| CPC G06F 3/0622 (2013.01) [G06F 3/0637 (2013.01); G06F 3/0659 (2013.01); G06F 3/0673 (2013.01); G06F 12/1475 (2013.01)] | 6 Claims |
|
1. An apparatus, comprising:
a memory comprising a plurality of memory sections;
a Memory Section Attribute Storage (MSAS) comprising one or more entries, wherein at least some of the entries specify, for respective sections of the memory, respective section security policies, respective section base addresses and respective section sizes; and
a memory access circuit (MAC), configured to:
receive, from a host, a memory access request that specifies an address to be accessed in the memory;
identify a target memory section that corresponds to the address, responsively to the section base addresses and to the section sizes specified in the MSAS;
receive, from the MSAS, a security policy that corresponds to the target memory section; and
apply the security policy to the memory access request,
wherein the MAC is configured to determine that the address belongs to the target memory section, by identifying that a section-specifying set of bits of the address, a size of the set being derived from a section size in the entry of the of the target memory section, are equal to the corresponding bits of a base address in the entry of the target memory section, and
wherein the MSAS is further configured to perform address remapping between first and second memory sections of a same size, by swapping the section-specifying bits between the entries of the first and second sections.
|