Patent ID: 7428626

Claim:
A method of performing a translation from a guest virtual address to a host physical address in a virtual machine environment having a virtual machine monitor, the method comprising: receiving a guest virtual address from a host computer executing a guest virtual machine program; checking a translation look-aside buffer (TLB) to determine if there is a pre-existing mapping between the guest virtual address and the host physical address, wherein if the pre-existing mapping exists, using the pre-existing mapping, and wherein if the pre-existing mapping does not exist, then performing the translation as follows: determining a guest physical address, the guest physical address being determined using the guest virtual address and a first level address translation executed on the host computer; performing a second level address translation using at least one table and the guest physical address as an index by performing a hash with the guest physical address, the hash determining an index for the at least one table containing the host physical address and an access override information; reading a host physical address and an access override information from the at least one table; and providing the host physical address and the access override information to the host computer; wherein, the access override information performs access control over the host physical address, the access control overriding a guest-defined access protection on the guest physical address, and wherein the translation from the guest virtual address to the host physical address is performed without intervention by the virtual machine monitor.