利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

15 条记录 (耗时 0.022 秒)

    Virtualized shared security engine and creation of a protected zone
    11.
    发明授权
    Virtualized shared security engine and creation of a protected zone 有权
    虚拟化的共享安全引擎和创建保护区

    公开(公告)号：US07634650B1

    公开(公告)日：2009-12-15

    申请号：US11184306

    申请日：2005-07-18

    申请人： Shreyas Shah ,  Naveed Cochinwala ,  Greg Lockwood ,  Subramaniam Vinod

    发明人： Shreyas Shah ,  Naveed Cochinwala ,  Greg Lockwood ,  Subramaniam Vinod

    IPC分类号： G06F9/00

    CPC分类号： H04L49/70 ,  G06F3/0601 ,  G06F3/0635 ,  G06F3/0662 ,  G06F3/0664 ,  G06F3/067 ,  G06F11/2005 ,  G06F13/12 ,  G06F13/128 ,  G06F13/4022 ,  G06F13/42 ,  G06F13/4221 ,  G06F2003/0697 ,  H04L12/4641 ,  H04L41/04 ,  H04L49/00 ,  H04L49/357 ,  H04L67/1097

    摘要： Methods and apparatus are provided for creating a secure zone having multiple servers connected to a resource virtualization switch through I/O bus interfaces, such as PCI Express or PCI-AS. Servers connected to the resource virtualization switch using I/O bus interfaces share access to one or more virtualized cryptographic accelerators associated with the resource virtualization switch. Applications on a server or system images running on hypervisor inside server can use cryptographic accelerators associated with the resource virtualization switch as though the resources were included in the server itself. Connections between multiple servers and the resource virtualization switch are secure non-broadcast connections. Data provided to a resource virtualization switch can be cryptographically processed using one or more shared and virtualized cryptographic accelerators.

    摘要翻译： 提供了用于创建具有通过I / O总线接口（例如PCI Express或PCI-AS）连接到资源虚拟化交换机的多个服务器的安全区域的方法和装置。 使用I / O总线接口连接到资源虚拟化交换机的服务器共享对与资源虚拟化交换机相关联的一个或多个虚拟化加密加速器的访问。 在服务器或系统上运行的虚拟机管理程序上的应用程序中的应用程序可以使用与资源虚拟化交换机相关联的加密加速器，就像资源包含在服务器本身中一样。 多个服务器和资源虚拟化交换机之间的连接是安全的非广播连接。 提供给资源虚拟化交换机的数据可以使用一个或多个共享和虚拟化加密加速器进行加密处理。

    Routing traffic through a virtual router-based network switch
    12.
    发明授权
    Routing traffic through a virtual router-based network switch 有权
    通过基于虚拟路由器的网络交换机路由流量

    公开(公告)号：US07522604B2

    公开(公告)日：2009-04-21

    申请号：US11671462

    申请日：2007-02-05

    申请人： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

    发明人： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

    IPC分类号： H04L12/28

    CPC分类号： H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

    摘要： Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.

    摘要翻译： 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，用于在路由器中路由分组的方法包括建立流数据结构，其识别路由器中的虚拟路由器的分组流。 当接收到分组时，在与分组相关联的至少一个分组报头的子集与流数据结构的子集之间执行比较。 如果分组报头的子集与流数据结构的子集匹配，则该分组可以被硬件加速到网络接口。 否则，可以将分组丢弃或转发到通用处理器进行处理。

    Routing traffic through a virtual router-based network switch
    14.
    发明授权
    Routing traffic through a virtual router-based network switch 有权
    通过基于虚拟路由器的网络交换机路由流量

    公开(公告)号：US08111690B2

    公开(公告)日：2012-02-07

    申请号：US12260524

    申请日：2008-10-29

    申请人： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

    发明人： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

    IPC分类号： H04L12/56

    CPC分类号： H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

    摘要： Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

    摘要翻译： 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，建立流数据结构，其识别与基于虚拟路由器的网络设备中的多个虚拟路由器相关联的当前分组流。 当基于虚拟路由器的网络设备接收到传入分组时，通过基于与输入分组相关联的报头访问流数据结构来确定输入分组是否与当前分组流相关联。 如果确定进入的分组与当前分组流相关联，则进入的分组是经由基于虚拟路由器的网络设备的网络接口的硬件转发的，而不是由基于虚拟路由器的网络设备的处理器进行干预 传入的分组被转发到处理器上的软件用于流学习。