Product for providing a scalable trusted platform module in a hypervisor environment
    1.
    发明授权
    Product for providing a scalable trusted platform module in a hypervisor environment 失效
    用于在管理程序环境中提供可扩展的可信平台模块的产品

    公开(公告)号:US07996687B2

    公开(公告)日:2011-08-09

    申请号:US12262445

    申请日:2008-10-31

    IPC分类号: G06F11/30 H04K1/10

    摘要: Multiple logical partitions are provided in a data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.

    摘要翻译: 在数据处理系统中提供了多个逻辑分区。 为每个逻辑分区生成唯一的上下文。 当其中一个逻辑分区需要访问硬件TPM时,该分区的上下文需要存储在硬件TPM中。 硬件TPM包括有限数量的存储位置,称为上下文时隙,用于存储上下文。 每个上下文时隙都可以存储一个分区的上下文。 每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。 至少一个上下文时隙同时与多于一个的逻辑分区相关联。 在数据处理系统的运行期间,上下文交换进出硬件TPM,以便当这些分区中的一个需要访问硬件TPM时,其所需的上下文当前存储在硬件TPM中。

    Method, Apparatus, and Product for Providing a Scalable Trusted Platform Module in a Hypervisor Environment
    2.
    发明申请
    Method, Apparatus, and Product for Providing a Scalable Trusted Platform Module in a Hypervisor Environment 失效
    在Hypervisor环境中提供可扩展可信平台模块的方法,设备和产品

    公开(公告)号:US20100042823A1

    公开(公告)日:2010-02-18

    申请号:US12262445

    申请日:2008-10-31

    IPC分类号: G06F12/14 G06F9/24 G06F9/455

    摘要: A method, apparatus, and computer program product are described for implementing a trusted computing environment within a data processing system where the data processing system includes a single hardware trusted platform module (TPM). Multiple logical partitions are provided in the data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.

    摘要翻译: 描述了一种在数据处理系统内实现可信计算环境的方法,装置和计算机程序产品,其中数据处理系统包括单个硬件可信平台模块(TPM)。 在数据处理系统中提供了多个逻辑分区。 为每个逻辑分区生成唯一的上下文。 当其中一个逻辑分区需要访问硬件TPM时,该分区的上下文需要存储在硬件TPM中。 硬件TPM包括有限数量的存储位置,称为上下文时隙,用于存储上下文。 每个上下文时隙都可以存储一个分区的上下文。 每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。 至少一个上下文时隙同时与多于一个的逻辑分区相关联。 在数据处理系统的运行期间,上下文交换进出硬件TPM,以便当这些分区中的一个需要访问硬件TPM时,其所需的上下文当前存储在硬件TPM中。

    Method for providing a scalable trusted platform module in a hypervisor environment
    3.
    发明授权
    Method for providing a scalable trusted platform module in a hypervisor environment 失效
    在管理程序环境中提供可扩展的可信平台模块的方法

    公开(公告)号:US07478246B2

    公开(公告)日:2009-01-13

    申请号:US10902670

    申请日:2004-07-29

    IPC分类号: G06F11/30 H04K1/10

    摘要: A method is described for implementing a trusted computing environment within a data processing system where the data processing system includes a single hardware trusted platform module (TPM). Multiple logical partitions are provided in the data processing system. A unique context is generated for each one of the logical partitions. When one of the logical partitions requires access to the hardware TPM, that partition's context is required to be stored in the hardware TPM. The hardware TPM includes a finite number of storage locations, called context slots, for storing contexts. Each context slot can store one partition's context. Each one of the partitions is associated with one of the limited number of context storage slots in the hardware TPM. At least one of the context slots is simultaneously associated with more than one of the logical partitions. Contexts are swapped into and out of the hardware TPM during runtime of the data processing system so that when ones of the partitions require access to the hardware TPM, their required contexts are currently stored in the hardware TPM.

    摘要翻译: 描述了一种在数据处理系统内实现可信计算环境的方法,其中数据处理系统包括单个硬件可信平台模块(TPM)。 在数据处理系统中提供了多个逻辑分区。 为每个逻辑分区生成唯一的上下文。 当其中一个逻辑分区需要访问硬件TPM时,该分区的上下文需要存储在硬件TPM中。 硬件TPM包括有限数量的存储位置,称为上下文时隙,用于存储上下文。 每个上下文时隙都可以存储一个分区的上下文。 每个分区与硬件TPM中的有限数量的上下文存储时隙中的一个相关联。 至少一个上下文时隙同时与多于一个的逻辑分区相关联。 在数据处理系统的运行期间,上下文交换进出硬件TPM,以便当这些分区中的一个需要访问硬件TPM时,其所需的上下文当前存储在硬件TPM中。

    Managing the sharing of logical resources among separate partitions of a logically partitioned computer system
    4.
    发明授权
    Managing the sharing of logical resources among separate partitions of a logically partitioned computer system 失效
    管理逻辑分区计算机系统的不同分区之间的逻辑资源共享

    公开(公告)号:US08782024B2

    公开(公告)日:2014-07-15

    申请号:US10777724

    申请日:2004-02-12

    IPC分类号: G06F7/00

    摘要: A mechanism is provided for sharing resources among logical partitions in a logical partitioned data processing system and for managing the changes to resources in such a way that the sharing operating systems are able to handle the various transitions in a graceful manner. Four hypervisor functions plus a specific return code manage the granting of access of resources owned by one partition to another (client) partition, accepting of granted resources by client partitions, returning of granted resources by client partitions, and rescinding of access by the owning partition. These four hypervisor functions are invoked either explicitly by the owning and client partitions or automatically by the hypervisor in response to partition termination. The hypervisor functions provide the needed infrastructure to manage the sharing of logical resources among partitions.

    摘要翻译: 提供了一种用于在逻辑分区数据处理系统中的逻辑分区之间共享资源并且以这样的方式管理对资源的改变的机制,使得共享操作系统能够以优雅的方式处理各种转换。 四个管理程序功能加上特定的返回代码管理一个分区所拥有的资源到另一个(客户端)分区的授权,客户端分区接受授予的资源,客户机分区返回授权资源,以及由所拥有的分区撤销访问 。 这四个虚拟机管理程序功能由拥有和客户机分区明确地调用,或者由管理程序自动地响应于分区终止而调用。 管理程序功能提供所需的基础设施来管理分区之间逻辑资源的共享。

    Mechanism for detecting and clearing I/O fabric lockup conditions for error recovery
    5.
    发明授权
    Mechanism for detecting and clearing I/O fabric lockup conditions for error recovery 有权
    用于检测和清除I / O结构锁定条件以进行错误恢复的机制

    公开(公告)号:US08213294B2

    公开(公告)日:2012-07-03

    申请号:US11426592

    申请日:2006-06-27

    IPC分类号: G01R31/08

    摘要: A computer implemented method, apparatus and mechanism for recovery of an I/O fabric that has become terminally congested or deadlocked due to a failure which causes buffers/queues to fill and thereby causes the root complexes to lose access to their I/O subsystems. Upon detection of a terminally congested or deadlocked transmit queue, access to such queue by other root complexes is suspended while each item in the queue is examined and processed accordingly. Store requests and DMA read reply packets in the queue are discarded, and load requests in the queue are processed by returning a special completion package. Access to the queue by the root complexes is then resumed.

    摘要翻译: 用于恢复I / O结构的计算机实现的方法,装置和机制,其由于导致缓冲器/队列填充并由此导致根配置失去对其I / O子系统的访问的故障而变得终端拥塞或死锁。 在检测到最终拥塞或死锁传输队列时,暂停其他根组合对这样的队列的访问,同时对队列中的每个项目进行相应的检查和处理。 队列中存储请求和DMA读回应数据包将被丢弃,队列中的加载请求将通过返回特殊的完成包进行处理。 然后恢复根组合对队列的访问。

    Computer-implemented method, apparatus, and computer program product for managing DMA write page faults using a pool of substitute pages
    7.
    发明授权
    Computer-implemented method, apparatus, and computer program product for managing DMA write page faults using a pool of substitute pages 有权
    计算机实现的方法,设备和计算机程序产品,用于使用替代页面池管理DMA写页错误

    公开(公告)号:US07734842B2

    公开(公告)日:2010-06-08

    申请号:US11390790

    申请日:2006-03-28

    IPC分类号: G06F13/28 G06F12/08

    摘要: A computer-implemented method, apparatus, and computer program product are disclosed for managing direct memory access (DMA) write page faults using a pool of substitute pages. A computer system platform resolves a DMA write page fault for a page that is dedicated to an Input/Output (I/O) adapter. The I/O adapter attempts to write DMA data to the page. A determination is made that the page is unavailable for writing. The DMA data is then written to data locations in a substitute page that was selected from the pool of substitute pages. A flag is then set in a flag location for each one of the data locations. The flag locations correspond to the data locations. When a flag is set, the flag indicates that DMA write data is present in the data location that corresponds to that flag's flag location.

    摘要翻译: 公开了一种计算机实现的方法,装置和计算机程序产品,用于使用替代页面池来管理直接存储器访问(DMA)写页错误。 计算机系统平台解决专用于输入/输出(I / O)适配器的页面的DMA写入页错误。 I / O适配器尝试将DMA数据写入页面。 确定页面无法写入。 然后将DMA数据写入从替代页面池中选择的替代页面中的数据位置。 然后将标志设置在每个数据位置的标志位置。 标志位置对应于数据位置。 当标志置位时,标志表示DMA数据存在于该标志位置对应的数据位置。

    Virtualized fibre channel adapter for a multi-processor data processing system
    8.
    发明授权
    Virtualized fibre channel adapter for a multi-processor data processing system 失效
    用于多处理器数据处理系统的虚拟光纤通道适配器

    公开(公告)号:US07685335B2

    公开(公告)日:2010-03-23

    申请号:US11065869

    申请日:2005-02-25

    CPC分类号: G06F15/16 H04L49/9047

    摘要: An enhanced fibre channel adapter with multiple queues for use by different server processors or partitions. For a non-partitioned server, the OS owns the adapter, controls the adapter queues, and updates the queue table(s). An OS operator can obtain information from the fibre channel network about the fibre channel storage data zones available to the physical fibre channel adapter port and can specify that one or more zones can be accessed by a specific processor or group of processors. The processor or group of processors is given an adapter queue to access the zone or zones of storage data. This queue is given a new World Wide Port Name or new N-Port ID Virtualization identifier, to differentiate this queue from another queue that might have access to a different storage data zone or zones. For a partitioned server, one partition owns the adapter, controls the adapter queues, and updates the queue table(s). The partition management tool can obtain information from the fibre channel network about the fibre channel storage data zones available. A system operator can assign one or more storage zones under a fibre channel storage adapter to a partition. Each partition that has access to a zone or zones under an adapter is given an adapter queue to access the zone or zones. This queue is given a new World Wide Port Name or new N-Port ID Virtualization identifier, to differentiate this queue from another queue that might have access to a different storage data zone or zones.

    摘要翻译: 具有多个队列的增强型光纤通道适配器,供不同服务器处理器或分区使用。 对于非分区服务器,操作系统拥有适配器,控制适配器队列,并更新队列表。 OS操作员可以从光纤通道网络获得关于物理光纤通道适配器端口可用的光纤通道存储数据区域的信息,并且可以指定特定处理器或处理器组可以访问一个或多个区域。 给处理器或一组处理器提供了适配器队列来访问存储数据的区域或区域。 该队列具有新的全球端口名称或新的N端口ID虚拟化标识符,以将该队列与可能访问不同存储数据区域或区域的另一个队列区分开来。 对于分区服务器,一个分区拥有适配器,控制适配器队列,并更新队列表。 分区管理工具可以从光纤通道网络获取有关可用光纤通道存储数据区域的信息。 系统操作员可以将光纤通道存储适配器下的一个或多个存储区域分配给分区。 可以访问适配器下的区域或区域的每个分区都有适配器队列来访问区域或区域。 该队列具有新的全球端口名称或新的N端口ID虚拟化标识符,以将该队列与可能访问不同存储数据区域或区域的另一个队列区分开来。