Patent ID: 8954695
Filing Date: 2015-02-10
Classification: G06F

Abstract:
1. A method comprising: partitioning an addressable memory space for a device into a plurality of memory pages; requesting, with a daemon executing on the device, a secure object by invoking a system call using a secure pool size value for a secure pool size parameter of the system call; assigning the secure pool size value to a first one of the plurality of memory pages, wherein the secure pool size value defines a plurality of protected memory spaces that partition the first memory page into a plurality of secure objects; returning a reference to a first one of the plurality of secure objects of the first memory page to the daemon in response to the request for the secure object; receiving a command that references a memory address; and determining, based at least on the secure pool size value, whether a memory address is an address of one of the plurality of protected memory spaces of the first memory page, wherein the memory address corresponds to a physical address of the first memory page.