Algorithm and apparatus to deploy virtual machine monitor on demand

摘要

In the various aspects, virtualization techniques may be used to improve performance and reduce the amount of power consumed by selectively enabling a hypervisor operating on a computing device during sandbox sessions. In the various aspects, a high-level operating system may allocate memory such that its intermediate physical addresses are equal to the physical addresses. When the hypervisor is disabled, the hypervisor may suspend second stage translations from intermediate physical addresses to physical addresses. During a sandbox session, the hypervisor may be enabled and resume performing second stage translations.

主权项

1. A method of managing memory on a computing device, comprising:
initializing a hypervisor, a security monitor, and a high-level operating system (HLOS); disabling the hypervisor after initialization; monitoring for a signal from the security monitor to start a sandbox session; enabling the hypervisor in response to receiving the signal from the security monitor to start the sandbox session; and implementing access control while the hypervisor is enabled, wherein disabling the hypervisor comprises:
configuring all system memory management units (SMMU) context banks to bypass second stage translation; andturning off second stage translations for the HLOS.