation of detecting a snoop transaction from a second processor comprises:

receiving the snoop transaction from a front side bus (FSB) responsive to the first processor.

5. A method according to claim 1, wherein the operation of detecting a snoop transaction from a second processor comprises:

receiving the snoop transaction from a front side bus (FSB), wherein the snoop transaction specifies a physical address to be accessed.

6. A method according to claim 1, further comprising:

disallowing snoop transactions involving addresses that reside in the isolated memory area if the first and second processors are not both set to operate in the isolated execution mode.

7. A method according to claim 1, wherein the operation of disallowing the snoop transaction is performed by an access checking circuit of the first processor.

8. A method according to claim 1, further comprising:

determining, based at least in part on an isolated execution mode setting in a processor control register of the first processor, whether the first processor is set to operate in the isolated execution mode.

9. An apparatus for use in a processing system having memory, the apparatus comprising:

a first processor for a processing system, wherein the first processor supports (a) an isolated execution mode in a ring 0 operating mode, (b) a normal execution mode in the ring 0 operating mode, and (c) one or more higher ring operating modes, the processor operable to detect a snoop transaction from a second processor; and

an access checking circuit in the first processor, the access checking circuit operable to disallow the snoop transaction if (a) the snoop transaction requests access to an address that is cached by the first processor, (b) said address resides in an isolated memory area in a memory of the processing system, and (c) the second processor is not set to operate in the isolated execution mode.

10. An apparatus according to claim 9, further comprising:

the first processor operable to detect a memory transaction that requests access to the memory of the processing system; and

the access checking circuit operable to disallow the memory transaction if (a) the memory transaction involves the isolated memory area and (b) the first processor is not set to operate in the isolated execution mode.

11. An apparatus according to claim 10, wherein the memory transaction comprises a transaction generated during execution of an instruction in the first processor.

12. An apparatus according to claim 11, further comprising:

a translation lookaside buffer (TLB) in the first processor; and

the access checking circuit operable to determine, based at least in part on a physical address from the TLB, whether the memory transaction involves the isolated memory area.

13. An apparatus according to claim 10, further comprising:

the first processor operable to assert a signal to grant access for the memory transaction if the first processor is set to operate in the isolated execution mode.

14. An apparatus according to claim 9, further comprising:

the access checking circuit operable to determine whether to allow the snoop transaction based at least in part on a cache access signal from the first processor and an isolated access signal from the second processor.

15. An apparatus according to claim 9, further comprising:

the access checking circuit operable to disallow snoop transactions from the second processor involving the isolated memory area if the first and second processors are not both set to operate in the isolated execution mode.

16. A processing system comprising:

first and second processors that can each be set to operate in a normal execution mode in a ring 0 operating mode and, alternatively, to operate in an isolated execution mode in the ring 0 operating mode, wherein the first processor also supports one or more higher ring operating modes, the first processor operable to detect a snoop transaction from the second processor;

memory to include an isolated memory area, the memory responsive to the first processor; and

an access checking circuit in the first processor, the access checking circuit operable to disallow the snoop transaction if (a) the snoop transaction requests access to an address that is cached by the first processor, (b) said address resides in the isolated memory area, and (c) the second processor is not set to operate in the isolated execution mode.

17. A processing system according to claim 16, further comprising:

the first processor operable to detect a memory transaction that requests access to the memory of the processing system; and

the access checking circuit operable to disallow the memory transaction if (a) the memory transaction involves the isolated memory area and (b) the first processor is not set to operate in the isolated execution mode.

18. A processing system according to claim 17, wherein:

the memory transaction comprises a transaction generated during execution of an instruction in the first processor.

19. A processing system according to claim 17, further comprising:

a translation lookaside buffer (TLB) in the first processor; and

the access checking circuit operable to determine, based at least in part on a physical address from the TLB, whether the memory transaction involves the isolated memory area.

20. A processing system according to claim 17, further comprising:

the first processor operable to assert a signal to grant access for the memory transaction if the first processor is set to operate in the isolated execution mode.

21. A processing system according to claim 16, further comprising:

the access checking circuit operable to determine whether to allow the snoop transaction based at least in part on a cache access signal from the first processor and an isolated access signal from the second processor.

22. A processing system according to claim 16, further comprising:

the access checking circuit operable to disallow snoop transactions from the second processor involving the isolated memory area if the first and second processors are not both set to operate in the isolated execution mode.