Shared Memory Using Memory Mapped Files Between Host And Guest On A Computing Device

Patent metadata

Field	Value
Publication number	US-2018165133-A1
Application number	US-201715638894-A
Country	US
Kind code	A1
Filing date	Jun 30, 2017
Priority date	Dec 13, 2016
Publication date	Jun 14, 2018
Grant date	—

Abstract

A computing device runs a host on which multiple guests (e.g., virtual machines run via a virtual machine monitor such as a hypervisor) can run. The guest is used for isolation as well as hardware resource partitioning. The guest and the host agree on a name and a size for shared memory. Both the guest and the host map to the shared memory, and both the guest and the host to access the shared memory. The access allowed to the shared memory can be the same for both the host and the guest (e.g., both may be allowed read/write access) or different (e.g., the guest may be allowed write only access and the host may be allowed read only access).

First claim

What is claimed is:

1 . A method implemented in a host on a computing device, the method comprising:
agreeing, with a guest on the computing device, on a name and a size for a shared memory, the host having an associated host memory on the computing device and the guest having an associated guest memory on the computing device; identifying an address space in the computing device to be the shared memory, the address space having at least the agreed upon size; allocating or assigning the address space to the shared memory; providing to the guest an indication of the address space that is the shared memory; and communicating data to and/or receiving data from the guest via the shared memory.

2 . The method as recited in claim 1 , the communicating comprising receiving data from a Web browser program running in the guest, the method further comprising displaying a user interface for the Web browser program using the received data.

3 . The method as recited in claim 1 , further comprising imposing one or more access restrictions on the shared memory, the one or more access restrictions including read access restrictions and/or write access restrictions.

4 . The method as recited in claim 3 , the imposing one or more access restrictions on the shared memory comprising giving the guest write only access to the shared memory and giving the host read only access to the shared memory.

5 . The method as recited in claim 1 , the shared memory being part of the guest memory.

6 . The method as recited in claim 1 , the shared memory being an additional address space accessible to the guest in addition to the memory space of the guest memory.

7 . The method as recited in claim 1 , the host comprising a host operating system on the computing device, and the guest comprising a process container or a virtualized container.

8 . A method implemented in a guest on a computing device, the method comprising:
agreeing, with a host on the computing device, on a name and a size for a shared memory, the host having an associated host memory on the computing device and the guest having an associated guest memory on the computing device; receiving, from the host, an indication of an address space in the computing device that is the shared memory, the address space having at least the agreed upon size; and communicating data to and/or receiving data from the guest via the shared memory.

9 . The method as recited in claim 8 , the communicating comprising rendering a surface to be displayed into the shared memory to allow the guest to display the surface as part of a user interface of the computing device.

10 . The method as recited in claim 8 , one or more access restrictions being imposed on the shared memory, the one or more access restrictions including read access restrictions and/or write access restrictions.

11 . The method as recited in 10 , the guest being given write only access to the shared memory and the host being given read only access to the shared memory.

12 . The method as recited in claim 8 , the shared memory being part of the guest memory.

13 . The method as recited in claim 8 , the shared memory being an additional address space accessible to the guest in addition to the memory space of the guest memory.

14 . The method as recited in claim 8 , the host comprising a host operating system on the computing device, and the guest comprising a process container or a virtualized container.

15 . A computing device comprising:
a processor; and a computer-readable storage medium having stored thereon multiple instructions that implement a host on the computing device and that, responsive to execution by the processor, cause the one or more processors to:
agree, with a guest on the computing device, on a name and a size for a shared memory, the host having an associated host memory on the computing device and the guest having an associated guest memory on the computing device;
identify an address space in the computing device to be the shared memory, the address space having at least the agreed upon size;
allocate or assign the address space to the shared memory;
provide to the guest an indication of the address space that is the shared memory; and
communicate data to and/or receive data from the guest via the shared memory.

16 . The computing device as recited in claim 15 , the multiple instructions further causing the processor to impose access restrictions on the shared memory, the access restrictions including giving the guest write only access to the shared memory.

17 . The computing device as recited in claim 16 , the access restrictions including giving the host read only access to the shared memory.

18 . The computing device as recited in claim 15 , the shared memory being part of the guest memory.

19 . The computing device as recited in claim 15 , the shared memory being an additional address space accessible to the guest in addition to the memory space of the guest memory.

20 . The computing device as recited in claim 15 , the host comprising a host operating system on the computing device, and the guest comprising a process container or a virtualized container on the computing device.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Iyigun Mehmet
• Kurjanowicz Matthew David
• De Kort Martijn
• Broas Kevin M
• Bak Yevgeniy M

Classifications

• G06F12/145

  the protection being virtual, e.g. for virtual blocks or segments before a translation mechanism · CPC title

• G06F2212/657

  Virtual address space management · CPC title

• G06F2212/656

  Address space sharing · CPC title

• G06F2212/1052

  Security improvement · CPC title

• G06F9/544

  Buffers; Shared memory; Pipes · CPC title