公开(公告)号：US20100125679A1

公开(公告)日：2010-05-20

申请号：US12623076

申请日：2009-11-20

申请人： Liang Tang ,  Chunyu Song ,  Ke Ke

发明人： Liang Tang ,  Chunyu Song ,  Ke Ke

IPC分类号： G06F9/455 ,  G06F3/00

CPC分类号： G06F9/4411

摘要： A computer and method for directly accessing computer hardware by a virtual system are provided. The computer comprises a hardware platform having a first-type device, a second-type device and a third-type device provided thereon; a virtual machine managing module; a first operating module; a second operating module; wherein the virtual machine managing module comprises a first-type device configuration module for directly configuring the first type device to be used by the main operating system; a second-type device configuration module for directly configuring the second-type device to be used by the guest operating system; and a third-type device configuration module for virtualizing the third-type device on the hardware platform to generate a virtualized third-type device and configuring the virtualized third-type device to be used by the main operating system and the guest operating system, respectively. The present invention considers the distribution and use of the devices as a whole in combination with the use of BIOS in the main board. Therefore, the incompatibility problem between hardware and software of the virtual system can be solved.

摘要翻译： 提供了一种由虚拟系统直接访问计算机硬件的计算机和方法。 计算机包括具有第一类型设备，第二类型设备和设置在其上的第三类型设备的硬件平台; 虚拟机管理模块; 第一操作模块; 第二操作模块; 其中所述虚拟机管理模块包括用于直接配置要由所述主操作系统使用的所述第一类型设备的第一类型设备配置模块; 用于直接配置由客户操作系统使用的第二类型设备的第二类型设备配置模块; 以及第三类设备配置模块，用于在硬件平台上虚拟化第三类设备，以生成虚拟化的第三类设备，并分别配置主操作系统和客户操作系统使用的虚拟化第三类设备 。 本发明结合在主板中使用BIOS来考虑设备的整体分布和使用。 因此，可以解决虚拟系统硬件与软件之间的不兼容性问题。

公开(公告)号：US08037210B2

公开(公告)日：2011-10-11

申请号：US12623076

申请日：2009-11-20

申请人： Liang Tang ,  Chunyu Song ,  Ke Ke

发明人： Liang Tang ,  Chunyu Song ,  Ke Ke

IPC分类号： G06F3/00 ,  G06F9/455

CPC分类号： G06F9/4411

摘要： A computer and method for directly accessing computer hardware by a virtual system are provided. The computer comprises a hardware platform having a first-type device, a second-type device and a third-type device provided thereon; a virtual machine managing module; a first operating module; a second operating module; wherein the virtual machine managing module comprises a first-type device configuration module for directly configuring the first type device to be used by the main operating system; a second-type device configuration module for directly configuring the second-type device to be used by the guest operating system; and a third-type device configuration module for virtualizing the third-type device on the hardware platform to generate a virtualized third-type device and configuring the virtualized third-type device to be used by the main operating system and the guest operating system, respectively. The present invention considers the distribution and use of the devices as a whole in combination with the use of BIOS in the main board. Therefore, the incompatibility problem between hardware and software of the virtual system can be solved.

摘要翻译： 提供了一种由虚拟系统直接访问计算机硬件的计算机和方法。 计算机包括具有第一类型设备，第二类型设备和设置在其上的第三类型设备的硬件平台; 虚拟机管理模块; 第一操作模块; 第二操作模块; 其中所述虚拟机管理模块包括用于直接配置要由所述主操作系统使用的所述第一类型设备的第一类型设备配置模块; 用于直接配置由客户操作系统使用的第二类型设备的第二类型设备配置模块; 以及第三类设备配置模块，用于在硬件平台上虚拟化第三类设备，以生成虚拟化的第三类设备，并分别配置主操作系统和客户操作系统使用的虚拟化第三类设备 。 本发明结合在主板中使用BIOS来考虑设备的整体分布和使用。 因此，可以解决虚拟系统硬件与软件之间的不兼容性问题。

公开(公告)号：US20080256637A1

公开(公告)日：2008-10-16

申请号：US12088603

申请日：2006-03-22

申请人： Yongfeng Liu ,  Chunyu Song ,  Ke Ke

发明人： Yongfeng Liu ,  Chunyu Song ,  Ke Ke

IPC分类号： G06F21/00

CPC分类号： G06F21/50

摘要： The present invention provides a computer system for carrying out security reinforcing and a security reinforcing method. The computer system comprises hardware, a BIOS, and a virtual machine monitor, and has at least one servo operating system and at least one user operating system running thereon, wherein, the servo operating system comprises a security reinforcing proxy module, and the user operating system comprises a security reinforcing module. With the present invention, it is possible to prevent the security reinforcing performance from being tampered by the frangibility of the user operating system, and to avoid hacker attacks which cannot be avoided in case of regular or manual security reinforcing, and also to ensure better secure defense of the computer system and the security of the downloaded security reinforcing files own.

摘要翻译： 本发明提供一种用于执行安全加强和安全加固方法的计算机系统。 计算机系统包括硬件，BIOS和虚拟机监视器，并且具有至少一个伺服操作系统和在其上运行的至少一个用户操作系统，其中，所述伺服操作系统包括安全加强代理模块，并且所述用户操作 系统包括安全加强模块。 利用本发明，可以防止安全加强性能被用户操作系统的脆弱性所篡改，并且避免在经常或手动安全加固的情况下不能避免的黑客攻击，并且还确保更好的安全性 计算机系统的防御和下载的安全加固文件的安全性。

公开(公告)号：US09176765B2

公开(公告)日：2015-11-03

申请号：US11860939

申请日：2007-09-25

申请人： Jun Chen ,  Yongfeng Liu ,  Chunmei Liu ,  Ke Ke

发明人： Jun Chen ,  Yongfeng Liu ,  Chunmei Liu ,  Ke Ke

IPC分类号： G06F9/455 ,  G06F9/46

CPC分类号： G06F9/45558 ,  G06F2009/45579

摘要： The present invention provides a virtual machine system and a method for sharing a graphics card amongst virtual machines. A VMM of the virtual machine system is provided with a resource-converting module, which converts data exchanged between a graphics card drive module of a GOS in the foreground and the graphics card based on a resource-converting table, and also intercepts accesses to the real graphics card by a GOS in the background and then responds to its operations on the graphics card. The VMM is further provided with a switching module, which alters a state of a VM based on a command for switching the VM, saves a graphics card state before the VM is switched to the background and restores the stored graphics card state to the graphics card when the VM is switched back to the foreground. Further, the GOSs each comprise a graphics card drive module corresponding to the real graphics card for accessing the real graphics card. The systems and the methods according to the present invention enable the GOSs to access the real graphics card, and also enable switching among a plurality of virtual machines.

摘要翻译： 本发明提供一种在虚拟机之间共享图形卡的虚拟机系统和方法。 虚拟机系统的VMM设置有资源转换模块，该资源转换模块基于资源转换表转换在前台的GOS的图形卡驱动模块与图形卡之间交换的数据，并且还拦截对 真正的图形卡由GOS在后台响应其在显卡上的操作。 VMM还具有切换模块，其基于用于切换VM的命令改变VM的状态，在VM切换到背景之前保存图形卡状态，并将存储的图形卡状态恢复到图形卡 当VM切换回前台时。 此外，GOS各自包括对应于用于访问真实图形卡的真实图形卡的图形卡驱动模块。 根据本发明的系统和方法使得GOS能够访问真实图形卡，并且还使得能够在多个虚拟机之间进行切换。

公开(公告)号：US08165177B2

公开(公告)日：2012-04-24

申请号：US11615289

申请日：2006-12-22

申请人： Philip Lee Childs ,  Mark Charles Davis ,  Ke Ke ,  Rod David Waltermann

发明人： Philip Lee Childs ,  Mark Charles Davis ,  Ke Ke ,  Rod David Waltermann

IPC分类号： G06F7/00 ,  G06F12/00

CPC分类号： G06F3/0661 ,  G06F3/0607 ,  G06F3/067 ,  G06F11/1453 ,  G06F11/1456

摘要： A system and method for hybrid virtual machine monitor system is provided. A first operating system uses a file system to manage data storage and retrieval within a data storage area. A second operating system, which is not compatible with the first operating system's file system, executes a management application backup utility. The first operating system includes a filter driver that sends logical block addresses, which correspond to data reads/writes, to the management application backup utility. In turn, the management application backup utility uses the logical block addresses to perform operations on the data storage locations. In one embodiment, the management application backup utility performs actions on the data storage area, such as a disk defragmentation, and subsequently sends data location changes to the filter driver. In this embodiment, the filter driver instructs the first operating system's file system to update its translation tables based upon the data location changes.

摘要翻译： 提供了一种混合虚拟机监控系统的系统和方法。 第一个操作系统使用文件系统来管理数据存储区域内的数据存储和检索。 与第一操作系统的文件系统不兼容的第二操作系统执行管理应用备份实用程序。 第一操作系统包括一个过滤器驱动程序，它向管理应用程序备份实用程序发送对应于数据读/写的逻辑块地址。 反过来，管理应用程序备份实用程序使用逻辑块地址对数据存储位置执行操作。 在一个实施例中，管理应用备份实用程序对诸如磁盘碎片整理的数据存储区域执行动作，并且随后将数据位置改变发送到过滤驱动器。 在该实施例中，过滤器驱动器基于数据位置改变来指示第一操作系统的文件系统更新其翻译表。

公开(公告)号：US07739417B2

公开(公告)日：2010-06-15

申请号：US12025287

申请日：2008-02-04

申请人： Yongfeng Liu ,  Chunmei Liu ,  Jun Chen ,  Ke Ke

发明人： Yongfeng Liu ,  Chunmei Liu ,  Jun Chen ,  Ke Ke

IPC分类号： G06F3/00 ,  G06F21/00

CPC分类号： G06F9/45558 ,  G06F2009/45579

摘要： The present invention provides a virtual machine system and a method of accessing a graphics card. The virtual machine system includes a VMM, an SOS and at least one GOS, and further includes a resource converting module for performing IO address converting on graphics card framebuffer accessing data from GOS(s) or mapping MMIO(s) to physical MMIO(s) of a graphics card based on a resource converting table, and sending the processed data to the graphics card; and a framebuffer allocating module for dividing a framebuffer resource of the graphics card into multiple blocks and allocating them respectively to corresponding GOS(s). The resource converting table(s) records correspondences between a resource allocation for the graphics card by SOS and a resource allocation for the graphics card by GOS(s). The framebuffer MMIO resource(s) allocated to the graphics card by GOS(s) is/are the framebuffer allocated to GOS(s) by the framebuffer allocating module.

摘要翻译： 本发明提供了一种虚拟机系统和访问图形卡的方法。 虚拟机系统包括VMM，SOS和至少一个GOS，并且还包括资源转换模块，用于在图形卡帧缓冲器上执行IO地址转换，从GOS访问数据或将MMIO映射到物理MMIO ），并且将所处理的数据发送到所述图形卡; 以及帧缓冲器分配模块，用于将图形卡的帧缓冲器资源划分为多个块并将其分配给相应的GOS。 资源转换表通过SOS记录图形卡的资源分配与GOS的图形卡的资源分配之间的对应关系。 由GOS分配给图形卡的帧缓冲器MMIO资源是由帧缓冲器分配模块分配给GOS的帧缓冲区。

公开(公告)号：US20080215770A1

公开(公告)日：2008-09-04

申请号：US12025287

申请日：2008-02-04

申请人： Yongfeng Liu ,  Chunmei Liu ,  Jun Chen ,  Ke Ke

发明人： Yongfeng Liu ,  Chunmei Liu ,  Jun Chen ,  Ke Ke

IPC分类号： G06F13/14

CPC分类号： G06F9/45558 ,  G06F2009/45579

摘要： The present invention provides a virtual machine system and a method of accessing a graphics card by the same, wherein, the virtual machine system includes a Virtual Machine Monitor (VMM), a Service Operating System (SOS) and at least one Guest Operating System (GOS), and further includes a resource converting module for performing IO address converting on graphics card framebuffer accessing data from the GOS(s) or mapping MMIO(s) to physical MMIO(s) of a graphics card based on a resource converting table or resource converting tables, and sending the processed data to the graphics card; and a framebuffer allocating module for dividing a framebuffer resource of the graphics card into multiple blocks and allocating them respectively to the corresponding GOS(s). The resource converting table(s) records correspondences between a resource allocation for the graphics card by the SOS and a resource allocation or resource allocations for the graphics card by the GOS(s). The framebuffer MMIO resource(s) allocated to the graphics card by the GOS(s) is/are the framebuffer allocated to the GOS(s) by the framebuffer allocating module. The virtual machine system and the method according to the present invention are capable of accessing the real graphics card through the resource converting table(s), and also solve the problem of display confusion when multiple GOSs commonly access the real graphics card while being able to switch display.

摘要翻译： 本发明提供了一种虚拟机系统及其访问图形卡的方法，其中，虚拟机系统包括虚拟机监视器（VMM），服务操作系统（SOS）和至少一个来宾操作系统 GOS），并且还包括资源转换模块，用于在图形卡帧缓冲器上执行IO地址转换，所述帧缓冲器基于资源转换表或从所述GOS访问数据或将MMIO映射到图形卡的物理MMIO，或 资源转换表，并将处理的数据发送到图形卡; 以及帧缓冲器分配模块，用于将图形卡的帧缓冲器资源划分为多个块并将其分配给相应的GOS。 资源转换表记录由SOS对图形卡的资源分配与GOS的资源分配或图形卡的资源分配之间的对应关系。 由GOS分配给图形卡的帧缓冲器MMIO资源是由帧缓冲器分配模块分配给GOS的帧缓冲区。 根据本发明的虚拟机系统和方法能够通过资源转换表访问真实图形卡，并且还解决了当多个GOS通常访问真实显卡时显示混乱的问题，同时能够 开关显示。

公开(公告)号：US20080215728A1

公开(公告)日：2008-09-04

申请号：US12090549

申请日：2006-03-24

申请人： Zhanhai Li ,  Ke Ke

发明人： Zhanhai Li ,  Ke Ke

IPC分类号： G06F15/173

CPC分类号： G06F9/45558 ,  G06F9/5077 ,  G06F2009/45579 ,  H04L41/00 ,  H04L41/046

摘要： A computer management system and a computer management method are provided. The computer management system comprises a management workstation and at least one computer system based on virtualization technology. The computer system comprises a virtual machine monitor, a servo operating system, a management agent module and at least one user operating system. The management workstation comprises a detection/recognition module, an information collection module and a configuration module. The centralized management on the computer system by the management workstation can be realized through the management agent module establishing a network connection and communicating with the management workstation.

摘要翻译： 提供了计算机管理系统和计算机管理方法。 计算机管理系统包括管理工作站和基于虚拟化技术的至少一个计算机系统。 计算机系统包括虚拟机监视器，伺服操作系统，管理代理模块和至少一个用户操作系统。 管理工作站包括检测/识别模块，信息收集模块和配置模块。 可以通过管理代理模块建立网络连接并与管理工作站进行通信，实现管理工作站对计算机系统的集中管理。

公开(公告)号：US20080154985A1

公开(公告)日：2008-06-26

申请号：US11615289

申请日：2006-12-22

申请人： Philip Lee Childs ,  Mark Charles Davis ,  Ke Ke ,  Rod David Waltermann

发明人： Philip Lee Childs ,  Mark Charles Davis ,  Ke Ke ,  Rod David Waltermann

IPC分类号： G06F17/30

CPC分类号： G06F3/0661 ,  G06F3/0607 ,  G06F3/067 ,  G06F11/1453 ,  G06F11/1456

摘要： A system and method for hybrid virtual machine monitor system is provided. A first operating system uses a file system to manage data storage and retrieval within a data storage area. A second operating system, which is not compatible with the first operating system's file system, executes a management application backup utility. The first operating system includes a filter driver that sends logical block addresses, which correspond to data reads/writes, to the management application backup utility. In turn, the management application backup utility uses the logical block addresses to perform operations on the data storage locations. In one embodiment, the management application backup utility performs actions on the data storage area, such as a disk defragmentation, and subsequently sends data location changes to the filter driver. In this embodiment, the filter driver instructs the first operating system's file system to update its translation tables based upon the data location changes.

摘要翻译： 提供了一种混合虚拟机监控系统的系统和方法。 第一个操作系统使用文件系统来管理数据存储区域内的数据存储和检索。 与第一操作系统的文件系统不兼容的第二操作系统执行管理应用备份实用程序。 第一操作系统包括一个过滤器驱动程序，它向管理应用程序备份实用程序发送对应于数据读/写的逻辑块地址。 反过来，管理应用程序备份实用程序使用逻辑块地址对数据存储位置执行操作。 在一个实施例中，管理应用备份实用程序对诸如磁盘碎片整理的数据存储区域执行动作，并且随后将数据位置改变发送到过滤驱动器。 在该实施例中，过滤器驱动器基于数据位置改变来指示第一操作系统的文件系统更新其翻译表。