Granted Patent B2

US 12,061,911 · App. 17/192,026 · Granted Aug 13, 2024

Inventors: Sumanth Vidyadhara (Bangalore, IN); Shubham Kumar (Chakradharpur, IN)

Assignee: Dell Products L.P.

G06F9/4416G06F9/45533G06F9/45558G06F2009/45587

Abstract

Claims (32)

1. An information handling system comprising:

a processor; and

a basic input/output system configured to be the first code executed by the processor when the information handling system is booted and to initialize components of the information handling system into a known state, the basic input/output system further configured to implement a virtual machine monitor, the virtual machine monitor configured to:

launch a memory protection driver configured to:

find a range of contiguous memory in a reserved portion of a memory; and

apply no-execute and read-only attributes to the range of contiguous memory to configure the range of contiguous memory as a protected and contiguous range of reserved memory;

store a network boot process image to the protected and contiguous range of reserved memory to isolate information handling system resources allocated to a network boot process from resources of the information handling system not allocated to the network boot process.

2. The information handling system of claim 1 , wherein the information handling system resources allocated to the network boot process include hardware resources of network boot components.

3. The information handling system of claim 2 , wherein the virtual machine monitor is further configured to generate an exception if a process other than the network boot process attempts to access the contiguous range of reserved memory.

4. The information handling system of claim 3 , wherein the virtual machine monitor is further configured to handle the exception to prevent the process other than the network boot process from accessing the contiguous range of reserved memory.

5. The information handling system of claim 1 , wherein the network boot process comprises a Hypertext Transfer Protocol boot process.

6. A method comprising, in a basic input/output system configured to be the first code executed by a processor when an information handling system is booted and to initialize components of the information handling system into a known state, implementing a virtual machine monitor, the virtual machine monitor configured to:

launch a memory protection driver configured to:

find a range of contiguous memory in a reserved portion of a memory; and

apply no-execute and read-only attributes to the range of contiguous memory to configure the range of contiguous memory as a protected and contiguous range of reserved memory;

store a network boot process image to the protected and contiguous range of reserved memory to isolate information handling system resources allocated to a network boot process from resources of the information handling system not allocated to the network boot process.

7. The method of claim 6 , wherein the wherein the information handling system resources allocated to the network boot process include hardware resources of network boot components.

8. The method of claim 7 , wherein the virtual machine monitor is further configured to generate an exception if a process other than the network boot process attempts to access the contiguous range of reserved memory.

9. The method of claim 8 , wherein the virtual machine monitor is further configured to handle the exception to prevent the process other than the network boot process from accessing the contiguous range of reserved memory.

10. The method of claim 9 , wherein the network boot process comprises a Hypertext Transfer Protocol boot process.

11. An article of manufacture comprising:

a non-transitory computer-readable medium; and

computer-executable instructions carried on the computer-readable medium, the instructions readable by a processing device, the instructions, when read and executed, for causing the processing device to, in a basic input/output system configured to identify, test, and/or initialize information handling resources of an information handling system:

in a basic input/output system configured to be the first code executed by a processor when an information handling system is booted and to initialize components of the information handling system into a known state, implement a virtual machine monitor, the virtual machine monitor configured to:

launch a memory protection driver configured to:

find a range of contiguous memory in a reserved portion of a memory; and

apply no-execute and read-only attributes to the range of contiguous memory to configure the range of contiguous memory as a protected and contiguous range of reserved memory;

store a network boot process image to a protected and contiguous range of reserved memory to isolate information handling system resources allocated to a network boot process from other resources of the information handling system not allocated to the network boot process.

12. The article of claim 11 , wherein the wherein the information handling system resources allocated to the network boot process include hardware resources of network boot components.

13. The article of claim 12 , wherein the virtual machine monitor is further configured to generate an exception if a process other than the network boot process attempts to access the contiguous range of reserved memory.

14. The article of claim 13 , wherein the virtual machine monitor is further configured to handle the exception to prevent the process other than the network boot process from accessing the contiguous range of reserved memory.

15. The article of claim 11 , wherein the network boot process comprises a Hypertext Transfer Protocol boot process.

Assignments (10)