Apparatus, system and method for controlling access to facilities based on usage classes
    9.
    发明授权
    Apparatus, system and method for controlling access to facilities based on usage classes 有权
    基于使用类别控制对设施的访问的装置,系统和方法

    公开(公告)号:US07010633B2

    公开(公告)日:2006-03-07

    申请号:US10411447

    申请日:2003-04-10

    IPC分类号: G06F13/14 G06F15/173

    CPC分类号: G06F12/1491

    摘要: An apparatus, system and method for controlling access to facilities based on usage class of a requestor are provided. With the apparatus, system and method, a two level protection mechanism is provided for protecting host channel adapter (HCA) facilities from unauthorized access. With the present invention, a first level of access is provided through virtual address translation and a mechanism for determining if the requestor of access may access a system memory address space page associated with a real address to which the virtual address maps. A second level of access is provided through the allocation of usage classes and determining a required usage class for accessing an HCA facility.

    摘要翻译: 提供了一种用于基于请求者的使用类来控制对设施的访问的装置,系统和方法。 利用设备,系统和方法,提供了一种保护主机通道适配器(HCA)设施免受未经授权访问的两级保护机制。 利用本发明,通过虚拟地址转换提供第一级别的访问,以及用于确定访问请求者是否可访问与虚拟地址映射到的实际地址相关联的系统存储器地址空间页面的机制。 通过分配使用类别并确定访问HCA设施所需的使用类别来提供第二级别的访问。

    System, method, and product for managing data transfers in a network

    公开(公告)号:US07149220B2

    公开(公告)日:2006-12-12

    申请号:US10132456

    申请日:2002-04-25

    IPC分类号: H04L12/56

    摘要: A method, system, and product in a data processing system are disclosed for managing data transmitted from a first end node to a second end node included in the data processing system. A logical connection is established between the first end node and the second end node prior to transmitting data between the end nodes. An instance number is associated with this particular logical connection. The instance number is included in each packet transmitted between the end nodes while this logical connection remains established. The instance number remains constant during this logical connection. The instance number is altered, such as by incrementing it, each time a logical connection between these end nodes is reestablished. Thus, each packet is associated with a particular instance of the logical connection. When a packet is received, the instance number included in the packet may be used to determine whether the packet is a stale packet transmitted during a previous logical connection between these end nodes.