公开(公告)号：US20120025953A1

公开(公告)日：2012-02-02

申请号：US12848654

申请日：2010-08-02

申请人： Robert C. Swanson ,  Vincent J. Zimmer ,  Mallik Bulusu ,  Michael A. Rothman ,  Palsamy Sakthikumar

发明人： Robert C. Swanson ,  Vincent J. Zimmer ,  Mallik Bulusu ,  Michael A. Rothman ,  Palsamy Sakthikumar

IPC分类号： G06K7/01

CPC分类号： H04L45/02 ,  H04W4/80 ,  H04W84/18

摘要： Using radio frequency identification (RFID) tags embedded in processors within a computing system to assist in system initialization processing. The RFID tags provide a separate communication path to other components of the computing system during initialization processing, apart from the system interconnect. When the computing system is powered up, each processor in the system may cause its RFID tag to broadcast data regarding the processor's interconnect location and initialization status. The RFID tags may be sensed by a RFID receiver in the Platform Control Hub (PCH) of the computing system, and each processor's interconnect location and initialization status data may be stored in selected registers within the PCH. When the BIOS executes during system initialization processing, the BIOS may access these PCH registers to obtain the processor's data. The interconnect location and initialization status data may be used by the BIOS to select the optimal routing table and to configure the virtual network within the computing system based at least in part on the optimal routing table and the RFID tag data and without the need for interrogating each processor individually over the system interconnect.

摘要翻译： 使用嵌入在计算系统内的处理器中的射频识别（RFID）标签来协助系统初始化处理。 除了系统互连，RFID标签在初始化处理期间提供到计算系统的其他组件的单独的通信路径。 当计算系统通电时，系统中的每个处理器可能使其RFID标签广播关于处理器的互连位置和初始化状态的数据。 RFID标签可以由计算系统的平台控制中心（PCH）中的RFID接收器感测，并且每个处理器的互连位置和初始化状态数据可以存储在PCH内的选定的寄存器中。 当BIOS在系统初始化处理期间执行时，BIOS可以访问这些PCH寄存器以获得处理器的数据。 BIOS可以使用互连位置和初始化状态数据来选择最佳路由表并且至少部分地基于最佳路由表和RFID标签数据来配置计算系统内的虚拟网络，并且不需要询问 每个处理器分别通过系统互连。

公开(公告)号：US20110307712A1

公开(公告)日：2011-12-15

申请号：US12814246

申请日：2010-06-11

申请人： Palsamy Sakthikumar ,  Robert C. Swanson ,  Vincent J. Zimmer ,  Michael A. Rothman ,  Mallik Bulusu

发明人： Palsamy Sakthikumar ,  Robert C. Swanson ,  Vincent J. Zimmer ,  Michael A. Rothman ,  Mallik Bulusu

IPC分类号： H04L9/00

CPC分类号： G06F21/572 ,  G06F2221/2141

摘要： A method, apparatus, system, and computer program product for multi-owner deployment of firmware images. The method includes obtaining a signed firmware image that comprises a first code module signed by a first code owner and a second code module signed by a second code owner. The method further includes obtaining an updated first code module comprising updated code for the first code module, verifying that the updated first code module is signed by the first code owner, and updating the signed firmware image with the updated first code module in response to verifying that the updated first code module is signed by the first code owner. The signed firmware image may further comprise an access control list that authorizes updates to the first code module by the first code owner and updates to the second code module by the second code owner.

摘要翻译： 一种用于多所有者部署固件映像的方法，设备，系统和计算机程序产品。 该方法包括获得包括由第一代码所有者签名的第一代码模块和由第二代码所有者签名的第二代码模块的签名固件映像。 所述方法还包括获得包括用于第一代码模块的更新代码的更新的第一代码模块，验证所更新的第一代码模块是否被第一代码所有者签名，以及响应于验证更新带有更新的第一代码模块的已签名固件映像 更新的第一代码模块由第一代码所有者签名。 签名的固件图像还可以包括访问控制列表，其授权第一代码所有者更新第一代码模块，并由第二代码所有者更新第二代码模块。

公开(公告)号：US20110314298A1

公开(公告)日：2011-12-22

申请号：US12819933

申请日：2010-06-21

申请人： Vincent J. Zimmer ,  Michael A. Rothman ,  Robert C. Swanson ,  Palsamy Sakthikumar ,  Mallik Bulusu

发明人： Vincent J. Zimmer ,  Michael A. Rothman ,  Robert C. Swanson ,  Palsamy Sakthikumar ,  Mallik Bulusu

IPC分类号： G06F21/00

CPC分类号： G06F21/57 ,  G06F2221/2111 ,  G06F2221/2151

摘要： Enhancing locality in a security co-processor module of a computing system may be achieved by including one or more additional attributes such as geographic location, trusted time, a hardware vendor string, and one or more environmental factors into an access control space for machine mode measurement of a computing system.

摘要翻译： 可以通过将一个或多个附加属性（诸如地理位置，可信时间，硬件供应商串和一个或多个环境因素）包括在用于机器模式的访问控制空间中来实现计算系统的安全协处理器模块中的局部性 计算系统的测量。

公开(公告)号：US20090023414A1

公开(公告)日：2009-01-22

申请号：US11779803

申请日：2007-07-18

申请人： Vincent J. Zimmer ,  Michael A. Rothman ,  Palsamy Sakthikumar ,  Mallik Bulusu ,  Robert C. Swanson

发明人： Vincent J. Zimmer ,  Michael A. Rothman ,  Palsamy Sakthikumar ,  Mallik Bulusu ,  Robert C. Swanson

IPC分类号： H04B1/26

CPC分类号： H04W88/06 ,  G06F9/5077

摘要： A software-defined radio (SDR) capability may be provided in a general purpose, many core processing system by sequestering one or more partitions running on one or more cores and instantiating a communications capability by having discrete SDR functions performed by the sequestered partitions. Each SDR module embodied in a sequestered partition may be independently upgraded without modifying the hardware of the underlying processing system. By executing SDR modules in cores not accessible by application programs and/or an operating system (OS), a better Quality of Service (QoS) may be provided for wireless communications on the general purpose, multi-core processing system. An embodiment comprises isolating a core of a many core processing system as a sequestered partition, loading a software-defined radio module onto the core, and executing the software-defined module to implement wireless communications.

摘要翻译： 可以在通用目的的许多核心处理系统中通过隔离在一个或多个核上运行的一个或多个分区并通过具有由隔离分区执行的离散SDR功能来实例化通信能力来提供软件定义无线电（SDR）能力。 实施在隔离分区中的每个SDR模块可以独立升级，而无需修改底层处理系统的硬件。 通过在应用程序和/或操作系统（OS）不可访问的核心中执行SDR模块，可以为通用多核处理系统上的无线通信提供更好的服务质量（QoS）。 一个实施例包括将许多核心处理系统的核心隔离为隔离分区，将软件定义的无线电模块加载到核心上，以及执行软件定义模块以实现无线通信。

公开(公告)号：US08688812B2

公开(公告)日：2014-04-01

申请号：US12888666

申请日：2010-09-23

申请人： Robert C. Swanson ,  Mallik Bulusu ,  Vincent J. Zimmer ,  Palsamy Sakthikumar ,  Michael A. Rothman

发明人： Robert C. Swanson ,  Mallik Bulusu ,  Vincent J. Zimmer ,  Palsamy Sakthikumar ,  Michael A. Rothman

IPC分类号： G06F15/16

CPC分类号： G06F9/4416

摘要： A network interface card with read-only memory having at least a micro-kernel of a cluster computing operation system, a server formed with such network interface card, and a computing cluster formed with such servers are disclosed herein. In various embodiments, on transfer, after an initial initialization phase during an initialization of a server, the network interface card loads the cluster computing operation system into system memory of the server, to enable the server, in conjunction with other similarly provisioned servers to form a computing cluster. Other embodiments are also disclosed and claimed.

摘要翻译： 本文公开了一种具有只读存储器的网络接口卡，其具有至少集群计算操作系统的微内核，形成有这种网络接口卡的服务器以及与这种服务器形成的计算集群。 在各种实施例中，在传输时，在服务器的初始化期间的初始初始化阶段之后，网络接口卡将集群计算操作系统加载到服务器的系统存储器中，以使服务器与其他类似的供应服务器一起形成 一个计算集群。 还公开并要求保护其他实施例。

公开(公告)号：US20120166840A1

公开(公告)日：2012-06-28

申请号：US12976514

申请日：2010-12-22

申请人： Michael A. Rothman ,  Palsamy Sakthikumar ,  Vincent J. Zimmer ,  Mallik Bulusu ,  Robert C. Swanson

发明人： Michael A. Rothman ,  Palsamy Sakthikumar ,  Vincent J. Zimmer ,  Mallik Bulusu ,  Robert C. Swanson

IPC分类号： G06F1/32 ,  G06F7/00

CPC分类号： G06F9/4418

摘要： A method and apparatus for improving the resume time of a platform. In one embodiment of the invention, the context of the platform is saved prior to entering an inactive state of the platform. When the platform is switched back to an active state, it reads the saved context and restores the platform to its original state prior to entering the inactive state. In one embodiment of the invention, the platform determines whether it should compress the saved context before storing it in a non-volatile memory based on the operating condition of the platform. This allows the platform to select the optimum method to allow faster resume time of the platform.

摘要翻译： 一种用于提高平台恢复时间的方法和装置。 在本发明的一个实施例中，平台的上下文在进入平台的不活动状态之前被保存。 当平台切换回活动状态时，它读取保存的上下文，并在进入非活动状态之前将平台恢复到原始状态。 在本发明的一个实施例中，平台基于平台的操作条件来确定在将保存的上下文存储在非易失性存储器中之前是否应该压缩保存的上下文。 这允许平台选择最佳方法以允许更快的平台恢复时间。

公开(公告)号：US20120079085A1

公开(公告)日：2012-03-29

申请号：US12888666

申请日：2010-09-23

申请人： Robert C. Swanson ,  Mallik Bulusu ,  Vincent J. Zimmer ,  Palsamy Sakthikumar ,  Michael A. Rothman

发明人： Robert C. Swanson ,  Mallik Bulusu ,  Vincent J. Zimmer ,  Palsamy Sakthikumar ,  Michael A. Rothman

IPC分类号： G06F15/177 ,  G06F13/20 ,  G06F15/16

CPC分类号： G06F9/4416

摘要： A network interface card with read-only memory having at least a micro-kernel of a cluster computing operation system, a server formed with such network interface card, and a computing cluster formed with such servers are disclosed herein. In various embodiments, on transfer, after an initial initialization phase during an initialization of a server, the network interface card loads the cluster computing operation system into system memory of the server, to enable the server, in conjunction with other similarly provisioned servers to form a computing cluster. Other embodiments are also disclosed and claimed.

摘要翻译： 本文公开了一种具有只读存储器的网络接口卡，其具有至少集群计算操作系统的微内核，形成有这种网络接口卡的服务器以及与这种服务器形成的计算集群。 在各种实施例中，在传输时，在服务器的初始化期间的初始初始化阶段之后，网络接口卡将集群计算操作系统加载到服务器的系统存储器中，以使服务器与其他类似的供应服务器一起形成 一个计算集群。 还公开并要求保护其他实施例。

公开(公告)号：US20130218551A1

公开(公告)日：2013-08-22

申请号：US13848133

申请日：2013-03-21

申请人： Palsamy Sakthikumar ,  Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Mallik Bulusu

发明人： Palsamy Sakthikumar ,  Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Mallik Bulusu

IPC分类号： G06F13/10

CPC分类号： G06F13/105 ,  G06F9/4812 ,  G06F21/572 ,  G06F2221/2105

摘要： A method, apparatus, system, and computer program product for secure server system management. A payload containing system software and/or firmware updates is distributed in an on-demand, secure I/O operation. The I/O operation is performed via a secured communication channel inaccessible by the server operating system to an emulated USB drive. The secure communication channel can be established for the I/O operation only after authenticating the recipient of the payload, and the payload can be protected from access by a potentially-infected server operating system. Furthermore, the payload can be delivered on demand rather than relying on a BIOS update schedule, and the payload can be delivered at speeds of a write operation to a USB drive.

摘要翻译： 一种用于安全服务器系统管理的方法，设备，系统和计算机程序产品。 包含系统软件和/或固件更新的有效载荷以按需安全I / O操作分发。 I / O操作通过服务器操作系统无法访问到模拟USB驱动器的安全通信通道执行。 只有在验证有效负载的收件人之后，才能为I / O操作建立安全通信通道，并且可以保护有效负载免受潜在感染的服务器操作系统的访问。 此外，有效载荷可以按需传送，而不是依赖于BIOS更新计划，并且有效载荷可以以写入操作的速度传送到USB驱动器。

公开(公告)号：US08428929B2

公开(公告)日：2013-04-23

申请号：US12894876

申请日：2010-09-30

申请人： Palsamy Sakthikumar ,  Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Mallik Bulusu

发明人： Palsamy Sakthikumar ,  Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Mallik Bulusu

IPC分类号： G06F9/455

CPC分类号： G06F13/105 ,  G06F9/4812 ,  G06F21/572 ,  G06F2221/2105

摘要： A method, apparatus, system, and computer program product for secure server system management. A payload containing system software and/or firmware updates is distributed in an on-demand, secure I/O operation. The I/O operation is performed via a secured communication channel inaccessible by the server operating system to an emulated USB drive. The secure communication channel can be established for the I/O operation only after authenticating the recipient of the payload, and the payload can be protected from access by a potentially-infected server operating system. Furthermore, the payload can be delivered on demand rather than relying on a BIOS update schedule, and the payload can be delivered at speeds of a write operation to a USB drive.

公开(公告)号：US20120159136A1

公开(公告)日：2012-06-21

申请号：US12969655

申请日：2010-12-16

申请人： Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Palsamy Sakthikumar ,  Mallik Bulusu

发明人： Michael A. Rothman ,  Vincent J. Zimmer ,  Robert C. Swanson ,  Palsamy Sakthikumar ,  Mallik Bulusu

IPC分类号： G06F9/00

CPC分类号： G06F9/4401

摘要： Methods, systems and computer program products are disclosed for enhanced system boot processing that is faster to launch the OS because it does not interrogate I/O devices for possible interruption, but that also may be modified to interrogate such devices based on a user selection mechanism. The user selection mechanism may be, for at least one embodiment, a software mechanism such as a control panel module. For other embodiments, the user selection mechanism may be a hardware mechanism, such as a power button or other hardware button or switch. Other embodiments are described and claimed.

摘要翻译： 公开了用于增强的系统引导处理的方法，系统和计算机程序产品，其更快地启动操作系统，因为它不询问I / O设备以便可能的中断，但是也可以修改为基于用户选择机制来询问这样的设备 。 对于至少一个实施例，用户选择机构可以是诸如控制面板模块的软件机构。 对于其他实施例，用户选择机制可以是诸如电源按钮或其他硬件按钮或开关的硬件机构。 描述和要求保护其他实施例。