专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07418584B1 Executing system management mode code as virtual machine guest 有权
标题翻译：执行系统管理模式代码作为虚拟机guest
公开(公告)号：US07418584B1
公开(公告)日：2008-08-26
申请号：US11066752
申请日：2005-02-25
申请人： Alexander C. Klaiber , Geoffrey S. Strongin , Kevin J. McGrath
发明人： Alexander C. Klaiber , Geoffrey S. Strongin , Kevin J. McGrath
IPC分类号： G06F7/38 , G06F9/00 , G06F9/44 , G06F15/00
CPC分类号： G06F9/45533
摘要： In one embodiment, a register in a processor is programmable with an intercept indication indicative of whether or not an event that would cause a transition by the processor to a first mode is to be intercepted during execution of a guest. Responsive to the intercept indication and further responsive to detecting the event, execution circuitry in the processor is configured to exit the guest. In another embodiment, a method comprises: detecting an event that would cause a processor to transition to a first mode, wherein first code is to be executed in the first mode; and causing the first code to be executed in a guest responsive to the detecting. In still another embodiment, a computer accessible medium comprising instructions which when executed in response to detecting the event, cause the first code to be executed in a guest.
摘要翻译：在一个实施例中，处理器中的寄存器是可编程的，其中拦截指示指示在执行客户期间是否将由处理器转换到第一模式的事件被拦截。响应于拦截指示并进一步响应于检测事件，处理器中的执行电路被配置为退出客人。在另一个实施例中，一种方法包括：检测将导致处理器转换到第一模式的事件，其中第一代码将以第一模式执行; 并且响应于检测使得在客人中执行第一代码。在另一个实施例中，一种包括指令的计算机可访问介质，当被响应于检测到事件而被执行时，导致第一代码在客户机中被执行。

2. 发明授权

US07603550B2 Computer system including a secure execution mode-capable CPU and a security services processor connected via a secure communication path 有权
标题翻译：计算机系统包括安全执行模式的CPU和通过安全通信路径连接的安全服务处理器
公开(公告)号：US07603550B2
公开(公告)日：2009-10-13
申请号：US10419082
申请日：2003-04-18
申请人： Kevin J. McGrath , Geoffrey S. Strongin , Dale E. Gulick , William A. Hughes , David S. Christie
发明人： Kevin J. McGrath , Geoffrey S. Strongin , Dale E. Gulick , William A. Hughes , David S. Christie
IPC分类号： H04L9/00 , H04L9/32
CPC分类号： G06F9/4403 , G06F21/10 , G06F21/74
摘要： A computer system includes a processor which may initialize a secure execution mode by executing a security initialization instruction. Further, the processor may operate in the secure execution mode by executing a secure operating system code segment. The computer system also includes an input/output (I/O) interface coupled to the processor via an I/O link. The I/O interface may receive transactions performed as a result of the execution of the security initialization instruction. The transactions include at least a portion of the secure operating system code segment. The I/O interface may also determine whether the processor is a source of the transactions. The computer system further includes a security services processor coupled to the I/O interface via a peripheral bus. The I/O interface may convey the transactions to the security services processor dependent upon determining that the processor is the source of the transactions.
摘要翻译：计算机系统包括可以通过执行安全初始化指令来初始化安全执行模式的处理器。此外，处理器可以通过执行安全操作系统代码段在安全执行模式下操作。计算机系统还包括通过I / O链路耦合到处理器的输入/输出（I / O）接口。 I / O接口可以接收由于执行安全初始化指令而执行的事务。交易包括安全操作系统代码段的至少一部分。 I / O接口还可以确定处理器是否是事务的来源。计算机系统还包括通过外围总线耦合到I / O接口的安全服务处理器。取决于确定处理器是交易的来源，I / O接口可以将交易传达给安全服务处理器。

3. 发明授权

US07603551B2 Initialization of a computer system including a secure execution mode-capable processor 有权
标题翻译：包括安全执行模式处理器的计算机系统的初始化
公开(公告)号：US07603551B2
公开(公告)日：2009-10-13
申请号：US10419121
申请日：2003-04-18
申请人： Kevin J. McGrath , Geoffrey S. Strongin , David S. Christie , William A. Hughes , Dale E. Gulick
发明人： Kevin J. McGrath , Geoffrey S. Strongin , David S. Christie , William A. Hughes , Dale E. Gulick
IPC分类号： G06F9/44 , H04L29/06
CPC分类号： G06F9/4403
摘要： The initialization of a computer system including a secure execution mode-capable processor includes storing a secure operating system code segment loader to a plurality of locations corresponding to a particular range of addresses within a system memory. The method also includes executing a security initialization instruction. Executing the security initialization instruction may cause several operations to be performed including transmitting a start transaction including a base address of the particular range of addresses. In addition, executing the security instruction may also cause another operation to be performed including retrieving the secure operating system code segment loader from the system memory and transmitting the secure operating system code segment loader for validation as a plurality of data transactions.
摘要翻译：包括具有安全执行模式能力的处理器的计算机系统的初始化包括将安全操作系统代码段加载器存储到对应于系统存储器内的特定地址范围的多个位置。该方法还包括执行安全初始化指令。执行安全初始化指令可能导致执行若干操作，包括发送包括特定地址范围的基地址的开始事务。此外，执行安全指令还可以引起执行另一操作，包括从系统存储器检索安全操作系统代码段加载器，并将安全操作系统代码段加载器发送为多个数据事务。

4. 发明授权

US07165135B1 Method and apparatus for controlling interrupts in a secure execution mode-capable processor 有权
标题翻译：用于控制具有安全执行模式的处理器中的中断的方法和装置
公开(公告)号：US07165135B1
公开(公告)日：2007-01-16
申请号：US10419122
申请日：2003-04-18
申请人： David S. Christie , Kevin J. McGrath , Geoffrey S. Strongin
发明人： David S. Christie , Kevin J. McGrath , Geoffrey S. Strongin
IPC分类号： G06F7/04
CPC分类号： G06F21/74
摘要： A method is provided for controlling interrupts in a secure execution mode-capable processor. The method includes detecting an interrupt and performing a predetermined routine in response to detecting the interrupt. The method further includes performing a second routine prior to performing the predetermined routine in response to detecting the interrupt depending upon whether the processor is operating in a secure execution mode.
摘要翻译：提供了一种用于控制具有安全执行模式的处理器中的中断的方法。该方法包括响应于检测到中断而检测中断并执行预定程序。该方法还包括在执行预定例程之前执行第二例程以响应于根据处理器是否以安全执行模式操作来检测中断。

5. 发明授权

US07130951B1 Method for selectively disabling interrupts on a secure execution mode-capable processor 有权
标题翻译：用于选择性地禁用具有安全执行模式的处理器上的中断的方法
公开(公告)号：US07130951B1
公开(公告)日：2006-10-31
申请号：US10419091
申请日：2003-04-18
申请人： David S. Christie , Geoffrey S. Strongin , Kevin J. McGrath
发明人： David S. Christie , Geoffrey S. Strongin , Kevin J. McGrath
IPC分类号： G06F13/24 , H04L9/00
CPC分类号： G06F9/4812
摘要： A method of controlling a secure execution mode-capable processor includes allowing a plurality of interrupts to interrupt the secure execution mode-capable processor when the secure execution mode-capable processor is operating in a non-secure execution mode. The method also includes disabling the plurality of interrupts from interrupting the secure execution mode-capable processor when the secure execution mode-capable processor is operating in a secure execution mode.
摘要翻译：控制具有安全执行模式的处理器的方法包括当具有安全执行模式的处理器在非安全执行模式下操作时允许多个中断来中断具有安全执行模式的处理器。该方法还包括当安全执行模式处理器以安全执行模式操作时禁用多个中断来中断具有安全执行模式的处理器。

6. 发明授权

US07082507B1 Method of controlling access to an address translation data structure of a computer system 有权
标题翻译：控制对计算机系统的地址转换数据结构的访问的方法
公开(公告)号：US07082507B1
公开(公告)日：2006-07-25
申请号：US10419086
申请日：2003-04-18
申请人： David S. Christie , Geoffrey S. Strongin , Kevin J. McGrath
发明人： David S. Christie , Geoffrey S. Strongin , Kevin J. McGrath
IPC分类号： G06F12/14
CPC分类号： G06F12/1491 , G06F12/10 , G06F12/145
摘要： A method of controlling access to an address translation data structure of a computer system. The computer system includes a processor having a normal execution mode and a secure execution mode. The method includes executing code and generating a linear address. During translation of the linear address into a physical address, the method also includes generating a read-only page fault exception during the normal execution mode in response to detecting a software invoked write access to an address translation data structure having a read/write attribute set to be read-only. The method further includes selectively generating either the read-only page fault exception or a security exception during the secure execution mode in response to detecting the software invoked write access.
摘要翻译：一种控制对计算机系统的地址转换数据结构的访问的方法。计算机系统包括具有正常执行模式和安全执行模式的处理器。该方法包括执行代码并生成线性地址。在将线性地址转换为物理地址期间，该方法还包括在正常执行模式期间响应于检测到具有读/写属性集的地址转换数据结构的软件调用写访问而产生只读页错误异常是只读的。该方法还包括响应于检测到软件调用的写访问而在安全执行模式期间选择性地生成只读页错误异常或安全异常。

7. 发明授权

US07496966B1 Method and apparatus for controlling operation of a secure execution mode-capable processor in system management mode 有权
标题翻译：用于在系统管理模式下控制具有安全执行模式的处理器的操作的方法和装置
公开(公告)号：US07496966B1
公开(公告)日：2009-02-24
申请号：US10419120
申请日：2003-04-18
申请人： Kevin J. McGrath , David S. Christie , Geoffrey S. Strongin
发明人： Kevin J. McGrath , David S. Christie , Geoffrey S. Strongin
IPC分类号： G06F7/04 , G06F12/00
CPC分类号： G06F9/4403 , G06F21/10 , G06F21/74
摘要： A method for controlling operation of a secure execution mode-capable processor includes receiving access requests to a plurality of addressable locations within a system memory. The method may further include preventing the access requests from completing in response to determining that the secure execution mode-capable processor is operating in a secure execution mode.
摘要翻译：一种用于控制具有安全执行模式的处理器的操作的方法，包括：接收对系统存储器内的多个可寻址位置的访问请求。所述方法可以进一步包括响应于确定具有安全执行模式的处理器在安全执行模式中操作来防止访问请求完成。

8. 发明授权

US07146477B1 Mechanism for selectively blocking peripheral device accesses to system memory 有权
标题翻译：选择性地阻止外围设备访问系统内存的机制
公开(公告)号：US07146477B1
公开(公告)日：2006-12-05
申请号：US10419090
申请日：2003-04-18
申请人： Geoffrey S. Strongin , David S. Christie , William A. Hughes , Kevin J. McGrath
发明人： Geoffrey S. Strongin , David S. Christie , William A. Hughes , Kevin J. McGrath
IPC分类号： G06F12/00
CPC分类号： G06F12/1475
摘要： A system is configured to selectively block peripheral accesses to system memory. The system includes a secure execution mode (SEM)-capable processor configured to operate in a trusted execution mode. The system also includes a system memory including a plurality of addressable locations. The system further includes a memory controller that may determine a source of an access request to one or more of the plurality of locations of the system memory. The memory controller may further allow the access request to proceed in response to determining that the source of the access request is the SEM-capable processor.
摘要翻译：系统被配置为选择性地阻止对系统存储器的外围访问。该系统包括被配置为以可信执行模式操作的安全执行模式（SEM）能力处理器。该系统还包括包括多个可寻址位置的系统存储器。系统还包括存储器控制器，其可以确定对系统存储器的多个位置中的一个或多个的访问请求的来源。响应于确定访问请求的源是具有SEM能力的处理器，存储器控制器还可以允许访问请求继续进行。

9. 发明授权

US08127098B1 Virtualization of real mode execution 有权
标题翻译：虚拟化实模式执行
公开(公告)号：US08127098B1
公开(公告)日：2012-02-28
申请号：US11066873
申请日：2005-02-25
申请人： Alexander C. Klaiber , Kevin J. McGrath , Hongwen Gao
发明人： Alexander C. Klaiber , Kevin J. McGrath , Hongwen Gao
IPC分类号： G06F12/14
CPC分类号： G06F9/45533
摘要： In one embodiment, a processor is configured to operate in a first mode in which privilege level protection is disabled and paging is enabled. In another embodiment, a method is contemplated including intercepting a write to a control register by a guest executing in a processor; determining that the write attempts to establish a first mode in the processor in which privilege level protection is disabled and paging is disabled; and causing the guest to execute in a second mode in which privilege level protection is disabled and paging is enabled instead of the first mode. A computer accessible medium comprising instruction implementing at least a portion of the method is also described.
摘要翻译：在一个实施例中，处理器被配置为在其中禁用特权级别保护并且启用寻呼的第一模式中操作。在另一个实施例中，构想了一种方法，包括：通过在处理器中执行的访客拦截对控制寄存器的写入; 确定写入尝试在处理器中建立第一模式，其中禁用特权级别保护并禁用寻呼; 并且使得客人在禁用特权级别保护并且寻呼被启用而不是第一模式的第二模式中执行。还描述了包括执行方法的至少一部分的指令的计算机可访问介质。

10. 发明授权

US06571330B1 Address size and operand size prefix overrides for default sizes defined by an operating mode of a processor 有权
标题翻译：由处理器的操作模式定义的默认大小的地址大小和操作数大小前缀替换
公开(公告)号：US06571330B1
公开(公告)日：2003-05-27
申请号：US09483560
申请日：2000-01-14
申请人： Kevin J. McGrath , Michael T. Clark
发明人： Kevin J. McGrath , Michael T. Clark
IPC分类号： G06F934
CPC分类号： G06F9/30192 , G06F9/30185 , G06F9/30189 , G06F9/342
摘要： A processor supports a processing mode in which the default address size is greater than 32 bits and the default operand size is 32 bits. The default address size may be nominally indicated as 64 bits, although various embodiments of the processor may implement any address size which exceeds 32 bits, up to and including 64 bits, in the processing mode. The processing mode may be established by placing an enable indication in a control register into an enabled state and by setting a first operating mode indication and a second operating mode indication in a segment descriptor to predefined states. Additionally, an instruction prefix may be coded into an instruction to override the default address and/or operand size. Thus, an address size of 32 bits may be used when desired, and an operand size of 64 bits may be used when desired.
摘要翻译：处理器支持默认地址大小大于32位，默认操作数大小为32位的处理模式。默认地址大小可以标称地指示为64位，尽管处理器的各种实施例可以在处理模式中实现超过32位，高达并包括64位的任何地址大小。可以通过将控制寄存器中的使能指示置于使能状态并且通过将段描述符中的第一操作模式指示和第二操作模式指示设置为预定状态来建立处理模式。另外，指令前缀可以被编码到用于覆盖默认地址和/或操作数大小的指令中。因此，如果需要，可以使用32位的地址大小，并且当需要时可以使用64位的操作数大小。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式