Patent ID: 9519596
Filing Date: 2016-12-13
CPC Classification: G06F

Claim Text:
1. A method for controlling access of a processor to a resource, wherein the processor has an instruction set including a virtualization extension, the method comprising: executing a resource access instruction by the processor using the virtualization extension, the resource access instruction conveying a virtual address and a virtual machine identifier; translating the virtual address to a physical address based upon the virtual machine identifier, the physical address comprising an actual physical address for accessing the resource without further translation; looking-up an access control rule table using the physical address as a search key, each entry of the access control rule table including a virtual machine identifier; and controlling access to the resource based on an output of the access control rule table and a match between the virtual machine identifier returned by the access control rule table and the virtual machine identifier conveyed in the resource access instruction, wherein controlling access comprises granting access to the resource if the access control rule table returns no entry.