Remote I/O for virtualized systems
    1.
    发明申请
    Remote I/O for virtualized systems 审中-公开
    用于虚拟化系统的远程I / O

    公开(公告)号:US20070038996A1

    公开(公告)日:2007-02-15

    申请号:US11199765

    申请日:2005-08-09

    IPC分类号: G06F9/455

    CPC分类号: G06F13/105

    摘要: A virtualized system including a processing sub-system including a plurality of partitions and operating systems and a virtualization layer, each partition running its own operating system and having assigned its own partition ID, and an I/O emulation entity connected to the processing sub-system through a bus and connected to a network to which is connected at least one computer that hosts at least one remote I/O peripheral, the I/O emulation entity being adapted to execute an I/O-emulation transaction for any of the operating systems in accordance with that operating system's partition-ID.

    摘要翻译: 一种虚拟化系统,包括包括多个分区和操作系统的处理子系统和虚拟化层,每个分区运行其自己的操作系统并分配了其自己的分区ID,以及连接到处理子系统的I / O仿真实体, 系统通过总线连接到连接至少一个主机至少一个远程I / O外围设备的计算机的网络,I / O仿真实体适于执行任何操作的I / O仿真事务 系统根据该操作系统的分区ID。

    Enhanced direct memory access
    3.
    发明授权
    Enhanced direct memory access 有权
    增强的直接内存访问

    公开(公告)号:US08949569B2

    公开(公告)日:2015-02-03

    申请号:US12111968

    申请日:2008-04-30

    IPC分类号: G06F9/26 G06F9/38 G06F12/08

    摘要: A method for facilitating direct memory access in a computing system in response to a request to transfer data is provided. The method comprises selecting a thread for transferring the data, wherein the thread executes on a processing core within the computing system; providing the thread with the request, wherein the request comprises information for carrying out a data transfer; and transferring the data according to the request. The method may further comprise: coordinating the request with a memory management unit, such that virtual addresses may be used to transfer data; invalidating a cache line associated with the source address or flushing a cache line associated with the destination address, if requested. Multiple threads can be selected to transfer data based on their proximity to the destination address.

    摘要翻译: 提供了一种用于响应于传送数据的请求而促进计算系统中的直接存储器访问的方法。 该方法包括选择用于传送数据的线程,其中线程在计算系统内的处理核上执行; 向所述线程提供所述请求,其中所述请求包括用于执行数据传送的信息; 并根据请求传送数据。 该方法还可以包括:将请求与存储器管理单元协调,使得可以使用虚拟地址来传送数据; 如果请求,则使与源地址相关联的高速缓存行无效或者刷新与目的地地址相关联的高速缓存行。 可以选择多个线程以根据其到目的地地址的接近度传输数据。

    Method and system for memory address translation and pinning
    5.
    发明授权
    Method and system for memory address translation and pinning 失效
    内存地址转换和固定的方法和系统

    公开(公告)号:US07636800B2

    公开(公告)日:2009-12-22

    申请号:US11426588

    申请日:2006-06-27

    摘要: A method and system for memory address translation and pinning are provided. The method includes attaching a memory address space identifier to a direct memory access (DMA) request, the DMA request is sent by a consumer and using a virtual address in a given address space. The method further includes looking up for the memory address space identifier to find a translation of the virtual address in the given address space used in the DMA request to a physical page frame. Provided that the physical page frame is found, pinning the physical page frame al song as the DMA request is in progress to prevent an unmapping operation of said virtual address in said given address space, and completing the DMA request, wherein the steps of attaching, looking up and pinning are centrally controlled by a host gateway.

    摘要翻译: 提供了一种用于存储器地址转换和钉扎的方法和系统。 该方法包括将存储器地址空间标识符附加到直接存储器访问(DMA)请求,DMA请求由消费者发送并且使用给定地址空间中的虚拟地址。 该方法还包括查找存储器地址空间标识符以找到在DMA请求中使用的给定地址空间中的虚拟地址到物理页面帧的转换。 如果发现物理页框,则在进行DMA请求时固定物理页框al歌,以防止在所述给定地址空间中所述虚拟地址的解映射操作,并完成DMA请求,其中, 查找和固定由主机网关集中控制。

    System, method and computer program product for inviting other virtual machine to access a memory space allocated to a virtual machine
    6.
    发明授权
    System, method and computer program product for inviting other virtual machine to access a memory space allocated to a virtual machine 有权
    用于邀请其他虚拟机访问分配给虚拟机的内存空间的系统,方法和计算机程序产品

    公开(公告)号:US08898665B2

    公开(公告)日:2014-11-25

    申请号:US13407782

    申请日:2012-02-29

    IPC分类号: G06F9/52 H04L9/32 G06F9/455

    摘要: A method for accessing a memory space allocated to a virtual machine, the method includes: receiving a request from the virtual machine to generate, for another virtual machine, a memory credential associated with a certain memory space allocated to the virtual machine; generating, in response to the request, a cryptographically signed credential; sending the cryptographically signed credential to the other virtual machine; receiving from the other virtual machine an access request to access at least one memory entry within the certain memory space; and accessing the at least one memory entry, if the access request complies with the memory credential.

    摘要翻译: 一种用于访问分配给虚拟机的存储器空间的方法,所述方法包括:从所述虚拟机接收请求以为另一虚拟机生成与分配给所述虚拟机的某个存储空间相关联的存储凭证; 响应于该请求生成加密签名的证书; 将密码签名的凭证发送到另一个虚拟机; 从所述另一虚拟机接收访问所述特定存储器空间内的至少一个存储器条目的访问请求; 以及如果所述访问请求符合所述存储凭证,则访问所述至少一个存储器条目。

    Method and system for memory protection and security using credentials
    8.
    发明授权
    Method and system for memory protection and security using credentials 失效
    用于内存保护和安全使用凭证的方法和系统

    公开(公告)号:US07757280B2

    公开(公告)日:2010-07-13

    申请号:US11333066

    申请日:2006-01-17

    IPC分类号: G06F21/00 H04L12/14

    摘要: A computer-implemented method for protecting a memory is provided. The method includes responsive to a direct memory access (DMA) request received from a consumer for a transaction of data from an IO device to the memory, the request including an IO command and a capability (CAP), generating a cryptographically signed capability (CAPB), forming a credential from CAP and CAPB, appending the credential to the IO command, configuring the IO device according to the credential and the IO command, transmitting the data from the IO device to the memory and prior to allowing execution of the DMA, authenticating that the credential is valid, further includes regenerating CAPB from a key available to an authenticating entity and from the CAP (included in CAPB) and verifying that the memory region information described in the cryptographically signed capability is the same as the requested region that was originally created, and that the cryptographically signed capability encompasses the IO command.

    摘要翻译: 提供了一种用于保护存储器的计算机实现的方法。 该方法包括响应于从消费者接收的用于从IO设备到存储器的数据交易的直接存储器访问(DMA)请求,该请求包括IO命令和能力(CAP),生成加密签名的能力(CAPB ),从CAP和CAPB形成证书,将凭证附加到IO命令,根据凭证和IO命令配置IO设备,将数据从IO设备发送到存储器,并且在允许执行DMA之前, 认证证书是有效的,还包括从认证实体和CAP(包括在CAPB中)的可用密钥中重新生成CAPB,并验证以加密签名能力描述的存储器区域信息是否与被请求的区域相同 最初创建,并且加密签名的功能包含IO命令。

    METHOD AND SYSTEM FOR MEMORY ADDRESS TRANSLATION AND PINNING
    9.
    发明申请
    METHOD AND SYSTEM FOR MEMORY ADDRESS TRANSLATION AND PINNING 审中-公开
    用于存储器翻译和引导的方法和系统

    公开(公告)号:US20100049883A1

    公开(公告)日:2010-02-25

    申请号:US12568712

    申请日:2009-09-29

    IPC分类号: G06F13/28 G06F12/10

    摘要: A method and system for memory address translation and pinning are provided. The method includes attaching a memory address space identifier to a direct memory access (DMA) request, the DMA request is sent by a consumer and using a virtual address in a given address space. The method further includes looking up for the memory address space identifier to find a translation of the virtual address in the given address space used in the DMA request to a physical page frame. Provided that the physical page frame is found, pinning the physical page frame as long as the DMA request is in progress to prevent an unmapping operation of said virtual address in said given address space, and completing the DMA request, wherein the steps of attaching, looking up and pinning are centrally controlled by a host gateway.

    摘要翻译: 提供了一种用于存储器地址转换和钉扎的方法和系统。 该方法包括将存储器地址空间标识符附加到直接存储器访问(DMA)请求,DMA请求由消费者发送并且使用给定地址空间中的虚拟地址。 该方法还包括查找存储器地址空间标识符以找到在DMA请求中使用的给定地址空间中的虚拟地址到物理页面帧的转换。 只要找到物理页面帧,只要DMA请求正在进行,固定物理页面帧,以防止所述给定地址空间中的所述虚拟地址的解映射操作,并且完成DMA请求,其中, 查找和固定由主机网关集中控制。

    Enhanced Direct Memory Access
    10.
    发明申请
    Enhanced Direct Memory Access 有权
    增强的直接内存访问

    公开(公告)号:US20090276571A1

    公开(公告)日:2009-11-05

    申请号:US12111968

    申请日:2008-04-30

    IPC分类号: G06F9/30 G06F12/00

    摘要: A method for facilitating direct memory access in a computing system in response to a request to transfer data is provided. The method comprises selecting a thread for transferring the data, wherein the thread executes on a processing core within the computing system; providing the thread with the request, wherein the request comprises information for carrying out a data transfer; and transferring the data according to the request. The method may further comprise: coordinating the request with a memory management unit, such that virtual addresses may be used to transfer data; invalidating a cache line associated with the source address or flushing a cache line associated with the destination address, if requested. Multiple threads can be selected to transfer data based on their proximity to the destination address.

    摘要翻译: 提供了一种用于响应于传送数据的请求而促进计算系统中的直接存储器访问的方法。 该方法包括选择用于传送数据的线程,其中线程在计算系统内的处理核上执行; 向所述线程提供所述请求,其中所述请求包括用于执行数据传送的信息; 并根据请求传送数据。 该方法还可以包括:将请求与存储器管理单元协调,使得可以使用虚拟地址来传送数据; 如果请求,则使与源地址相关联的高速缓存行无效或者刷新与目的地地址相关联的高速缓存行。 可以选择多个线程以根据其到目的地地址的接近度传输数据。