Relocatable Storage Protect Keys for System Main Memory

Abstract

Storage protection keys and system data share the same physical storage. The key region is dynamically relocatable by firmware. A Configuration Array is used to map the absolute address of the key region in to its physical address. The absolute address of keys can be fixed even though the physical location of the keys is relocated into a different region. A triple-etect double correct ECC scheme is used to protect keys. The ECC scheme is different from regular data in the storage and can be used to detect illegal access. Extra firmware and hardware is also designed to restrain customer's applications from directly accessing keys. With the key region being relocatable, the firmware could move the key region away from a known faulty area in a memory to improve system RAS. We also achieved the commonality objective that key memory device can use the same memory devices with other server systems that do not use keys.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

The subject matter which is regarded as the invention is particularly pointed out and distinctly claimed in the claims at the conclusion of the specification. The foregoing and other objects, features, and advantages of the invention are apparent from the following detailed description taken in conjunction with the accompanying drawings in which:

FIG. 1 illustrates a prior art arrangement with a fixed and separated key region;

FIG. 2 illustrates the invention of relocatable key region within the physical storage;

FIG. 3 illustrates one example of address mapping of the key region from absolute address to physical address; and

FIG. 4 illustrates a key data bit pattern.

The detailed description explains the preferred embodiments of the invention, together with advantages and features, by way of example with reference to the drawings.

DETAILED DESCRIPTION OF THE INVENTION

In the prior art arrangement of FIG. 1, SP data are entered from a key protect station i 00 in the memory controller 102 through a dedicated key memory interface 104 into a separate key storage region from the data protected by the SP data. The protected data are entered from a data ECC station 108 in the memory controller 102 through this data memory interface 110 into the system data region 112 containing data with Data ECC.

As opposed to the above described separated fixed/non-moveable memory physical location, to SP data in accordance with the present invention firmware can allocate any region within the physical storage to Storage Protection keys by using a configuration array which maps absolute addresses into physical addresses. This special SP key region is fully configurable, that can be allocated in any area within physical storage and can vary in size depending on the size of system main memory.

As shown in FIG. 2 a movable Key Region 200 with SP Key data and SP data ECC is contained in the same physical memory space 112 as the data it protects. The SP data and SP data ECC are also entered and accessible through the same memory interface 110 as the protected data. The SP data and the SP data ECC are provided from a key ECC station 202 in the memory controller.

In a computer system, key fails are in general more critical than system data failures. For this reason SP keys in the key region are protected by a different ECC scheme than the regular system data in the rest of the physical storage. In z9-109 server system, the SP key ECC uses triple detect and double correct matrix as compared to parity protection used in prior designs. As shown in FIG. 4 each physical key consists of 7 bits of data 402 and 9 bits of ECC bits of data. The key ECC code is different from the ECC code protecting the system data which resides in the rest of the physical storage. If a misbehaved operation tries to read SP keys with a regular data-read command, the ECC station 202 in the memory controller will flag an error and the SP keys will not be returned back to the requester.

With this invention, commonality is achieved with computer systems that do not have SP Keys. In the prior designs, separate DIMMs were dedicated to hold keys. The memory components that can hold keys were not compatible with generic memory design. With the key storage method introduced above, systems that do not require keys can share the same type of memory components as those that do.

System RAS is also enhanced by this design. In prior design, any failure in the key DIMM portion of memory subsystem disables the entire memory subsystem. With the new method, the key region can be relocated into a new region, if the region that holds keys have excessive error rate. The bad region can then be marked as unavailable so it will not be used again.

In the configuration of FIG. 2 where part of the physical storage memory is used to store keys, the starting address and the size of this area can be programmed by firmware. While SP keys and system data are accessed through the same memory interface, the memory controller will handle the key data differently from the system data because key data has a different a ECC protection arrangement than the system data.

In FIG. 3 illustrates how address mapping of the SP key region from absolute address to physical address can be performed using a configuration array 300. With the illustrated arrangement each segment in absolute address space 302 can be mapped into a segment in physical address space 304. With this mapping capability, the absolute address of the key region is fixed while the physical address of the key region can be changed to make the key region relocatable in any desired address o to n in physical storage.

The capabilities of the present invention can be implemented in software, firmware, hardware or some combination thereof.

As one example, one or more aspects of the present invention can be included in an article of manufacture (e.g., one or more computer program products) having, for instance, computer usable media. The media has embodied therein, for instance, computer readable program code means for providing and facilitating the capabilities of the present invention. The article of manufacture can be included as a part of a computer system or sold separately.

Additionally, at least one program storage device readable by a machine, tangibly embodying at least one program of instructions executable by the machine to perform the capabilities of the present invention can be provided.

The flow diagrams depicted herein are just examples. There may be many variations to these diagrams or the steps (or operations) described therein without departing from the spirit of the invention. For instance, the steps may be performed in a differing order, or steps may be added, deleted or modified. All of these variations are considered a part of the claimed invention.

While the preferred embodiment to the invention has been described, it will be understood that those skilled in the art, both now and in the future, may make various improvements and enhancements which fall within the scope of the claims which follow. These claims should be construed to maintain the proper protection for the invention first described.

Claims

1. A method of integrating storage protection (SP) key data for protecting memory with the memory data, comprising the steps of: providing a plurality of like physical storage segments for storing both the memory data and the SP data in a main memory storage of a memory subsystem,assigning absolute addresses to the SP data andproviding a changeable physical SP Key region in some of said physical storage elements by using physical addresses mapped from the absolute addresses so that the physical addresses of SP data can be changed with main memory storage reconfigurations.

2. The method according to claim 1, wherein said step of assigning the physical SP Key region uses a Storage Controller configuration array which maps absolute addresses for said SP Key region into the physical addresses.

3. The method according to claim 1 wherein said step of assigning is accomplished by using firmware to assign the SP Key region anywhere within said main memory storage.

4. The method according to claim 1 wherein said step of assigning is accomplished by executing firmware to assign the SP Key region to relocate the SP Key region in said main memory storage from another storage region.

5. The method according to claim 4 wherein said step of assigning the SP Key region to a relocated storage region for SP Keys occurs after there has been excessive DRAM errors identified in the original said SP Key region of said main memory storage.

6. The method according to claim 5 wherein said relocation of a storage region for SP Keys occurs after said excessive DRAM errors are identified in the original said SP Key region of said main memory storage during IML startup testing of said memory subsystem.

7. The method according to claim 1 wherein said SP Key region can be physically moved to a different main memory storage location along with integrated SP Keys of said SP Key region.

8. The method according to claim 1 wherein said main memory storage employs DDR SDRAMs and said memory subsystem provides a common interface through a main storage controller to said main memory storage for both data and SP Keys, and during startup a memory selftest runs against the entire main memory storage of said memory subsystem to report possible errors found in testing of all memory storage elements in said main memory storage which includes SP Key regions.

9. The method according to claim 8 wherein said step of assigning a physical SP Key region uses an Storage Controller configuration array which maps absolute addresses for said SP Key region into physical addresses, and wherein the main storage controller and a key cache controller have programmable addresses within main storage which identify a relocatable physical segment that is reserved as a relocatable SP Key region for said assigning step.

10. The method according to claim 9 wherein said step of assigning is accomplished by executing firmware to assign the SP Key region to a relocatable physical address for the SP Key region in said main memory storage from another storage region after there has been excessive DRAM errors identified in the original said SP Key region of said main memory storage, and during IML startup testing of said memory subsystem said SP Key region is physically moved to a different main memory storage along with integrated SP Keys of said SP Key region to relocate the SP Key region in said main memory storage.

11. A memory where key protection (SP) data is to be stored with the memory data protected by the SP data, comprising: a plurality of like physical storage segments for storing both the main memory data and the SP data together in a main memory storage of a memory subsystem,apparatus for providing the SP data with absolute addresses, andfirmware for providing physical address for a physical SP Key region in some of said physical storage elements by mapping the physical address from the absolute address.

12. The memory according to claim 11, wherein the firmware for assigning a physical SP Key region uses a Storage Controller configuration array which maps the absolute address for said SP Key region into the physical address.

13. The memory according to claim 11 wherein the firmware is capable of placing the SP Key region anywhere within said memory storage.

14. The memory according to claim 11 wherein said firmware to assign the SP Key region can relocate the SP Key region in said main memory storage from another storage region of the main memory storage.

15. The memory according to claim 11 wherein said SP Key region can be physically moved to a different main memory storage along with integrated SP Keys of said SP Key region.

16. The memory according to claim 11 wherein said main memory storage employs DDR SDRAMs and said memory subsystem provides a common interface through a main storage controller to said main memory storage for both data and SP Keys, and during startup a memory selftest runs against the entire memory storage of said memory subsystem to report possible errors found in testing of all memory storage elements in said main memory storage which includes SP Key regions.

17. The main memory of claim 12 further comprising, a plurality of DRAMs for providing said memory elements and a register buffer for said DRAMs, said registered buffer providing ECC protection for the contents of said DRAMs and their memory elements.

18. The main memory storage of claim 11 including ECC protection for SP Keys stored in the SP key region of said main memory storage which is different from ECC protection for the main memory data.

19. The main memory storage of claim 18 wherein said register buffer provides a triple detect and double correct ECC matrix for SP Keys in said main memory storage.

20. The main memory storage of claim 19 wherein a DIM memory module provides said plurality of DRAMs and a register buffer for the memory module for buffering data and SP Keys for said DRAMs and for performing ECC checking of said data and SP Keys.