Information processing apparatus, information processing method, and storage medium

Patent metadata

Field	Value
Publication number	US-10445233-B2
Application number	US-201514745215-A
Country	US
Kind code	B2
Filing date	Jun 19, 2015
Priority date	Jun 23, 2014
Publication date	Oct 15, 2019
Grant date	Oct 15, 2019

Abstract

An information processing apparatus for processing data using a main memory device and a nonvolatile secondary storage device includes a nonvolatile main memory unit, a volatile main memory unit, a determination unit that determines whether the data is designated as confidential data, and a control unit that stores the data in the volatile main memory unit if the determination unit determines that the data is designated as confidential data and stores the data in the nonvolatile main memory unit if the determination unit determines that the data is not designated as confidential data.

First claim

What is claimed is:

1. An information processing apparatus for processing data using a main memory device and a nonvolatile secondary storage device, the information processing apparatus comprising:
a nonvolatile main memory unit including a main memory device;
a volatile main memory unit including a main memory device;
a determination unit configured to determine whether the data is designated as confidential data on the basis of a system call of an operating system;
a control unit configured to store the data in a virtual memory corresponding to the volatile main memory unit when the determination unit determines that the data is designated as confidential data and when a copy source of the data is the volatile main memory, and store the data in a virtual memory corresponding to the nonvolatile main memory unit when the determination unit determines that the data is not designated as confidential data; and
a swap-out control unit configured to allow the data stored in the volatile main memory unit to be swapped out into the nonvolatile secondary storage device when the nonvolatile secondary storage device is attached to a cryptographic device which encrypts or decrypts the data and reject the swap-out when the nonvolatile secondary storage device is not attached to the cryptographic device, wherein the virtual memory corresponding to the volatile main memory unit and the virtual memory corresponding to the nonvolatile main memory unit are controlled by the operating system installed on the information processing apparatus.

2. The information processing apparatus according to claim 1 , wherein the determination unit determines that the data is confidential data when the data is retrieved from a memory area that is designated as confidential.

3. The information processing apparatus according to claim 1 , further comprising:
a setting unit configured to set the memory area designated as confidential.

4. The information processing apparatus according to claim 1 , wherein the determination unit determines that the data is designated as confidential data when the data is retrieved from the volatile memory unit.

5. The information processing apparatus according to claim 1 , wherein the determination unit determines that the data is designated as confidential data when the data is retrieved from a memory unit including a cryptographic mechanism, and
wherein the determination unit determines that the data is not designated as confidential data when the data is retrieved from a memory unit not including a cryptographic mechanism.

6. The information processing apparatus according to claim 1 ,
wherein, upon swapping out the data stored in the volatile main memory unit into the nonvolatile secondary storage device, the swap-out control unit encrypt the data and stores the data in the nonvolatile main memory unit.

7. The information processing apparatus according to claim 6 ,
wherein, upon swapping in data stored in the nonvolatile main memory unit, the swap-out control unit decrypts the data and stores the data in the volatile main memory unit.

8. The information processing apparatus according to claim 1 , wherein when the data is obtained by decrypting encrypted data, the determination unit determines that the data is designated as confidential data.

9. An information processing method for processing data by an information processing apparatus using a nonvolatile main memory unit, a volatile main memory unit, and a nonvolatile secondary storage device, the information processing method comprising:
determining whether the data is designated as confidential data on the basis of a system call of an operating system;
storing the data in a virtual memory corresponding to the volatile main memory unit when it is determined that the data is designated as confidential data and when a copy source of the data is the volatile main memory, and storing the data in a virtual memory corresponding to the nonvolatile main memory unit when it is determined that the data is not designated as confidential data; and
allowing the data stored in the volatile main memory unit to be swapped out into the nonvolatile secondary storage device when the nonvolatile secondary storage device is attached to a cryptographic device which encrypts or decrypts the data and rejecting the swap-out when the nonvolatile secondary storage device is not attached to the cryptographic device, wherein the virtual memory corresponding to the volatile main memory unit and the virtual memory corresponding to the nonvolatile main memory unit are controlled by the operating system installed on the information processing apparatus.

10. A non-transitory storage medium storing computer executable instructions causing a computer to execute an information processing method performed by an information processing apparatus including a nonvolatile main memory unit, the information processing method comprising:
determining whether data is designated as confidential data on the basis of a system call of an operating system;
storing the data in a virtual memory corresponding to a volatile main memory unit when it is determined that the data is designated as confidential data and when a copy source of the data is the volatile main memory, and storing the data in a virtual memory corresponding to the nonvolatile main memory unit when it is determined that the data is not designated as confidential data; and
allowing the data stored in the volatile main memory unit to be swapped out into the nonvolatile secondary storage device when the nonvolatile secondary storage device is attached to a cryptographic device which encrypts or decrypts the data and rejecting the swap-out when the nonvolatile secondary storage device is not attached to the cryptographic device, wherein the virtual memory corresponding to the volatile main memory unit and the virtual memory corresponding to the nonvolatile main memory unit are controlled by the operating system installed on the information processing apparatus.

11. An information processing apparatus including a nonvolatile main memory unit included in a main memory device comprising a volatile main memory device and a nonvolatile secondary storage device, the information processing apparatus storing, in the nonvolatile main memory unit, data stored using a paging scheme on a page-by-page basis, the information processing apparatus comprising:
a determination unit configured to determine whether a flag for the page indicates that the page is confidential on the basis of a system call of an operating system;
a control unit configured to inhibit the data of the page to be stored in virtual memory corresponding to the nonvolatile main memory unit when the determination unit determines that the flag indicates that the page is confidential and when a copy source of the data is the volatile main memory, and permit the data of the page to be stored in the virtual memory corresponding to the volatile main memory device when the determination unit determines that the flag indicates that the page is not confidential; and
a swap-out control unit configured to allow the data of the page to be stored in the volatile main memory unit to be swapped out into the nonvolatile secondary storage device when the nonvolatile secondary storage device is attached to a cryptographic device which encrypts or decrypts the data of the page and reject the swap-out when the nonvolatile secondary storage device is not attached to the cryptographic device, wherein the virtual memory corresponding to the volatile main memory device and the virtual memory corresponding to the nonvolatile main memory unit are controlled by the operating system installed on the infor

Assignees

• Canon Kk

Inventors

• Kato Kensuke

Classifications

• G06F2212/205

  Hybrid memory, e.g. using both volatile and non-volatile memory · CPC title

• G06F21/79

  in semiconductor storage media, e.g. directly-addressable memories · CPC title

• G06F12/0638 Primary

  Combination of memories, e.g. ROM and RAM such as to permit replacement or supplementing of words in one module by words in another module (address formation of the next microinstruction G06F9/26; masking faults in memories by using spares or by reconfiguring G11C29/70) · CPC title