SCHEDULING AND MANAGEMENT IN A PERSONAL DATACENTER
    12.
    发明申请
    SCHEDULING AND MANAGEMENT IN A PERSONAL DATACENTER 有权
    个人数据库中的调度和管理

    公开(公告)号:US20120159506A1

    公开(公告)日:2012-06-21

    申请号:US12972563

    申请日:2010-12-20

    IPC分类号: G06F9/46

    摘要: A personal datacenter system is described herein that provides a framework for leveraging multiple heterogeneous computers in a dynamically changing environment together as an ad-hoc cluster for performing parallel processing of various tasks. A home environment is much more heterogeneous and dynamic than a typical datacenter, and typical datacenter scheduling strategies do not work well for these types of small clusters. Machines in a home are likely to be powered on and off, be removed and taken elsewhere, and be connected by an ad-hoc network topology with a mix of wired and wireless technologies. The personal data center system provides components to overcome these differences. The system identifies a dynamically available set of machines, characterizes their performance, discovers the network topology, and monitors the available communications bandwidth between machines. This information is then used to compute an efficient execution plan for data-parallel and/or High Performance Computing (HPC)-style applications.

    摘要翻译: 本文描述了个人数据中心系统,其提供了用于在动态变化的环境中一起作为用于执行各种任务的并行处理的自组群的多个异构计算机的框架。 家庭环境比典型的数据中心更加异构和动态,而典型的数据中心调度策略对于这些类型的小型集群来说并不奏效。 家庭中的机器可能被开启和关闭,被移除并在其他地方使用,并通过有线和无线技术的组合通过自组织网络拓扑连接。 个人数据中心系统提供组件来克服这些差异。 系统识别动态可用的机器集,表征其性能,发现网络拓扑,并监视机器之间可用的通信带宽。 然后,该信息用于计算数据并行和/或高性能计算(HPC)应用程序的高效执行计划。

    DISTRIBUTED DETECTION WITH DIAGNOSIS
    13.
    发明申请
    DISTRIBUTED DETECTION WITH DIAGNOSIS 审中-公开
    分诊检测与诊断

    公开(公告)号:US20080103729A1

    公开(公告)日:2008-05-01

    申请号:US11554980

    申请日:2006-10-31

    IPC分类号: G06F19/00 G06F17/40 G06F11/30

    摘要: Activity models are maintained on a plurality of computers on a network. When a user or a particular activity model at a computer discovers an error, it may query its own activity model to determine a possible source of the error. If it is determined to not be the likely source of the error, the activity model queries the activity models of those computers on the network that it depends on. These activity models may then query the activity models of the computers that their particular host computer depends on and so forth. Ultimately the results of these activity model queries may be used to diagnose the likely source of the error and may be presented to the requesting user as a report.

    摘要翻译: 在网络上的多台计算机上维护活动模型。 当用户或计算机上的特定活动模型发现错误时,它可以查询其自己的活动模型以确定错误的可能来源。 如果确定不是错误的可能来源,则活动模型会查询网络上依赖的那些计算机的活动模型。 然后,这些活动模型可以查询其特定主机依赖的计算机的活动模型等等。 最终,这些活动模型查询的结果可以用于诊断错误的可能来源,并且可以作为报告呈现给请求用户。

    Probe insertion via background virtual machine

    公开(公告)号:US10203974B2

    公开(公告)日:2019-02-12

    申请号:US12972531

    申请日:2010-12-20

    摘要: A performance monitoring system is described herein that works with a hypervisor to reserve resources outside of a virtual machine to monitor performance of an application running within the virtual machine. The application receives the guaranteed amount of resources specified by the virtual machine's specifications, and the monitoring consumes resources not associated with the virtual machine. The application running in the virtual machine is already isolated by the hypervisor from the physical machine, and thus additional burdens on the physical machine that allow the hypervisor to continue meeting guarantees to the virtual machine will not impact application performance. The performance monitoring system provides instrumentation of deployed applications that information technology (IT) personnel can dynamically turn on and off without affecting the performance of the deployed application. The performance monitoring system provides a robust framework for monitoring production applications without affecting the performance of those applications during execution.

    Tamper proof location services
    15.
    发明授权
    Tamper proof location services 有权
    防篡改位置服务

    公开(公告)号:US08560839B2

    公开(公告)日:2013-10-15

    申请号:US12972534

    申请日:2010-12-20

    IPC分类号: H04L29/06

    摘要: A secure location system is described herein that leverages location-based services and hardware to make access decisions. Many mobile computers have location devices, such as GPS. They also have a trusted platform module (TPM) or other security device. Currently GPS location data is made directly accessible to untrusted application code using a simple protocol. The secure location system provides a secure mechanism whereby the GPS location of a computer at a specific time can be certified by the operating system kernel and TPM. The secure location system logs user activity with a label indicating the geographic location of the computing device at the time of the activity. The secure location system can provide a difficult to forge, time-stamped location through a combination of kernel-mode GPS access and TPM security hardware. Thus, the secure location system incorporates secure location information into authorization and other operating system decisions.

    摘要翻译: 本文描述了利用基于位置的服务和硬件来进行访问决定的安全定位系统。 许多移动计算机具有诸如GPS的定位设备。 它们还具有可信平台模块(TPM)或其他安全设备。 目前,GPS位置数据可以使用简单的协议直接访问不受信任的应用程序代码。 安全定位系统提供了一种安全机制,由此可以通过操作系统内核和TPM来认证计算机在特定时间的GPS位置。 安全位置系统使用指示活动时计算设备的地理位置的标签记录用户活动。 安全定位系统可以通过内核模式GPS访问和TPM安全硬件的组合来提供难以伪造的时间戳位置。 因此,安全定位系统将安全位置信息合并到授权和其他操作系统决策中。

    PROBE INSERTION VIA BACKGROUND VIRTUAL MACHINE
    16.
    发明申请
    PROBE INSERTION VIA BACKGROUND VIRTUAL MACHINE 审中-公开
    通过背景虚拟机进行探测

    公开(公告)号:US20120159454A1

    公开(公告)日:2012-06-21

    申请号:US12972531

    申请日:2010-12-20

    IPC分类号: G06F9/44 G06F9/455

    摘要: A performance monitoring system is described herein that works with a hypervisor to reserve resources outside of a virtual machine to monitor performance of an application running within the virtual machine. The application receives the guaranteed amount of resources specified by the virtual machine's specifications, and the monitoring consumes resources not associated with the virtual machine. The application running in the virtual machine is already isolated by the hypervisor from the physical machine, and thus additional burdens on the physical machine that allow the hypervisor to continue meeting guarantees to the virtual machine will not impact application performance. The performance monitoring system provides instrumentation of deployed applications that information technology (IT) personnel can dynamically turn on and off without affecting the performance of the deployed application. The performance monitoring system provides a robust framework for monitoring production applications without affecting the performance of those applications during execution.

    摘要翻译: 本文描述了一种与虚拟机管理程序一起使用的性能监视系统,以在虚拟机之外预留资源以监视在虚拟机内运行的应用程序的性能。 应用程序接收虚拟机规范指定的保证资源量,监视消耗与虚拟机无关的资源。 在虚拟机中运行的应用程序已经由虚拟机管理程序从物理机器隔离,因此允许管理程序继续满足虚拟机保证的物理机器上的额外负担不会影响应用程序的性能。 性能监视系统提供部署应用程序的测量,信息技术(IT)人员可以动态地打开和关闭,而不会影响部署的应用程序的性能。 性能监控系统为监控生产应用提供了一个强大的框架,而不会在执行过程中影响到这些应用程序的性能。

    Software Fault Isolation Using Byte-Granularity Memory Protection
    17.
    发明申请
    Software Fault Isolation Using Byte-Granularity Memory Protection 有权
    使用字节粒度内存保护的软件故障隔离

    公开(公告)号:US20110138476A1

    公开(公告)日:2011-06-09

    申请号:US12633326

    申请日:2009-12-08

    IPC分类号: G06F21/22

    摘要: Software fault isolation methods using byte-granularity memory protection are described. In an embodiment, untrusted drivers or other extensions to a software system are run in a separate domain from the host portion of the software system, but share the same address space as the host portion. Calls between domains are mediated using an interposition library and access control data is maintained for substantially each byte of relevant virtual address space. Instrumentation added to the untrusted extension at compile-time, before load-time, or at runtime and added by the interposition library enforces the isolation between domains, for example by adding access right checks before any writes or indirect calls and by redirecting function calls to call wrappers in the interposition library. The instrumentation also updates the access control data to grant and revoke access rights on a fine granularity according to the semantics of the operation being invoked.

    摘要翻译: 描述了使用字节粒度内存保护的软件故障隔离方法。 在一个实施例中,软件系统的不受信任的驱动程序或其他扩展在与软件系统的主机部分分开的域中运行,但是与主机部分共享相同的地址空间。 域之间的调用使用插入库进行调用,并且访问控制数据基本上维持相关虚拟地址空间的每个字节。 在编译期间,在加载时间之前或在运行时添加到不可信扩展的仪器,在插入库中添加的这些扩展可以强制实现域之间的隔离,例如在任何写入或间接调用之前添加访问权限检查,并通过重定向函数调用 在插页库中调用包装器。 仪器还会更新访问控制数据,根据正在调用的操作的语义,以精细粒度授予和撤销访问权限。

    Method and system for measuring load and capacity on a variable capacity channel
    18.
    发明授权
    Method and system for measuring load and capacity on a variable capacity channel 有权
    用于测量可变容量通道上的负载和容量的方法和系统

    公开(公告)号:US07296083B2

    公开(公告)日:2007-11-13

    申请号:US10187043

    申请日:2002-06-28

    IPC分类号: G06F15/16

    摘要: A method and system are presented for determining the loading and capacity on a variable capacity channel by measuring the times at which packets are enqueued for transmission, and have their transmission completed, or by measuring these times in addition to the arrival times of the packets. The times may be measured using a device driver or other operating system component. The measurement may be performed in a centralized or distributed fashion for multi-access or point to point channels.

    摘要翻译: 提出了一种方法和系统,用于通过测量分组入队传输的时间并完成传输,或通过测量这些时间以及分组的到达时间来确定可变容量信道上的负载和容量。 时间可以使用设备驱动程序或其他操作系统组件进行测量。 测量可以以集中或分布的方式对多路访问或点对点信道进行。

    Distributed network management
    20.
    发明授权
    Distributed network management 有权
    分布式网络管理

    公开(公告)号:US08077718B2

    公开(公告)日:2011-12-13

    申请号:US11203011

    申请日:2005-08-12

    IPC分类号: H04L12/28

    摘要: Hosts or end-systems residing at the edges of a network gather data about the traffic they transmit into and receive from the network. The network's routing protocol (typically a link-state protocol such as OSPF) is monitored and routing data or packets are used to recover the network's current status and topology. This data can be collected, fused, and maintained and a platform, preferably distributed, can be provided to query the data, thus enabling a variety of network management applications.

    摘要翻译: 驻留在网络边缘的主机或终端系统收集关于它们从网络发送和接收的流量的数据。 监控网络的路由协议(通常是链路状态协议,如OSPF),并使用路由数据或数据包来恢复网络的当前状态和拓扑。 可以收集,融合和维护该数据,并且可以提供优选分布的平台来查询数据,从而实现各种网络管理应用。