Direct access to low-latency memory
    1.
    发明授权
    Direct access to low-latency memory 有权
    直接访问低延迟内存

    公开(公告)号:US07594081B2

    公开(公告)日:2009-09-22

    申请号:US11024002

    申请日:2004-12-28

    IPC分类号: G06F12/00 G06F13/00 G06F13/28

    摘要: A content aware application processing system is provided for allowing directed access to data stored in a non-cache memory thereby bypassing cache coherent memory. The processor includes a system interface to cache coherent memory and a low latency memory interface to a non-cache coherent memory. The system interface directs memory access for ordinary load/store instructions executed by the processor to the cache coherent memory. The low latency memory interface directs memory access for non-ordinary load/store instructions executed by the processor to the non-cache memory, thereby bypassing the cache coherent memory. The non-ordinary load/store instruction can be a coprocessor instruction. The memory can be a low-latency type memory. The processor can include a plurality of processor cores.

    摘要翻译: 提供内容感知应用处理系统,用于允许定向访问存储在非高速缓冲存储器中的数据,从而绕过高速缓存一致存储器。 该处理器包括用于缓存相干存储器的系统接口和用于非高速缓存一致记忆体的低延迟存储器接口。 系统接口将由处理器执行的普通加载/存储指令的存储器访问指向高速缓存一致存储器。 低延迟存储器接口将由处理器执行的非普通加载/存储指令的存储器访问引导到非高速缓存存储器,从而绕过高速缓存一致存储器。 非普通的加载/存储指令可以是协处理器指令。 存储器可以是低延迟型存储器。 处理器可以包括多个处理器核。

    Deterministic finite automata (DFA) instruction
    3.
    发明授权
    Deterministic finite automata (DFA) instruction 有权
    确定性有限自动机(DFA)指令

    公开(公告)号:US08301788B2

    公开(公告)日:2012-10-30

    申请号:US11220899

    申请日:2005-09-07

    CPC分类号: G06F9/30003 H04L1/0045

    摘要: A computer-readable instruction is described for traversing deterministic finite automata (DFA) graphs to perform a pattern search in the in-coming packet data in real-time. The instruction includes one or more pre-defined fields. One of the fields includes a DFA graph identifier for identifying one of several previously-stored DFA graphs. Another one of the fields includes an input reference for identifying input data to be processed using the identified DFA graphs. Yet another one of the fields includes an output reference for storing results generated responsive to the processed input data. The instructions are forwarded to a DFA engine adapted to process the input data using the identified DFA graph and to provide results as instructed by the output reference.

    摘要翻译: 描述了一种用于遍历确定性有限自动机(DFA)图的计算机可读指令,以便在即将进行的分组数据中实时地执行模式搜索。 该指令包括一个或多个预定义字段。 其中一个字段包括用于标识几个先前存储的DFA图形之一的DFA图形标识符。 另一个领域包括用于使用所识别的DFA图形来识别要处理的输入数据的输入参考。 另一个领域包括用于存储响应于经处理的输入数据生成的结果的输出参考。 这些指令被转发到适用于使用识别的DFA图处理输入数据的DFA引擎,并根据输出参考的指示提供结果。

    IPsec performance optimization
    4.
    发明授权
    IPsec performance optimization 有权
    IPsec性能优化

    公开(公告)号:US07814310B2

    公开(公告)日:2010-10-12

    申请号:US10411967

    申请日:2003-04-12

    IPC分类号: H04L29/06

    摘要: A method and apparatus for optimizing IPsec processing by providing execution units with windowing data during prefetch and managing coherency of security association data by management of security association accesses. Providing execution units with windowing data allows initial parallel processing of IPsec packets. The security association access ordering apparatus serializes access to the dynamic section of security association data according to packet order arrival while otherwise allowing parallel processing of the IPsec packet by multiple execution units in a security processor.

    摘要翻译: 一种通过在预取期间向执行单元提供窗口数据并通过管理安全关联访问来管理安全关联数据的一致性来优化IPsec处理的方法和装置。 为执行单元提供窗口数据允许IPsec数据包的初始并行处理。 安全关联访问排序装置根据分组顺序序列化对安全关联数据的动态部分的访问,而另外允许在安全处理器中由多个执行单元并行处理IPsec分组。

    Selective replication of data structures
    6.
    发明授权
    Selective replication of data structures 有权
    数据结构的选择性复制

    公开(公告)号:US07558925B2

    公开(公告)日:2009-07-07

    申请号:US11335189

    申请日:2006-01-18

    IPC分类号: G06F12/02

    摘要: Methods and apparatus are provided for selectively replicating a data structure in a low-latency memory. The memory includes multiple individual memory banks configured to store replicated copies of the same data structure. Upon receiving a request to access the stored data structure, a low-latency memory access controller selects one of the memory banks, then accesses the stored data from the selected memory bank. Selection of a memory bank can be accomplished using a thermometer technique comparing the relative availability of the different memory banks. Exemplary data structures that benefit from the resulting efficiencies include deterministic finite automata (DFA) graphs and other data structures that are loaded (i.e., read) more often than they are stored (i.e., written).

    摘要翻译: 提供了用于在低延迟存储器中选择性地复制数据结构的方法和装置。 存储器包括被配置为存储相同数据结构的复制副本的多个单独存储体。 在接收到访问所存储的数据结构的请求时,低延迟存储器访问控制器选择存储体之一,然后从所选存储体存取所存储的数据。 可以使用比较不同存储体的相对可用性的温度计技术来实现存储体的选择。 受益于所产生的效率的示例性数据结构包括确定性有限自动机(DFA)图和与它们被存储(即,写入)相比更加加载(即读)的其他数据结构。

    METHOD AND APPARATUS FOR REDUCING HOST OVERHEAD IN A SOCKET SERVER IMPLEMENTATION
    7.
    发明申请
    METHOD AND APPARATUS FOR REDUCING HOST OVERHEAD IN A SOCKET SERVER IMPLEMENTATION 有权
    用于减少插座服务器实现中的主机的方法和装置

    公开(公告)号:US20100023626A1

    公开(公告)日:2010-01-28

    申请号:US12574263

    申请日:2009-10-06

    IPC分类号: G06F15/16

    摘要: A network application executing on a host system provides a list of application buffers in host memory stored in a queue to a network services processor coupled to the host system. The application buffers are used for storing data transferred on a socket established between the network application and a remote network application executing in a remote host system. Using the application buffers, data received by the network services processor over the network is transferred between the network services processor and the application buffers. After the transfer, a completion notification is written to one of the two control queues in the host system. The completion notification includes the size of the data transferred and an identifier associated with the socket. The identifier identifies a thread associated with the transferred data and the location of the data in the host system.

    摘要翻译: 在主机系统上执行的网络应用程序将存储在队列中的主机存储器中的应用缓冲器列表提供给耦合到主机系统的网络服务处理器。 应用程序缓冲区用于存储在网络应用程序和在远程主机系统中执行的远程网络应用程序之间建立的套接字上传输的数据。 使用应用缓冲器,由网络服务处理器通过网络接收的数据在网络服务处理器和应用缓冲器之间传送。 在传输之后,将完成通知写入主机系统中的两个控制队列之一。 完成通知包括传输的数据的大小和与套接字相关联的标识符。 标识符标识与传送的数据相关联的线程和主机系统中数据的位置。

    Secure software and hardware association technique
    8.
    发明授权
    Secure software and hardware association technique 有权
    安全的软硬件关联技术

    公开(公告)号:US08677144B2

    公开(公告)日:2014-03-18

    申请号:US12392004

    申请日:2009-02-24

    IPC分类号: G06F21/00

    摘要: In an embodiment, authenticated hardware and authenticated software are cryptographically binded using symmetric and asymmetric cryptography. Cryptographically binding the hardware and software ensures that original equipment manufacturer (OEM) hardware will only run OEM software. Cryptographically binding the hardware and software protects the OEM binary code so it will only run on the OEM hardware and cannot be replicated or altered to operate on unauthorized hardware. This cryptographic binding technique is referred to herein as secure software and hardware association (SSHA).

    摘要翻译: 在一个实施例中,经认证的硬件和认证的软件使用对称和非对称加密技术被加密地绑定。 加密硬件和软件的密码确保原始设备制造商(OEM)硬件只能运行OEM软件。 加密硬件和软件的加密保护了OEM二进制代码,因此它只能在OEM硬件上运行,不能被复制或更改以对未授权的硬件进行操作。 这种加密绑定技术在这里被称为安全软件和硬件关联(SSHA)。

    Transparent IPSec processing inline between a framer and a network component
    9.
    发明授权
    Transparent IPSec processing inline between a framer and a network component 有权
    在成帧器和网络组件之间内联的透明IPSec处理

    公开(公告)号:US07398386B2

    公开(公告)日:2008-07-08

    申请号:US10411909

    申请日:2003-04-12

    摘要: A method and apparatus for transparent processing of IPsec network traffic by a security processor in line between a framer and a network processor. Security processor parses packet header and tail information to determine if encryption or decryption is required. After encryption or decryption is completed packet header and tail information is modified to reflect the changes in the packet such as length of the packet. The modified packet is then passed on to the network processor or framer.

    摘要翻译: 一种用于通过成帧器和网络处理器之间的安全处理器来透明处理IPsec网络流量的方法和装置。 安全处理器解析分组报头和尾部信息,以确定是否需要加密或解密。 在完成加密或解密之后,数据包头和尾信息被修改以反映分组中的变化,例如分组的长度。 修改后的数据包然后传递到网络处理器或成帧器。

    SECURE SOFTWARE AND HARDWARE ASSOCIATION TECHNIQUE
    10.
    发明申请
    SECURE SOFTWARE AND HARDWARE ASSOCIATION TECHNIQUE 有权
    安全软件和硬件协会技术

    公开(公告)号:US20090217054A1

    公开(公告)日:2009-08-27

    申请号:US12392004

    申请日:2009-02-24

    IPC分类号: H04L9/06

    摘要: In an embodiment, authenticated hardware and authenticated software are cryptographically binded using symmetric and asymmetric cryptography. Cryptographically binding the hardware and software ensures that original equipment manufacturer (OEM) hardware will only run OEM software. Cryptographically binding the hardware and software protects the OEM binary code so it will only run on the OEM hardware and cannot be replicated or altered to operate on unauthorized hardware. This cryptographic binding technique is referred to herein as secure software and hardware association (SSHA).

    摘要翻译: 在一个实施例中,经认证的硬件和认证的软件使用对称和非对称加密技术被加密地绑定。 加密硬件和软件的密码确保原始设备制造商(OEM)硬件只能运行OEM软件。 加密硬件和软件的加密保护了OEM二进制代码,因此它只能在OEM硬件上运行,不能被复制或更改以对未授权的硬件进行操作。 这种加密绑定技术在这里被称为安全软件和硬件关联(SSHA)。