logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 10614238 B1

PDFFull Text
Date of Patent:
Apr. 07, 2020

Filed:

Nov. 22, 2017

Data protection method and apparatus

Applicant:

Huawei Technologies Co., Ltd., Shenzhen, Guangdong, CN;

Inventors:

Yutao Liu, Shanghai, CN;

Yubin Xia, Shanghai, CN;

Haibo Chen, Shanghai, CN;

Assignee:

HUAWEI TECHNOLOGIES CO., LTD., Shenzhen, CN;

Attorney:

Gregg L. Jansen

Primary Examiner:

David J Pearson

Int. Cl.
CPC ...
G06F 21/54 (2013.01); G06F 21/62 (2013.01); G06F 21/52 (2013.01); G06F 12/1009 (2016.01); G06F 21/78 (2013.01); G06F 12/08 (2016.01); G06F 21/56 (2013.01); G06F 12/14 (2006.01); G06F 21/51 (2013.01); G06F 21/74 (2013.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/6218 (2013.01); G06F 12/08 (2013.01); G06F 12/1009 (2013.01); G06F 21/52 (2013.01); G06F 21/54 (2013.01); G06F 21/563 (2013.01); G06F 21/566 (2013.01); G06F 21/78 (2013.01); G06F 12/145 (2013.01); G06F 21/51 (2013.01); G06F 21/577 (2013.01); G06F 21/62 (2013.01); G06F 21/74 (2013.01); G06F 2212/1052 (2013.01); G06F 2212/151 (2013.01); G06F 2212/657 (2013.01); G06F 2221/034 (2013.01);
Abstract

A data protection method includes detecting whether critical code of an application has been called, with the critical code being used to access critical data; switching from a preconfigured first extended page table (EPT) to a preconfigured second EPT according to preset trampoline code corresponding to the critical code when an operating system calls the critical code using the first EPT, wherein memory mapping relationships of the critical data and the critical code are not configured in the first EPT, the memory mapping relationships of the critical data and the critical code are configured in the second EPT, and the critical data and the critical code are separately stored in independent memory areas; and switching from the second EPT back to the first EPT according to the trampoline code after calling and executing the critical code using the second EPT.

Find Patent Forward Citations

Loading…