Patent ID: 8275884

Claim:
A method of securely sharing content in a system including a hardware platform, comprising: a first domain, which has content that requires security, among a plurality of domains logically generated on the hardware platform by a virtualization layer unit, sharing the content with at least one second domain of the plurality of domains, wherein the sharing comprises indicating, by the first domain, to the virtualization layer unit, an external transmission type to which writing of the content of the first domain is not permitted and setting a write-prevention flag in a memory page descriptor of a peripheral device, among a plurality of peripheral devices, corresponding to the external transmission type to which writing of the content of the first domain is not permitted, the plurality of peripheral devices including a peripheral device to which writing of the content owned by the first domain is permitted; and preventing, by the virtualization layer unit, the writing of the content if the second domain requests to write the content in a region and if the virtualization layer unit determines, based on the request of the second domain, that the flag is set for the region in which the second domain requests to write the content.