Computer system data locking method, involves controlling memory allocation units by memory manager, and denying access to allocation unit if identity of component of operating system is not identical to owner

摘要

The method involves separating data based on an owner of a memory allocation unit and encryption of the data. Memory allocation is performed by a memory manager based on a request by a component of an operating system. The memory allocation units are controlled by the memory manager. The manager denies access to the allocation unit if an identity of the component is not identical to the owner of the allocation unit. The memory manager verifies by using a secret related to each owner and key derived from the secret are used.