会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明申请
    • OS mini-boot for running multiple environments
    • 操作系统mini-boot,用于运行多个环境
    • US20070134068A1
    • 2007-06-14
    • US11301066
    • 2005-12-12
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • B60P1/60
    • G06F9/4401Y10S707/99939
    • An intra-operating system isolation mechanism called a silo provides for the grouping and isolation of processes running on a single computer using a single instance of the operating system. The operating system enables the controlled sharing of resources by providing a view of a system name space to processes executing within an isolated application called a server silo. A server silo is created by performing a separate “mini-boot” of user-level services within the server silo. The single OS image serving the computer employs the mechanism of name space containment to constrain which server silos can use which resource(s). Restricting access to resources is therefore directly based on the process or application placed in the server silo rather than who is running the application because if a process or application is unable to resolve a name used to access a resource, it will be unable to use the resource.
    • 称为仓库的操作系统隔离机制提供了使用单个操作系统实例在单个计算机上运行的进程的分组和隔离。 操作系统通过提供系统名称空间的视图来实现资源的受控共享,以便在被称为服务器仓的隔离应用程序内执行的进程进行处理。 通过在服务器仓内执行用户级服务的单独“微引导”来创建服务器仓库。 服务于计算机的单个OS映像使用名称空间容纳的机制来约束哪个服务器孤岛可以使用哪个资源。 因此,限制对资源的访问直接基于放置在服务器仓中的进程或应用程序,而不是运行应用程序的用户,因为如果进程或应用程序无法解析用于访问资源的名称,则无法使用 资源。
    • 3. 发明申请
    • Use of rules engine to build namespaces
    • 使用规则引擎构建命名空间
    • US20070134069A1
    • 2007-06-14
    • US11301071
    • 2005-12-12
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • B60P1/60
    • G06F9/5072
    • A containment mechanism provides for the grouping and isolation of multiple processes running on a single computer using a single instance of the operating system. A system environment is divided into one or more side-by-side and/or nested spaces enabling the partitioning and controlled sharing of resources by creating different views of hierarchical name spaces via virtual hierarchies. A set of declarative rules specifying access capabilities may specify a set of filter drivers to be used to limit access to nodes in the hierarchical name space. The rules may be applied in sequence to construct a new name space from an existing one, or to add to an existing hierarchy. Filter drivers are used to limit access to nodes in the new name space or new portion of the name space. Access to nodes can be limited (read-only access instead of read/write) or nodes can be hidden altogether. Rules may be specified in a declarative language such as XML.
    • 遏制机制提供了使用单个操作系统实例在单个计算机上运行的多个进程的分组和隔离。 系统环境分为一个或多个并排和/或嵌套空间,通过虚拟层次结构创建分层名称空间的不同视图,实现资源的分区和控制共享。 指定访问功能的一组声明性规则可以指定一组用于限制对分层名称空间中的节点的访问的过滤器驱动程序。 这些规则可以按顺序应用,以从现有规则中构建新的名称空间,或添加到现有的层次结构中。 过滤器驱动程序用于限制对新名称空间中节点或名称空间的新部分的访问。 可以限制对节点的访问(只读访问而不是读/写),或者可以完全隐藏节点。 规则可以声明性语言(如XML)来指定。
    • 5. 发明申请
    • Mechanism for drivers to create alternate namespaces
    • 驱动程序创建备用命名空间的机制
    • US20070136356A1
    • 2007-06-14
    • US11301072
    • 2005-12-12
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • Frederick SmithJeff HavensMadhusudhan TalluriYousef Khalidi
    • G06F7/00
    • G06F9/545G06F9/468
    • An intra-operating system isolation mechanism called a silo provides for the grouping of processes running on a single computer using a single instance of the operating system. The operating system divides the system into multiple side-by-side and/or nested environments enabling the partitioning and controlled sharing of resources and providing an isolated application environment in which applications can run. More specifically, a system environment may be divided into an infrastructure silo and one or more server silos. Each server silo is provided with its own copy of the device driver name space. Each device is associated with a system device object accessed via a system device functional interface and with a server silo-specific device object accessed via a control device interface. The infrastructure silo populates the silo-specific device name space with the control device interface. The server silo uses the control device interface to create new device object(s) as needed.
    • 称为仓库的操作系统隔离机制提供了使用单个操作系统实例在单个计算机上运行的进程分组。 操作系统将系统分为多个并行和/或嵌套环境,可实现资源的分区和控制共享,并提供应用程序可以运行的隔离应用程序环境。 更具体地,系统环境可以被划分为基础设施仓库和一个或多个服务器仓库。 每个服务器仓被提供有自己的设备驱动程序名称空间的副本。 每个设备与经由系统设备功能接口访问的系统设备对象以及经由控制设备接口访问的服务器特定设备对象相关联。 基础架构采用控制设备接口填充特定于设备的设备名称空间。 服务器端口使用控制设备接口根据需要创建新的设备对象。
    • 10. 发明授权
    • Zero-copy transfer of memory between address spaces
    • 存储器在地址空间之间的零拷贝传输
    • US07454477B2
    • 2008-11-18
    • US11129926
    • 2005-05-16
    • Madhusudhan TalluriMuthian Sivathanu
    • Madhusudhan TalluriMuthian Sivathanu
    • G06F15/167G06F12/00G06F3/00
    • G06F9/526
    • Methods for performing zero-copy memory transfers between processes or services using shared memory without the overhead of current schemes. An IPC move semantic may be used that allows a sender to combine passing a reference and releasing it within the same IPC call. An insulate method removes all references to the original object and creates a new object pointing to the original memory if a receiver requires exclusive access. Alternatively, if a receiving process or service seeks read-only access, the sender unmaps its access to the buffer before sending to the receiver. When the insulate operation is initiated, the kernel detects an object with multiple active references but no active mappings and provides a mapping to the memory without taking a copy or copy-on-write.
    • 使用共享内存在进程或服务之间执行零拷贝内存传输的方法,而不需要当前方案的开销。 可以使用IPC移动语义,其允许发送者组合传递引用并在相同的IPC调用中释放它。 绝对方法删除对原始对象的所有引用,并创建一个指向原始内存的新对象,如果接收方需要独占访问。 或者,如果接收进程或服务寻求只读访问,则在发送给接收者之前,发送者取消对其访问缓冲器的映射。 当绝缘操作启动时,内核会检测到具有多个活动引用但没有活动映射的对象,并提供映射到存储器,而无需复制或写时复制。