COMMUNICATION INTERFACE OF A SECURE INTERFACE CONTROL

    公开(公告)号:CA3132753A1

    公开(公告)日:2020-09-17

    申请号:CA3132753

    申请日:2020-02-26

    Applicant: IBM

    Abstract: A method is provided. The method is implemented by a communication interface of a secure interface control executing between the secure interface control of a computer and hardware of the computer/ In this regard, the communication interface receives an instruction and determines whether the instruction is a millicoded instruction. Further, the communication interface enters a millimode comprising enabling the secure interface control to engage millicode of the hardware through the communication interface based on the instruction being the millicoded instruction. The millicode, then, executes the instruction

    SECURE INTERFACE CONTROL HIGH-LEVEL INSTRUCTION INTERCEPTION FOR INTERRUPTION ENABLEMENT

    公开(公告)号:CA3132752A1

    公开(公告)日:2020-09-17

    申请号:CA3132752

    申请日:2020-02-28

    Applicant: IBM

    Abstract: A method is provided by a secure interface control of a computer that provides a partial instruction interpretation for an instruction which enables an interruption. The secure interface control fetches a program status word or a control register value from a secure guest storage. The secure interface control notifies an untrusted entity of guest interruption mask updates. The untrusted entity is executed on and in communication with hardware of the computer through the secure interface control to support operations of a secure entity executing on the untrusted entity. The secure interface control receives, from the untrusted entity, a request to present a highest priority, enabled guest interruption in response to the notifying of the guest interruption mask updates. The secure interface control moves interruption information into a guest prefix page and injecting the interruption in the secure entity when an injection of the interruption is determined to be valid.

    INCREMENTAL DECRYPTION AND INTEGRITY VERIFICATION OF A SECURE OPERATING SYSTEM IMAGE

    公开(公告)号:CA3132735A1

    公开(公告)日:2020-09-17

    申请号:CA3132735

    申请日:2020-02-17

    Applicant: IBM

    Abstract: Secure processing within a computing environment is provided by incrementally decrypting a secure operating system image, including receiving, for a page of the secure operating system image, a page address and a tweak value used during encryption of the page. Processing determines that the tweak value has not previously been used during decryption of another page of the secure operating system image, and decrypts memory page content at the page address using an image encryption key and the tweak value to facilitate obtaining a decrypted secure operating system image. Further, integrity of the secure operating system image is verified, and based on verifying integrity of the secure operating system image, execution of the decrypted secure operating system image is started.

    DYNAMIC ADDRESS TRANSLATION WITH FRAME MANAGEMENT

    公开(公告)号:CA2701086C

    公开(公告)日:2017-09-19

    申请号:CA2701086

    申请日:2009-01-05

    Applicant: IBM

    Abstract: What is disclosed is a set key and clear frame management function defined for a machine architecture of a computer system. In one embodiment, a machine instruction is obtained which identifies a first and second general register. Obtained from the first general register is a frame size field indicating whether a storage frame is one of a small block or a large block of data. Obtained from the second general register is an operand address of a storage frame upon which the instruction is to be performed. If the storage frame is a small block, the instruction is performed only on the small block. If the indicated storage frame is a large block of data, an operand address of an initial first block of data within the large block of data is obtained from the second general register. The frame management instruction is performed on all blocks starting from the initial first block.

    ΔΥΝΑΜΙΚΗ ΜΕΤΑΦΡΑΣΗ ΔΙΕΥΘΥΝΣΕΩΣ ΜΕ ΕΛΕΓΧΟ ΜΟΡΦΟΤΥΠΟΥ

    公开(公告)号:CY1113979T1

    公开(公告)日:2016-07-27

    申请号:CY131100366

    申请日:2013-05-02

    Applicant: IBM

    Abstract: Αυτόπουπαρέχεταιείναιμίαευκολίαβελτιωμένηςδυναμικήςμεταφράσεωςδιευθύνσεως. Σεμίαυλοποίηση, λαμβάνονται, μίαεικονικήδιεύθυνσηπροςμετάφρασηκαιμίααρχικήδιεύθυνσηπροελεύσεωςενόςπίνακαμεταφράσεωςμίαςιεραρχίαςπινάκωνμεταφράσεως. Χρησιμοποιείταιένατμήμαδείκτητηςεικονικήςδιευθύνσεωςγιαναγίνειαναφοράσεμίαεισαγωγήστονπίνακαμεταφράσεως. Εάνέχειενεργοποιηθείτοπεδίοελέγχουμορφοτύπου, λαμβάνεταιμίαδιεύθυνσηπλαισίουενόςμεγάλουμπλοκδεδομένωνστηνκύριαμνήμηαπότηνεισαγωγήπίνακαμεταφράσεως. Τομεγάλομπλοκδεδομένωνείναιέναμπλοκμεγέθουςτουλάχιστον 1Mbyte. Ηδιεύθυνσηπλαισίουσυνδυάζεταικατόπινμεένατμήμαμετατοπίσεωςτηςεικονικήςδιευθύνσεωςγιανασχηματισθείη μεταφρασθείσαδιεύθυνσηενόςεπιθυμητούμπλοκδεδομένωνεντόςτουμεγάλουμπλοκδεδομένωνστηνκύριαμνήμη. Γίνεταικατόπινπροσπέλασητουεπιθυμητούμεγάλουμπλοκδεδομένωνπουδιευθυνσιοδοτείταιαπότημεταφρασθείσαδιεύθυνση.

Patent Agency Ranking