Coexecution processor isolation using an isolation process or having
authority controls for accessing system main storage
    1.
    发明授权
    Coexecution processor isolation using an isolation process or having authority controls for accessing system main storage 失效
    使用隔离进程执行处理器隔离或具有访问系统主存储的权限控制

    公开(公告)号:US5655146A

    公开(公告)日:1997-08-05

    申请号:US680069

    申请日:1996-07-12

    摘要: A coexecutor for executing functions offloaded from central processors (CPs) in a data processing system, as requested by one or more executing control programs, which include a host operating system (host OS), and subsystem programs and applications executing under the host OS. The offloaded functions are embodied in code modules. Code modules execute in the coexecutor in parallel with non-offloaded functions being executed by the CPs. Thus, the CPs do not need to execute functions which can be executed by the coexecutor. CP requests to the coexecutor specify the code modules which are accessed by the coexecutor from host shared storage under the same constraints and access limitations as the control programs. The coexecutor may emulate host dynamic address translation, and may use a provided host storage key in accessing host storage. The restricted access operating state for the coexecutor maintains data integrity. Coexecutors can be of the same architecture or of a totally different architecture from the CPs to provide an efficient processing environment for the offloaded functions. The coexecutor interfaces host software which provides the requests to the coexecutor. Offloaded modules, once accessed by the coexecutor, may be cached in coexecutor local storage for use by future requests to allow subsequent invocations to proceed without waiting to again load the same module.

    摘要翻译: 用于执行由数据处理系统中的中央处理器(CP)卸载的执行器,如由一个或多个执行控制程序请求的,其包括主机操作系统(主机OS)以及在主机OS下执行的子系统程序和应用程序。 卸载的功能体现在代码模块中。 代码模块在执行程序中执行,与CP执行的非卸载函数并行执行。 因此,CP不需要执行可由coexecutor执行的功能。 向请求者执行的CP请求在与控制程序相同的约束和访问限制下指定由主机共享存储器由coexecutor访问的代码模块。 共同执行者可以模拟主机动态地址转换,并且可以使用提供的主机存储密钥来访问主机存储。 coexecutor的受限访问操作状态维护数据完整性。 共同执行者可以是与CP相同的架构或与CP完全不同的架构,为卸载的功能提供有效的处理环境。 接口主机将向主机提供请求的主机软件。 卸载的模块一旦被coexecutor访问,就可以被缓存在coexecutor本地存储器中,供将来的请求使用,以允许后续的调用继续进行,而不用等待再次加载相同的模块。

    Virtual machine images encryption using trusted computing group sealing
    2.
    发明授权
    Virtual machine images encryption using trusted computing group sealing 有权
    使用可信计算组密封的虚拟机映像加密

    公开(公告)号:US08694786B2

    公开(公告)日:2014-04-08

    申请号:US13252713

    申请日:2011-10-04

    IPC分类号: H04L9/08

    CPC分类号: H04L9/0897 G06F21/57

    摘要: A host machine provisions a virtual machine from a catalog of stock virtual machines. The host machine instantiates the virtual machine. The host machine configures the virtual machine, based on customer inputs, to form a customer's configured virtual machine. The host machine creates an image from the customer's configured virtual machine. The host machine unwraps a sealed customer's symmetric key to form a customer's symmetric key. The host machine encrypts the customer's configured virtual machine with the customer's symmetric key to form an encrypted configured virtual machine. The host machine stores the encrypted configured virtual machine to non-volatile storage.

    摘要翻译: 主机从虚拟机目录中提供虚拟机。 主机实例化虚拟机。 主机根据客户输入配置虚拟机,形成客户配置的虚拟机。 主机从客户配置的虚拟机创建映像。 主机打开密封客户的对称密钥,形成客户的对称密钥。 主机使用客户的对称密钥加密客户配置的虚拟机,形成加密配置的虚拟机。 主机将加密的配置虚拟机存储到非易失性存储。