Timer offsetting mechanism in a virtual machine environment
    61.
    发明申请
    Timer offsetting mechanism in a virtual machine environment 有权
    虚拟机环境中的定时器偏移机制

    公开(公告)号:US20060130059A1

    公开(公告)日:2006-06-15

    申请号:US10976970

    申请日:2004-10-29

    IPC分类号: G06F9/455

    CPC分类号: G06F9/45533

    摘要: In one embodiment, a method includes receiving a request to transition control to a virtual machine (VM) from a virtual machine monitor (VMM), calculating an offset value, receiving, during operation of the VM, a request for a current value of the timer, adjusting the current value of the timer based on the offset value, and providing the adjusted timer value to the VM.

    摘要翻译: 在一个实施例中,一种方法包括从虚拟机监视器(VMM)接收向虚拟机(VM)转换控制的请求,计算偏移值,在VM的操作期间接收对当前值的请求 定时器,基于偏移值调整定时器的当前值,并将调整的定时器值提供给VM。

    Caching support for direct memory access address translation
    65.
    发明授权
    Caching support for direct memory access address translation 有权
    缓存支持直接内存访问地址转换

    公开(公告)号:US07334107B2

    公开(公告)日:2008-02-19

    申请号:US10956206

    申请日:2004-09-30

    IPC分类号: G06F12/00 G06F13/28

    摘要: An embodiment of the present invention is a technique to provide cache support for direct memory access address translation. A cache structure stores cached entries used in address translation of a guest physical address to a host physical address. The guest physical address corresponds to a guest domain identified by a guest domain identifier in an input/output (I/O) transaction requested by an I/O device. A register stores an invalidating domain identifier identifying an invalidating domain and an indicator indicating invalidating an entry in the cached entries having a tag.

    摘要翻译: 本发明的实施例是提供用于直接存储器访问地址转换的高速缓存支持的技术。 高速缓存结构将客户物理地址的地址转换中使用的缓存条目存储到主机物理地址。 访客物理地址对应于由I / O设备请求的输入/输出(I / O)事务中的来宾域标识符标识的访客域。 寄存器存储标识无效域的无效域标识符和指示使具有标签的缓存条目中的条目无效的指示符。

    Fault processing for direct memory access address translation
    69.
    发明授权
    Fault processing for direct memory access address translation 有权
    直接存储器访问地址转换的故障处理

    公开(公告)号:US07340582B2

    公开(公告)日:2008-03-04

    申请号:US10956630

    申请日:2004-09-30

    IPC分类号: G06F12/00 G06F13/00

    摘要: An embodiment of the present invention is a technique to process faults in a direct memory access address translation. A register set stores global control or status information for fault processing of a fault generated by an input/output (I/O) transaction requested by an I/O device. An address translation structure translates a guest physical address to a host physical address. The guest physical address corresponds to the I/O transaction and is mapped to a domain. The address translation structure has at least an entry associated with the domain and domain-specific control information for the fault processing.

    摘要翻译: 本发明的一个实施例是一种在直接存储器访问地址转换中处理故障的技术。 寄存器组存储由I / O设备请求的输入/输出(I / O)事务产生的故障的故障处理的全局控制或状态信息。 地址转换结构将访客物理地址转换为主机物理地址。 访客物理地址对应于I / O事务,并映射到域。 地址转换结构至少具有与域相关联的条目和用于故障处理的特定于域的控制信息。

    Apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment
    70.
    发明申请
    Apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment 有权
    在多处理器环境中单方面加载安全操作系统的装置和方法

    公开(公告)号:US20070192577A1

    公开(公告)日:2007-08-16

    申请号:US11340181

    申请日:2006-01-24

    IPC分类号: G06F15/177

    CPC分类号: G06F21/57

    摘要: An apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment are described. The method includes disregarding a received load secure region instruction when a currently active load secure region operation is detected. Otherwise, a memory protection element is directed, in response to the received load secure region instruction, to form a secure memory environment. Once directed, unauthorized read/write access to one or more protected memory regions are prohibited. Finally, a cryptographic hash value of the one or more protected memory regions is stored within a digest information repository as a secure software identification value. Once stored, outside agents may request access to a digitally signed software identification value to establish security verification of secure software within the secure memory environment.

    摘要翻译: 描述了在多处理器环境内单方面加载安全操作系统的装置和方法。 该方法包括当检测到当前活动的负载安全区域操作时忽略接收到的负载安全区域指令。 否则,响应于接收到的负载安全区域指令,引导存储器保护元件以形成安全存储器环境。 一旦定向,就禁止对一个或多个受保护的存储器区域进行未经授权的读/写访问。 最后,一个或多个受保护的存储器区域的加密散列值作为安全的软件识别值存储在摘要信息库中。 一旦存储,外部代理可以请求访问数字签名的软件标识值以建立安全存储器环境内的安全软件的安全验证。