公开(公告)号：JP2012009013A

公开(公告)日：2012-01-12

申请号：JP2011108146

申请日：2011-05-13

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： HUA ZOU ,  VINCENT J ZIMMER ,  ROTHMAN MICHAEL A ,  YI KI-AHN ,  JUNWAY STANLEY CHENG ,  HWANG FU-JIN

IPC: G06F21/22 ,  G06F9/46 ,  G06F13/10

CPC classification number: G06F9/45558 ,  G06F2009/45579

Abstract: PROBLEM TO BE SOLVED: To secure access via a device driver to a storage device by suppressing the load of OS development from becoming large as the number and type of storage devices is increased.SOLUTION: Disclosed is a partial virtual machine for instantiating a virtual I/O device including a virtual I/O controller corresponding to a physical I/O device. The partial virtual machine includes: an I/O controller emulator configured to capture an I/O request from an operating system to the virtual I/O device, and to perform processing when the I/O request includes an I/O control request; an I/O device emulator configured to perform processing when the I/O request includes an I/O access request; and a device driver connected to the I/O controller emulator part and the I/O device emulator part, and configured to communicate with a physical I/O device. The partial virtual machine is executed by a secure enclave session, and configured to suppress access to the partial virtual machine by an OS.

Abstract translation: 要解决的问题：通过随着存储设备的数量和类型的增加，通过抑制OS开发的负担变得越来越大，通过设备驱动程序来保护对存储设备的访问。 解决方案：公开了一种用于实例化虚拟I / O设备的部分虚拟机，包括对应于物理I / O设备的虚拟I / O控制器。 所述部分虚拟机包括：I / O控制器仿真器，被配置为从操作系统捕获到所述虚拟I / O设备的I / O请求，并且当所述I / O请求包括I / O控制请求时执行处理; 配置为当所述I / O请求包括I / O访问请求时执行处理的I / O设备仿真器; 以及连接到I / O控制器仿真器部分和I / O设备仿真器部分并且被配置为与物理I / O设备通信的设备驱动器。 部分虚拟机由安全的飞地会话执行，并被配置为禁止操作系统对部分虚拟机的访问。 版权所有（C）2012，JPO＆INPIT

公开(公告)号：JP2010118044A

公开(公告)日：2010-05-27

申请号：JP2009226717

申请日：2009-09-30

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： WANG JING W ,  KUANG MING ,  ROTHMAN MICHAEL A ,  ZIMMER VINCENT J ,  CHEN ZU HONG JACK ,  ZHAO YEBIN ANDY

IPC: G06F9/50 ,  G06F1/32 ,  G06F9/46

CPC classification number: G06F1/3203

Abstract: PROBLEM TO BE SOLVED: To perform a computer task in a reduced power consumption state. SOLUTION: A method to perform a computer task in a reduced power consumption state includes steps of: virtualizing physical resources with respect to an operating environment and service environment; exiting the operating environment and enter the service environment; placing a first set of one or more of the physical resources in a reduced power consumption state 106; and performing a task in the service environment utilizing a processor and a second set of one or more of the physical resources 108. A physical resource may be assigned to an operating environment upon an initialization of the operating environment, and re-assigned to the service environment to be utilized by the service environment while other physical resources are placed in a reduced power consumption state. COPYRIGHT: (C)2010,JPO&INPIT

Abstract translation: 要解决的问题：以降低功耗状态执行计算机任务。 解决方案：在降低功耗状态下执行计算机任务的方法包括以下步骤：相对于操作环境和服务环境虚拟化物理资源; 退出操作环境并进入服务环境; 将第一组物理资源中的一个或多个置于减少功耗状态106中; 以及使用处理器和物理资源108中的一个或多个物理资源108在服务环境中执行任务。物理资源可以在操作环境的初始化时分配给操作环境，并被重新分配给服务 在服务环境中使用的环境，而其他物理资源被置于降低的功耗状态。 版权所有（C）2010，JPO＆INPIT

公开(公告)号：JP2008135009A

公开(公告)日：2008-06-12

申请号：JP2007257926

申请日：2007-10-01

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： ROTHMAN MICHAEL A ,  ZIMMER VINCENT J

IPC: G06F9/445 ,  G06F9/46

CPC classification number: G06F9/4401 ,  G06F9/45558 ,  G06F2009/45579

Abstract: PROBLEM TO BE SOLVED: To use virtualization or partitioning techniques for reducing boot time.
SOLUTION: In one embodiment, a hypervisor/platform partition controls platform access to a boot target medium. Boot target data are selectively stored in a fast memory. When the system reboots, or an operating system on the platform is reset, boot target information may be retrieved from the fast memory rather than the original, which is a slower boot target medium. Other embodiments are described and claimed.
COPYRIGHT: (C)2008,JPO&INPIT

Abstract translation: 要解决的问题：使用虚拟化或分区技术来减少启动时间。 解决方案：在一个实施例中，管理程序/平台分区控制对引导目标介质的平台访问。 引导目标数据被选择性地存储在快速存储器中。 当系统重新启动或者平台上的操作系统被重置时，可以从快速存储器而不是原始的（其是较慢的引导目标介质）检索引导目标信息。 描述和要求保护其他实施例。 版权所有（C）2008，JPO＆INPIT

公开(公告)号：JP2014194820A

公开(公告)日：2014-10-09

申请号：JP2014121401

申请日：2014-06-12

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： PALSAMY SAKTHIKUMAR ,  ROBERT C SWANSON ,  ROTHMAN MICHAEL A ,  MALLIK BULUSU ,  VINCENT J ZIMMER

IPC: G06F21/62 ,  G06F21/57

CPC classification number: G06F13/105 ,  G06F9/4812 ,  G06F21/572 ,  G06F2221/2105

Abstract: PROBLEM TO BE SOLVED: To provide a method, apparatus, system, and computer program product for secure server system management.SOLUTION: A payload containing system software and/or firmware updates is distributed in an on-demand, secure I/O operation. The I/O operation is performed via a secure communication channel inaccessible by a server operating system to an emulated USB drive. The secure communication channel can be established for the I/O operation only after authenticating a recipient of the payload, and the payload is protected from access by a potentially-infected server operating system. Furthermore, the payload is delivered on demand rather than relying on a BIOS update schedule, and delivered at speeds of a write operation to a USB drive.

Abstract translation: 要解决的问题：提供用于安全服务器系统管理的方法，装置，系统和计算机程序产品。解决方案：包含系统软件和/或固件更新的有效载荷以按需安全I / O操作分发。 I / O操作通过服务器操作系统无法访问到模拟USB驱动器的安全通信通道执行。 只有在验证有效负载的接收方之后，才能为I / O操作建立安全通信通道，并且保护有效载荷免受潜在感染的服务器操作系统的访问。 此外，有效载荷是按需传送的，而不是依赖于BIOS更新计划，并以写入操作的速度以USB驱动器传送。

公开(公告)号：JP2012164337A

公开(公告)日：2012-08-30

申请号：JP2012091070

申请日：2012-04-12

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： WANG JING W ,  KUANG MING ,  ROTHMAN MICHAEL A ,  ZIMMER VINCENT J ,  CHEN ZU HONG JACK ,  ZHAO YEBIN ANDY

IPC: G06F9/48 ,  G06F9/46 ,  G06F9/50

CPC classification number: G06F1/3203

Abstract: PROBLEM TO BE SOLVED: To execute a task in a low power state in order to prevent any wasteful power from being generated.SOLUTION: A physical resource is virtualized concerning an operating environment and a service environment, and when a power saving mode is set, the physical resource passes the operating environment, and enters the service environment, and a first set formed of one or more physical resources is put in a low power consumption state, and a task is executed in the service environment by using a processor and a second set formed of one or more physical resources. The physical resource may be assigned to the operating environment when the operating environment is initialized, and the physical resource may be reassigned to the service environment used by the service environment while the other physical resources are put in the low power consumption state.

Abstract translation: 要解决的问题：为了防止产生任何浪费的电力，以低功率状态执行任务。 解决方案：关于操作环境和服务环境对物理资源进行虚拟化，并且当设置省电模式时，物理资源通过操作环境并进入服务环境，并且第一集合由一个或多个 更多的物理资源被置于低功耗状态，并且通过使用由一个或多个物理资源形成的处理器和第二集合在服务环境中执行任务。 当操作环境被初始化时，可以将物理资源分配给操作环境，并且可以将物理资源重新分配给服务环境使用的服务环境，而其他物理资源被置于低功耗状态。 版权所有（C）2012，JPO＆INPIT

公开(公告)号：JP2011134321A

公开(公告)日：2011-07-07

申请号：JP2010277064

申请日：2010-12-13

Applicant: Intel Corp ,  インテル コーポレイション

Inventor： ROTHMAN MICHAEL A ,  ZIMMER VINCENT J

IPC: G06F1/32

CPC classification number: G06F1/3206 ,  G06F1/3209

Abstract: PROBLEM TO BE SOLVED: To achieve processing of a wake event in a firmware environment while a computing device is maintaining low power consumption state.
SOLUTION: Method includes: a step of re-instantiating a firmware environment that includes one or more firmware functions available at pre-boot time when transitioning the computing device from a first high power consumption state to a second low power consumption state; a step of receiving a network event by the firmware while the computing device is the second low power consumption state; and a step where the firmware environment processes the network event without returning the entire computing device to the first high power consumption state independently of an operating system.
COPYRIGHT: (C)2011,JPO&INPIT

Abstract translation: 要解决的问题：在计算设备保持低功耗状态的同时，在固件环境中实现唤醒事件的处理。 方法包括：重新实例化固件环境的步骤，该固件环境包括在将计算设备从第一高功耗状态转换到第二低功耗状态时在预引导时可用的一个或多个固件功能; 当所述计算设备是所述第二低功耗状态时，由所述固件接收网络事件的步骤; 以及固件环境处理网络事件而不将操作系统独立地将整个计算设备返回到第一高功耗状态的步骤。 版权所有（C）2011，JPO＆INPIT

公开(公告)号：JP2011028712A

公开(公告)日：2011-02-10

申请号：JP2009224640

申请日：2009-09-29

Applicant: Intel Corp ,  インテル コーポレイション

Inventor： SHANG SEAN ,  FANG HUA ,  YAO JIEWEN ,  ZIMMER VINCENT J ,  LONG QIN ,  GONG JIONG ,  NI RUIYU ,  ROTHMAN MICHAEL A

IPC: G06F3/14 ,  G06F1/24

CPC classification number: G06F9/4401

Abstract: PROBLEM TO BE SOLVED: To provide a methods and systems to display platform graphics during initialization of a computer, including functions to interrupt initialization of an operating system and to update a video frame buffer with platform graphics data when the initialization of the operating system is interrupted, and to merge graphics generated by operating system initialization logic with platform graphics data. SOLUTION: The methods and systems include virtualization methods and systems and system management mode methods and systems. COPYRIGHT: (C)2011,JPO&INPIT

Abstract translation: 要解决的问题：提供一种在计算机初始化期间显示平台图形的方法和系统，包括中断操作系统的初始化的功能，以及当操作的初始化时用平台图形数据更新视频帧缓冲器 系统中断，并将由操作系统初始化逻辑生成的图形与平台图形数据进行合并。 解决方案：方法和系统包括虚拟化方法和系统以及系统管理模式的方法和系统。 版权所有（C）2011，JPO＆INPIT

公开(公告)号：JP2012104135A

公开(公告)日：2012-05-31

申请号：JP2011279343

申请日：2011-12-21

Applicant: Intel Corp ,  インテル コーポレイション

Inventor： ZIMMER VINCENT J ,  ROTHMAN MICHAEL A

IPC: G06F21/22 ,  G06F9/445

CPC classification number: G06F21/575

Abstract: PROBLEM TO BE SOLVED: To safely perform remote function provisioning on a network.SOLUTION: A disclosed portion of a first device identifier that identifies a device 108 as a device of any class in a generic term manner is transmitted to a function provisioning server 104, and a message encrypted based on the disclosed portion of the first device identifier is received from the function provisioning server 104. The message is decrypted on the basis of a secret portion of the first device identifier, and in order to authenticate an association between the first device identifier and the device 108, a notification indicating that the message has been decrypted successfully is transmitted to the function provisioning server 104. In the case where the association is authenticated successfully, a second device identifier for uniquely identifying the device 108 within an enterprise is received from the function provisioning server 104, the second device identifier is installed in the device 108, and by installing the second device identifier, the first device identifier is replaced with the second device identifier.

Abstract translation: 要解决的问题：安全地在网络上执行远程功能配置。 解决方案：以通用术语方式将设备108标识为任何类别的设备的第一设备标识符的公开部分被发送到功能供应服务器104，并且基于所述第一设备标识符的公开部分加密的消息 从功能配置服务器104接收设备标识符。该消息基于第一设备标识符的秘密部分被解密，并且为了认证第一设备标识符与设备108之间的关联，通知指示 已经成功解密的消息被发送到功能供应服务器104.在关联被成功认证的情况下，从功能供应服务器104接收到用于唯一地标识企业内的设备108的第二设备标识符，第二设备标识符 安装在设备108中，并且通过安装第二设备标识符来识别第一设备 r被第二个设备标识符替换。 版权所有（C）2012，JPO＆INPIT

公开(公告)号：JP2012003747A

公开(公告)日：2012-01-05

申请号：JP2011110731

申请日：2011-05-17

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： YI KI-AHN ,  HUA ZOU ,  HWANG FU-JIN ,  ROTHMAN MICHAEL A ,  VINCENT J ZIMMER

IPC: G06F9/46

CPC classification number: H04L49/9057

Abstract: PROBLEM TO BE SOLVED: To share a physical network interface card (NIC) device among a plurality of virtual machines (VM).SOLUTION: A method for sharing a physical network interface card (NIC) device among a plurality of virtual machines comprises the steps of receiving a client OS request packet by a virtual network interface card (NIC) driver 308 of a client OS 210 running in a client virtual machine 206, adding a block to a transmission queue 506 in a shared memory 504 in a computing system, fetching the block from the transmission queue by a virtual NIC driver 316 of a service OS 216 running in a service virtual machine 214, packaging the block into a service OS request packet, passing the service OS request packet to a service OS network stack component 314 of the service OS, routing the service OS request packet to a physical NIC driver 318 by a bridge driver 502, and transmitting the service OS request packet through a network.

Abstract translation: 要解决的问题：在多个虚拟机（VM）之间共享物理网络接口卡（NIC）设备。 解决方案：用于在多个虚拟机中共享物理网络接口卡（NIC）设备的方法包括以下步骤：通过客户端OS210的虚拟网络接口卡（NIC）驱动器308接收客户机OS请求分组 在客户机虚拟机206中运行，向计算系统中的共享存储器504中的传输队列506添加块，通过在服务虚拟机中运行的服务OS 216的虚拟NIC驱动器316从传输队列中获取该块 214，将该块封装成服务OS请求分组，将服务OS请求分组传递到服务OS的服务OS网络栈组件314，由桥驱动器502将服务OS请求分组路由到物理NIC驱动器318;以及 通过网络发送服务OS请求分组。 版权所有（C）2012，JPO＆INPIT

公开(公告)号：JP2010123125A

公开(公告)日：2010-06-03

申请号：JP2009262302

申请日：2009-11-17

Applicant: Intel Corp ,  インテル・コーポレーション

Inventor： COOPER BARNES ,  SIDDIQI FARAZ A ,  ROTHMAN MICHAEL A ,  ZIMMER VINCENT J

IPC: G06F9/445 ,  G06F1/00 ,  G06F1/24

CPC classification number: G06F9/4411

Abstract: PROBLEM TO BE SOLVED: To provide a method and system to perform a fast reset or restart of a platform by minimizing the hardware initialization of IO devices in the platform during a restart of the platform. SOLUTION: The basic input/output system (BIOS) of the platform traps any software initiated reset request (SIRR) or warm reset. The BIOS restores the input/output (IO) devices coupled with the platform to their previous hardware state to avoid the full platform initialization when the SIRR is trapped. The restart of the platform can be performed in a fast manner as the full platform initialization is minimized. COPYRIGHT: (C)2010,JPO&INPIT

Abstract translation: 要解决的问题：提供一种方法和系统，通过在平台的重新启动期间最小化平台中的IO设备的硬件初始化来执行平台的快速重置或重启。

解决方案：平台的基本输入/输出系统（BIOS）捕获任何软件启动的复位请求（SIRR）或热复位。 BIOS将与平台耦合的输入/输出（IO）设备恢复到其先前的硬件状态，以避免SIRR被捕获时的完整平台初始化。 当平台初始化最小化时，平台的重新启动可以以快速的方式执行。 版权所有（C）2010，JPO＆INPIT