公开(公告)号：US20160239334A1

公开(公告)日：2016-08-18

申请号：US15026860

申请日：2013-12-17

Applicant: Shoumeng YAN ,  Intel Corporation

Inventor： Shoumeng YAN

IPC: G06F9/455 ,  G06F9/46 ,  G06F9/50

CPC classification number: G06F9/45558 ,  G06F9/466 ,  G06F9/50 ,  G06F9/52 ,  G06F2009/45562 ,  G06F2009/45579 ,  G06F2009/45587 ,  G06F2009/45591

Abstract: Various embodiments are generally directed to providing virtualization using relatively minimal processing and storage resources to enable concurrent isolated execution of multiple application routines in which one of the application routines is made visible at a time. An apparatus to virtualize an operating system includes a processor component, a visibility checker for execution by the processor component to make a visibility check call to a kernel routine to request an indication of whether an instance of a framework routine that comprises the visibility checker is visible, and resource access code of the instance for execution by the processor component to perform a resource access operation to access a hardware component based on the indication and on receipt of an application programming interface (API) call from an application routine that specifies an API function to access the hardware component. Other embodiments are described and claimed.

Abstract translation: 各种实施例通常涉及使用相对最小的处理和存储资源来提供虚拟化，以实现多个应用例程的并行隔离执行，其中一个应用程序一次可见。 虚拟化操作系统的装置包括处理器组件，可见性检查器，用于由处理器组件执行以对核心例程进行可见性检查调用，以请求指示包括可见性检查器的框架例程的实例是否可见 以及所述实例的资源访问代码，用于由所述处理器组件执行以执行资源访问操作以基于所述指示访问硬件组件，并且在从指定API函数的应用程序接收到应用程序编程接口（API）调用时 访问硬件组件。 描述和要求保护其他实施例。

公开(公告)号：US20190332427A1

公开(公告)日：2019-10-31

申请号：US16474905

申请日：2017-04-21

Applicant: INTEL CORPORATION

Inventor： Hongliang TIAN ,  Shoumeng YAN ,  Mona VIJ

IPC: G06F9/48 ,  G06F9/38 ,  G06F9/32

Abstract: Preemptive scheduling enclaves as disclosed herein support both cooperative and preemptive scheduling of in-enclave (IE) thread execution. These preemptive scheduling enclaves may include a scheduler configured to be executed as part of normal hardware interrupt processing by enclave threads. The scheduler identifies an IE thread to be scheduled and modifies enclave data structures so that when the enclave thread resumes processing after a hardware interrupt, the identified IE thread is executed, rather than the interrupted IE thread.