专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07725895B2 Processor control register virtualization to minimize virtual machine exits 有权
标题翻译：处理器控制寄存器虚拟化，以最小化虚拟机退出
公开(公告)号：US07725895B2
公开(公告)日：2010-05-25
申请号：US10813896
申请日：2004-03-31
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/46 , G06F9/455
CPC分类号： G06F9/45533
摘要： Writing a control flag in a processor control register by a guest virtual machine. Determine whether the control flag is owned by the guest virtual machine. Write the control flag to the processor control register if the control flag is owned by the guest virtual machine. Write the control flag to a shadow location if the control flag is not owned by the guest virtual machine.
摘要翻译：由访客虚拟机在处理器控制寄存器中写入控制标志。确定控制标志是否由来宾虚拟机拥有。如果控制标志由来宾虚拟机拥有，则将控制标志写入处理器控制寄存器。如果控制标志不属于来宾虚拟机，则将控制标志写入阴影位置。

2. 发明申请

US20050223220A1 Secure virtual machine monitor to tear down a secure execution environment 有权
标题翻译：安全的虚拟机监视器，以拆除安全的执行环境
公开(公告)号：US20050223220A1
公开(公告)日：2005-10-06
申请号：US10814218
申请日：2004-03-31
申请人： Randolph Campbell , Gehad Galal
发明人： Randolph Campbell , Gehad Galal
IPC分类号： G06F9/455 , G06F9/46 , G06F21/00
CPC分类号： G06F21/57 , G06F9/45537 , G06F21/52
摘要： Disclosed is a processor having a normal execution mode and a secure execution mode to create a secure execution environment. A secure virtual machine monitor (SVMM) implements the secure execution environment in which a plurality of separate virtual machines are created that operate simultaneously and separately from one another including at least a first virtual machine to implement trusted guest software in a protected memory area and a second virtual machine to implement a non-trusted guest operating system (OS) simultaneously in a non-protected memory area. Responsive to a command to tear down the secure execution environment, the SVMM causes the processor to exit out of the secure execution mode, tears down the secure execution environment, and instructs the non-trusted guest OS to resume control in the normal execution mode.
摘要翻译：公开了具有正常执行模式和安全执行模式以用于创建安全执行环境的处理器。安全虚拟机监视器（SVMM）实现安全执行环境，在所述安全执行环境中，创建多个独立的虚拟机，所述多个独立的虚拟机同时且彼此分离地运行，所述虚拟机包括至少第一虚拟机，以在受保护的存储器区域中实现可信任的客户软件，第二虚拟机以在非受保护的存储器区域中同时实现不可信任的客户机操作系统（OS）。响应于拆卸安全执行环境的命令，SVMM使处理器退出安全执行模式，撕下安全执行环境，并指示不可信访客操作系统在正常执行模式下恢复控制。

3. 发明申请

US20060005199A1 Adaptive algorithm for selecting a virtualization algorithm in virtual machine environments 失效
公开(公告)号：US20060005199A1
公开(公告)日：2006-01-05
申请号：US10881784
申请日：2004-06-30
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/46
CPC分类号： G06F9/45533 , G06F9/461
摘要： Method for selecting a virtualization algorithm to virtualize a context change. An exit-enter time (EET) to exit and enter a context and a save-restore time (SRT) to save and restore a machine state are calculated. A selective algorithm that selectively saves and restores the machine state when there is a change of context is executed. Statistics are accumulated on an expected value for EET overhead plus an expected value for SRT overhead while executing the selective algorithm. A cost of the selective algorithm is computed as the expected value for EET overhead plus the expected value for SRT overhead. The cost of the selective algorithm is compared to two times SRT which is the cost of an unconditional algorithm that always saves and restores the machine state on context changes. One of the selective algorithm or the unconditional algorithm having the least cost is selected as the virtualization algorithm.

4. 发明申请

US20050223377A1 Processor control register virtualization to minimize virtual machine exits 有权
标题翻译：处理器控制寄存器虚拟化，以最小化虚拟机退出
公开(公告)号：US20050223377A1
公开(公告)日：2005-10-06
申请号：US10813896
申请日：2004-03-31
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/455
CPC分类号： G06F9/45533
摘要： Writing a control flag in a processor control register by a guest virtual machine. Determine whether the control flag is owned by the guest virtual machine. Write the control flag to the processor control register if the control flag is owned by the guest virtual machine. Write the control flag to a shadow location if the control flag is not owned by the guest virtual machine.
摘要翻译：由访客虚拟机在处理器控制寄存器中写入控制标志。确定控制标志是否由来宾虚拟机拥有。如果控制标志由来宾虚拟机拥有，则将控制标志写入处理器控制寄存器。如果控制标志不属于来宾虚拟机，则将控制标志写入阴影位置。

5. 发明授权

US07500244B2 Adaptive algorithm for selecting a virtualization algorithm in virtual machine environments 失效
标题翻译：用于在虚拟机环境中选择虚拟化算法的自适应算法
公开(公告)号：US07500244B2
公开(公告)日：2009-03-03
申请号：US10881784
申请日：2004-06-30
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/455 , G06F9/46
CPC分类号： G06F9/45533 , G06F9/461
摘要： Method for selecting a virtualization algorithm to virtualize a context change. An exit-enter time (EET) to exit and enter a context and a save-restore time (SRT) to save and restore a machine state are calculated. A selective algorithm that selectively saves and restores the machine state when there is a change of context is executed. Statistics are accumulated on an expected value for EET overhead plus an expected value for SRT overhead while executing the selective algorithm. A cost of the selective algorithm is computed as the expected value for EET overhead plus the expected value for SRT overhead. The cost of the selective algorithm is compared to two times SRT which is the cost of an unconditional algorithm that always saves and restores the machine state on context changes. One of the selective algorithm or the unconditional algorithm having the least cost is selected as the virtualization algorithm.
摘要翻译：用于选择虚拟化算法以虚拟化上下文变化的方法。计算退出并输入上下文的退出时间（EET）和保存和恢复计算机状态的保存还原时间（SRT）。执行当上下文改变时选择性地保存和恢复机器状态的选择性算法。在执行选择性算法时，统计量将以EET开销的期望值加上SRT开销的预期值累加。选择算法的成本被计算为EET开销的期望值加上SRT开销的期望值。将选择算法的成本与两次SRT进行比较，SRT是无条件算法的成本，该算法总是在上下文变化时保存和恢复机器状态。选择具有最低成本的选择算法或无条件算法之一作为虚拟化算法。

6. 发明授权

US07386890B2 Method and apparatus to preserve a hash value of an executable module 有权
标题翻译：保存可执行模块的哈希值的方法和装置
公开(公告)号：US07386890B2
公开(公告)日：2008-06-10
申请号：US10881783
申请日：2004-06-30
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： H04L9/00
CPC分类号： G06F21/125
摘要： An executable module includes a dynamic data area that contains all data that may be changed by execution of the executable module. A header in the module includes a start address and an end address for the dynamic data area. The executable module is loaded in a memory. An alternate memory area is allocated in the memory. The dynamic data area is copied to the alternate memory area. The memory is mapped so that execution of the executable module modifies exactly one of the dynamic data area and the alternate memory area. A hash value is computed for the executable module. The hash value includes exactly one of the dynamic data area and the alternate memory area. The unmodified memory area is copied to the modified memory area and the hash value is recomputed to re-establish the executable module in a known state.
摘要翻译：可执行模块包括动态数据区，其包含可通过执行可执行模块而改变的所有数据。模块中的标题包括动态数据区的起始地址和结束地址。可执行模块被加载到存储器中。在存储器中分配备用存储器区域。动态数据区被复制到备用存储区。映射存储器，使得可执行模块的执行精确地修改动态数据区和备用存储区之一。为可执行模块计算哈希值。散列值仅包括动态数据区和备用存储区中的一个。将未修改的存储器区域复制到修改的存储器区域，并重新计算散列值以在已知状态下重新建立可执行模块。

7. 发明授权

US07992147B2 Processor control register virtualization to minimize virtual machine exits 有权
标题翻译：处理器控制寄存器虚拟化，以最小化虚拟机退出
公开(公告)号：US07992147B2
公开(公告)日：2011-08-02
申请号：US12758683
申请日：2010-04-12
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/46 , G06F9/455
CPC分类号： G06F9/45533
摘要： A processor includes a processor control register with a control flag that determines an operating mode of the processor. A pointer to a guest virtual machine context in a portion of a random access memory (RAM) is coupled to the processor. An execution control unit tests a first flag in the guest virtual machine context, the first flag to indicate whether the control flag is owned by a guest virtual machine associated with the guest virtual machine context. The execution control unit maintains the control flag in the processor control register if the control flag is owned by the guest virtual machine and maintains the control flag in a shadow location in the guest virtual machine context if the control flag is not owned by the guest virtual machine.
摘要翻译：处理器包括具有确定处理器的操作模式的控制标志的处理器控制寄存器。在随机存取存储器（RAM）的一部分中的来宾虚拟机上下文的指针被耦合到处理器。执行控制单元测试来宾虚拟机上下文中的第一标志，第一标志以指示控制标志是否由与虚拟机上下文相关联的访客虚拟机拥有。如果控制标志由客户虚拟机拥有，执行控制单元将控制标志保持在处理器控制寄存器中，并且如果控制标志不是由客体虚拟机拥有的，则将控制标志保持在客体虚拟机上下文中的阴影位置机。

8. 发明申请

US20100199277A1 Processor Control Register Virtualization to Minimize Virtual Machine Exits 有权
标题翻译：处理器控制注册虚拟化以最小化虚拟机退出
公开(公告)号：US20100199277A1
公开(公告)日：2010-08-05
申请号：US12758683
申请日：2010-04-12
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： G06F9/455
CPC分类号： G06F9/45533
摘要： A processor includes a processor control register with a control flag that determines an operating mode of the processor. A pointer to a guest virtual machine context in a portion of a random access memory (RAM) is coupled to the processor. An execution control unit tests a first flag in the guest virtual machine context, the first flag to indicate whether the control flag is owned by a guest virtual machine associated with the guest virtual machine context. The execution control unit maintains the control flag in the processor control register if the control flag is owned by the guest virtual machine and maintains the control flag in a shadow location in the guest virtual machine context if the control flag is not owned by the guest virtual machine.
摘要翻译：处理器包括具有确定处理器的操作模式的控制标志的处理器控制寄存器。在随机存取存储器（RAM）的一部分中的来宾虚拟机上下文的指针被耦合到处理器。执行控制单元测试来宾虚拟机上下文中的第一标志，第一标志以指示控制标志是否由与虚拟机上下文相关联的访客虚拟机拥有。如果控制标志由客户虚拟机拥有，执行控制单元将控制标志保持在处理器控制寄存器中，并且如果控制标志不是由客体虚拟机拥有的，则将控制标志保持在客体虚拟机上下文中的阴影位置机。

9. 发明申请

US20060059358A1 Method and apparatus to preserve a hash value of an executable module 有权
标题翻译：保存可执行模块的哈希值的方法和装置
公开(公告)号：US20060059358A1
公开(公告)日：2006-03-16
申请号：US10881783
申请日：2004-06-30
申请人： Gehad Galal , Randolph Campbell
发明人： Gehad Galal , Randolph Campbell
IPC分类号： H04L9/00 , G06F12/14 , H04L9/32 , G06F11/30
CPC分类号： G06F21/125
摘要： An executable module includes a dynamic data area that contains all data that may be changed by execution of the executable module. A header in the module includes a start address and an end address for the dynamic data area. The executable module is loaded in a memory. An alternate memory area is allocated in the memory. The dynamic data area is copied to the alternate memory area. The memory is mapped so that execution of the executable module modifies exactly one of the dynamic data area and the alternate memory area. A hash value is computed for the executable module. The hash value includes exactly one of the dynamic data area and the alternate memory area. The unmodified memory area is copied to the modified memory area and the hash value is recomputed to re-establish the executable module in a known state.
摘要翻译：可执行模块包括动态数据区，其包含可通过执行可执行模块而改变的所有数据。模块中的标题包括动态数据区的起始地址和结束地址。可执行模块被加载到存储器中。在存储器中分配备用存储器区域。动态数据区被复制到备用存储区。映射存储器，使得可执行模块的执行精确地修改动态数据区和备用存储区之一。为可执行模块计算哈希值。散列值仅包括动态数据区和备用存储区中的一个。将未修改的存储器区域复制到修改的存储器区域，并重新计算散列值以在已知状态下重新建立可执行模块。

10. 发明申请

US20050223225A1 Switching between protected mode environments utilizing virtual machine functionality 有权
标题翻译：使用虚拟机功能切换保护模式环境
公开(公告)号：US20050223225A1
公开(公告)日：2005-10-06
申请号：US10814216
申请日：2004-03-31
申请人： Randolph Campbell , Gehad Galal
发明人： Randolph Campbell , Gehad Galal
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/6281 , G06F2221/2105
摘要： Disclosed is a processor having a normal execution mode and a host execution mode. A virtual machine monitor (VMM) operable in conjunction with the host execution mode creates at least one protected mode environment to operate guest software in a protected memory area. Responsive to a command to switch between protected modes, the VMM causes the processor to atomically switch between an original protected mode environment and a target protected mode environment. A virtual machine execution (VMX) mode may be utilized to enable virtual machine functionality for use in switching between protected modes.
摘要翻译：公开了具有正常执行模式和主机执行模式的处理器。与主机执行模式一起可操作的虚拟机监视器（VMM）创建至少一个保护模式环境以在受保护的存储器区域中操作客户软件。响应于在受保护模式之间切换的命令，VMM使处理器在原始保护模式环境和目标保护模式环境之间进行原子切换。可以利用虚拟机执行（VMX）模式来启用用于在保护模式之间切换的虚拟机功能。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式