利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

14 条记录 (耗时 0.032 秒)

    SECURE INTERFACE CONTROL HIGH-LEVEL INSTRUCTION INTERCEPTION FOR INTERRUPTION ENABLEMENT
    2.
    发明申请
    SECURE INTERFACE CONTROL HIGH-LEVEL INSTRUCTION INTERCEPTION FOR INTERRUPTION ENABLEMENT 审中-公开

    公开(公告)号：US20200285747A1

    公开(公告)日：2020-09-10

    申请号：US16296452

    申请日：2019-03-08

    申请人： International Business Machines Corporation

    发明人： Christian Borntraeger ,  Claudio Imbrenda ,  Fadi Y. Busaba ,  Jonathan D. Bradbury ,  Lisa Cranton Heller

    IPC分类号： G06F21/57 ,  G06F9/455

    摘要： A method is provided by a secure interface control of a computer that provides a partial instruction interpretation for an instruction which enables an interruption. The secure interface control fetches a program status word or a control register value from a secure guest storage. The secure interface control notifies an untrusted entity of guest interruption mask updates. The untrusted entity is executed on and in communication with hardware of the computer through the secure interface control to support operations of a secure entity executing on the untrusted entity. The secure interface control receives, from the untrusted entity, a request to present a highest priority, enabled guest interruption in response to the notifying of the guest interruption mask updates. The secure interface control moves interruption information into a guest prefix page and injecting the interruption in the secure entity when an injection of the interruption is determined to be valid.

    Secure interface control high-level instruction interception for interruption enablement
    3.
    发明授权
    Secure interface control high-level instruction interception for interruption enablement 有权

    公开(公告)号：US11308215B2

    公开(公告)日：2022-04-19

    申请号：US16296452

    申请日：2019-03-08

    申请人： International Business Machines Corporation

    发明人： Christian Borntraeger ,  Claudio Imbrenda ,  Fadi Y. Busaba ,  Jonathan D. Bradbury ,  Lisa Cranton Heller

    IPC分类号： H04L9/40 ,  G06F21/57 ,  G06F9/455

    摘要： A method is provided by a secure interface control of a computer that provides a partial instruction interpretation for an instruction which enables an interruption. The secure interface control fetches a program status word or a control register value from a secure guest storage. The secure interface control notifies an untrusted entity of guest interruption mask updates. The untrusted entity is executed on and in communication with hardware of the computer through the secure interface control to support operations of a secure entity executing on the untrusted entity. The secure interface control receives, from the untrusted entity, a request to present a highest priority, enabled guest interruption in response to the notifying of the guest interruption mask updates. The secure interface control moves interruption information into a guest prefix page and injecting the interruption in the secure entity when an injection of the interruption is determined to be valid.

    Host virtual address space for secure interface control storage
    4.
    发明授权
    Host virtual address space for secure interface control storage 有权

    公开(公告)号：US11176054B2

    公开(公告)日：2021-11-16

    申请号：US16296301

    申请日：2019-03-08

    申请人： International Business Machines Corporation

    发明人： Claudio Imbrenda ,  Christian Borntraeger ,  Lisa Cranton Heller ,  Fadi Y. Busaba ,  Jonathan D. Bradbury

    IPC分类号： G06F12/1009 ,  G06F9/455

    摘要： According to one or more embodiments of the present invention, a computer implemented method includes receiving, at a secure interface control of a computer system, an access request for a data structure related to a secure entity in a secure domain of the computer system. The secure interface control can check for a virtual storage address associated with a location of the data structure. The secure interface control can request an address translation using a virtual address space of a non-secure entity of the computer system based on determining that the location of the data structure is associated with the virtual storage address. The secure interface control can access the data structure based on a result of the address translation.

    INJECT INTERRUPTS AND EXCEPTIONS INTO SECURE VIRTUAL MACHINE
    5.
    发明申请
    INJECT INTERRUPTS AND EXCEPTIONS INTO SECURE VIRTUAL MACHINE 审中-公开

    公开(公告)号：US20200285495A1

    公开(公告)日：2020-09-10

    申请号：US16296332

    申请日：2019-03-08

    申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

    发明人： Claudio Imbrenda ,  Fadi Y. Busaba ,  Lisa Cranton Heller ,  Jonathan D. Bradbury

    IPC分类号： G06F9/455 ,  G06F9/38 ,  G06F9/48

    摘要： According to one or more embodiments of the present invention, a computer implemented method includes initiating, by a non-secure entity that is executing on a host server, a secure entity, the non-secure entity prohibited from directly accessing any data of the secure entity. The method further includes injecting, into the secure entity, an interrupt that is generated by the host server. The injecting includes adding, by the non-secure entity, information about the interrupt into a portion of non-secure storage, which is then associated with the secure entity. The injecting further includes injecting, by a secure interface control of the host server, the interrupt into the secure entity.

    Inject interrupts and exceptions into secure virtual machine
    7.
    发明授权
    Inject interrupts and exceptions into secure virtual machine 有权

    公开(公告)号：US11347529B2

    公开(公告)日：2022-05-31

    申请号：US16296332

    申请日：2019-03-08

    申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

    发明人： Claudio Imbrenda ,  Fadi Y. Busaba ,  Lisa Cranton Heller ,  Jonathan D. Bradbury

    IPC分类号： G06F9/455 ,  G06F9/38 ,  G06F9/48

    摘要： According to one or more embodiments of the present invention, a computer implemented method includes initiating, by a non-secure entity that is executing on a host server, a secure entity, the non-secure entity prohibited from directly accessing any data of the secure entity. The method further includes injecting, into the secure entity, an interrupt that is generated by the host server. The injecting includes adding, by the non-secure entity, information about the interrupt into a portion of non-secure storage, which is then associated with the secure entity. The injecting further includes injecting, by a secure interface control of the host server, the interrupt into the secure entity.

    Transparent interpretation of guest instructions in secure virtual machine environment
    9.
    发明授权
    Transparent interpretation of guest instructions in secure virtual machine environment 有权

    公开(公告)号：US10956188B2

    公开(公告)日：2021-03-23

    申请号：US16296316

    申请日：2019-03-08

    申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

    发明人： Fadi Y. Busaba ,  Lisa Cranton Heller ,  Jonathan D. Bradbury ,  Christian Borntraeger ,  Claudio Imbrenda

    IPC分类号： G06F9/455

    摘要： According to one or more embodiments of the present invention, a computer implemented method includes executing, by a virtual machine that is executing on a host server, a stream of instructions, wherein an instruction from the stream of instructions is to be intercepted to a hypervisor. The method further includes, based on a determination that the virtual machine is a secure virtual machine, preventing the hypervisor from directly accessing any data of the secure virtual machine. The method further includes performing by a secure interface control of the host server, based on a determination that the instruction is not interpretable by the secure interface control itself, extracting one or more parameter data associated with the instruction from the secure virtual machine, and storing the parameter data into a buffer that is accessible by the hypervisor. The instruction is subsequently intercepted into the hypervisor.