公开(公告)号：US20060288130A1

公开(公告)日：2006-12-21

申请号：US11157675

申请日：2005-06-21

Applicant: Rajesh Madukkarumukumana ,  Udo Steinberg ,  Steven Bennett ,  Andrew Anderson ,  Gilbert Neiger

Inventor： Rajesh Madukkarumukumana ,  Udo Steinberg ,  Steven Bennett ,  Andrew Anderson ,  Gilbert Neiger

IPC: G06F13/28

CPC classification number: G06F12/1081 ,  G06F13/28

Abstract: A apparatus is disclosed. The apparatus includes a remapping circuit to facilitate access of one or more I/O devices to a memory device for direct memory access (DMA) transactions. The remapping circuit includes a translation mechanism to perform memory address translations for I/O DMA transactions via address window-based translations.

Abstract translation: 公开了一种装置。 该装置包括重新映射电路，以便于将一个或多个I / O设备访问到用于直接存储器访问（DMA）事务的存储器设备。 重新映射电路包括一个翻译机制，用于通过地址窗口的翻译来执行用于I / O DMA事务的存储器地址转换。

公开(公告)号：US07124327B2

公开(公告)日：2006-10-17

申请号：US10184774

申请日：2002-06-29

Applicant: Steve Bennett ,  Andrew V. Anderson ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Gilbert Neiger ,  Richard Uhlig ,  Xiang Zou ,  Michael A. Kozuch

Inventor： Steve Bennett ,  Andrew V. Anderson ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Gilbert Neiger ,  Richard Uhlig ,  Xiang Zou ,  Michael A. Kozuch

IPC: G06F11/00

CPC classification number: G06F11/0775 ,  G06F9/45558 ,  G06F11/0712 ,  G06F2009/45587

Abstract: In one embodiment, fault information relating to a fault associated with the operation of guest software is received. Further, a determination is made as to whether the fault information satisfies one or more filtering criterion. If the determination is positive, control remains with the guest software and is not transferred to the virtual machine monitor (VMM).

Abstract translation: 在一个实施例中，接收到与客户软件的操作相关联的故障的故障信息。 此外，确定故障信息是否满足一个或多个过滤标准。 如果确定是肯定的，控制将保留在客户软件中，并且不会传输到虚拟机监视器（VMM）。

公开(公告)号：US20060206943A1

公开(公告)日：2006-09-14

申请号：US11386269

申请日：2006-03-21

Applicant: Carl Ellison ,  Roger Golliver ,  Howard Herbert ,  Derrick Lin ,  Francis McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James Sutton ,  Shreekant Thakkar ,  Millind Mittal

Inventor： Carl Ellison ,  Roger Golliver ,  Howard Herbert ,  Derrick Lin ,  Francis McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James Sutton ,  Shreekant Thakkar ,  Millind Mittal

IPC: H04N7/16

CPC classification number: G06F21/53 ,  G06F9/468 ,  G06F21/562 ,  G06F21/57 ,  G06F21/74 ,  G06F2221/2105

Abstract: A processing system has a processor that can operate in a normal ring 0 operating mode and one or more higher ring operating modes above the normal ring 0 operating mode. In addition, the processor can operate in an isolated execution mode. A memory in the processing system may include an ordinary memory area that can be accessed from the normal ring 0 operating mode, as well as an isolated memory area that can be accessed from the isolated execution mode but not from the normal ring 0 operating mode. The processing system may also include an operating system (OS) nub, as well as a key generator. The key generator may generate an OS nub key (OSNK) based at least in part on an identification of the OS nub and a master binding key (BK0) of the platform. Other embodiments are described and claimed.

Abstract translation: 处理系统具有处理器，该处理器可以在正常环0操作模式和高于正常环0操作模式的一个或多个较高环操作模式下操作。 此外，处理器可以在隔离的执行模式下操作。 处理系统中的存储器可以包括可以从正常环0操作模式访问的普通存储器区域以及可以从隔离执行模式而不是从正常环0操作模式访问的隔离存储器区域。 处理系统还可以包括操作系统（OS）nub以及密钥生成器。 密钥生成器可以至少部分地基于OS nub的标识和平台的主绑定密钥（BK 0）来生成OS nub密钥（OSNK）。 描述和要求保护其他实施例。

公开(公告)号：US20060130060A1

公开(公告)日：2006-06-15

申请号：US11008911

申请日：2004-12-10

Applicant: Andrew Anderson ,  Steven Bennett ,  Erik Cota-Robles ,  Alain Kagi ,  Gilbert Neiger ,  Rajesh Madukkarumukumana ,  Sebastian Schoenberg ,  Richard Uhlig ,  Michael Rothman ,  Vincent Zimmer ,  Stalinselvaraj Jeyasingh

Inventor： Andrew Anderson ,  Steven Bennett ,  Erik Cota-Robles ,  Alain Kagi ,  Gilbert Neiger ,  Rajesh Madukkarumukumana ,  Sebastian Schoenberg ,  Richard Uhlig ,  Michael Rothman ,  Vincent Zimmer ,  Stalinselvaraj Jeyasingh

IPC: G06F9/455

CPC classification number: G06F9/45533

Abstract: In some embodiments, the invention involves a system to deprivilege components of a virtual machine monitor and enable deprivileged service virtual machines (SVMs) to handle selected trapped events. An embodiment of the invention is a hybrid VMM operating on a platform with hardware virtualization support. The hybrid VMM utilizes features from both hypervisor-based and host-based VMM architectures. In at least one embodiment, the functionality of a traditional VMM is partitioned into a small platform-dependent part called a micro-hypervisor (MH) and one or more platform-independent parts called service virtual machines (SVMs). The micro-hypervisor operates at a higher virtual machine (VM) privilege level than any SVM, while the SVM and other VMs may still have access to any instruction set architecture (ISA) privilege level. Other embodiments are described and claimed.

Abstract translation: 在一些实施例中，本发明涉及一种剥夺虚拟机监视器组件的系统，并使得被剥夺虚拟机的虚拟机（SVM）能够处理选定的被捕获的事件。 本发明的实施例是在具有硬件虚拟化支持的平台上运行的混合VMM。 混合VMM利用基于虚拟机管理程序和基于主机的VMM架构的功能。 在至少一个实施例中，传统VMM的功能被划分为称为微管理程序（MH）的小平台相关部分和称为服务虚拟机（SVM）的一个或多个平台无关部件。 微型管理程序在比任何SVM更高的虚拟机（VM）权限级别运行，而SVM和其他VM可能仍然可以访问任何指令集体系结构（ISA）特权级别。 描述和要求保护其他实施例。

公开(公告)号：US07035963B2

公开(公告)日：2006-04-25

申请号：US09752587

申请日：2000-12-27

Applicant: Gilbert Neiger ,  Stephen Chou ,  Erik Cota-Robles ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Michael Kozuch ,  Richard Uhlig ,  Sebastian Schoenberg

Inventor： Gilbert Neiger ,  Stephen Chou ,  Erik Cota-Robles ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Michael Kozuch ,  Richard Uhlig ,  Sebastian Schoenberg

IPC: G06F12/00

CPC classification number: G06F9/45558 ,  G06F12/0284 ,  G06F12/109 ,  G06F2009/45583

Abstract: In one embodiment, a method for resolving address space conflicts includes detecting that a guest operating system attempts to access a region occupied by a first portion of a virtual machine monitor and relocating the first portion of the virtual machine monitor within the first address space to allow the guest operating system to access the region previously occupied by the first portion of the virtual machine monitor.

公开(公告)号：US20060075402A1

公开(公告)日：2006-04-06

申请号：US10956239

申请日：2004-09-30

Applicant: Gilbert Neiger ,  Steven Bennett ,  Erik Cota-Robles ,  Sebastian Schoenberg ,  Clifford Hall ,  Dion Rodgers ,  Lawrence Smith ,  Andrew Anderson ,  Richard Uhlig ,  Michael Kozuch ,  Andy Glew

Inventor： Gilbert Neiger ,  Steven Bennett ,  Erik Cota-Robles ,  Sebastian Schoenberg ,  Clifford Hall ,  Dion Rodgers ,  Lawrence Smith ,  Andrew Anderson ,  Richard Uhlig ,  Michael Kozuch ,  Andy Glew

IPC: G06F9/455

CPC classification number: G06F9/45558

Abstract: In one embodiment, a method includes transitioning control to a virtual machine (VM) from a virtual machine monitor (VMM), determining that a VMM timer indicator is set to an enabling value, and identifying a VMM timer value configured by the VMM. The method further includes periodically comparing a current value of a timing source with the VMM timer value, generating an internal event if the current value of the timing source has reached the VMM timer value, and transitioning control to the VMM in response to the internal event without incurring an event handling procedure in any one of the VMM and the VM.

Abstract translation: 在一个实施例中，一种方法包括从虚拟机监视器（VMM）向虚拟机（VM）转换控制，确定VMM定时器指示符被设置为使能值，以及识别由VMM配置的VMM定时器值。 该方法还包括周期性地比较定时源的当前值与VMM定时器值，如果定时源的当前值达到VMM定时器值，则产生内部事件，并响应于内部事件转换到VMM 而不会在任何一个VMM和VM中引发事件处理过程。

公开(公告)号：US20060015869A1

公开(公告)日：2006-01-19

申请号：US11095855

申请日：2005-03-30

Applicant: Gilbert Neiger ,  Steven Bennett ,  Dion Rodgers ,  Richard Uhlig ,  Lawrence Smith

Inventor： Gilbert Neiger ,  Steven Bennett ,  Dion Rodgers ,  Richard Uhlig ,  Lawrence Smith

IPC: G06F17/00

CPC classification number: G06F21/53 ,  G06F12/1491 ,  G06F21/57 ,  G06F2221/2105

Abstract: Techniques for handling certain virtualization events occurring within a virtual machine environment. More particularly, at least one embodiment of the invention pertains to handling events related to the sub-operating system mode using a dedicated virtual machine monitor (VMM) called the system management mode VMM (SVMM), which exists in a separate portion of memory from a main virtual machine monitor (MVMM) used to handle virtualization events other than those related to the sub-operating system mode. In at least one embodiment, a technique for initializing and managing transitions to and from the SVMM is disclosed.

公开(公告)号：US20060005084A1

公开(公告)日：2006-01-05

申请号：US10882813

申请日：2004-06-30

Applicant: Gilbert Neiger ,  Andrew Anderson ,  Steven Bennett ,  Jason Brandt ,  Erik Cota-Robles ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Sanjoy Mondal ,  Rajesh Parthasarathy ,  Dion Rodgers ,  Lawrence Smith ,  Richard Uhlig

Inventor： Gilbert Neiger ,  Andrew Anderson ,  Steven Bennett ,  Jason Brandt ,  Erik Cota-Robles ,  Stalinselvaraj Jeyasingh ,  Alain Kagi ,  Sanjoy Mondal ,  Rajesh Parthasarathy ,  Dion Rodgers ,  Lawrence Smith ,  Richard Uhlig

IPC: G06F11/00

CPC classification number: G06F9/45533 ,  G06F11/0712 ,  G06F11/0775 ,  G06F11/0787 ,  G06F11/0793

Abstract: In one embodiment, information pertaining to a first fault occurring during operation of a virtual machine (VM) is stored in a first field. A second fault is detected while delivering the first fault to the VM, and a determination is made as to whether the second fault is associated with a transition of control to a virtual machine monitor (VMM). If this determination is positive, information pertaining to the second fault is stored in a second field, and control is transitioned to the VMM.

Abstract translation: 在一个实施例中，关于在虚拟机（VM）的操作期间发生的第一故障的信息被存储在第一字段中。 在向VM提供第一故障时检测到第二故障，并且确定第二故障是否与对虚拟机监视器（VMM）的控制转换相关联。 如果该确定是肯定的，则关于第二故障的信息被存储在第二场中，并且控制被转换到VMM。

公开(公告)号：US06957332B1

公开(公告)日：2005-10-18

申请号：US09539344

申请日：2000-03-31

Applicant: Carl M. Ellison ,  Roger A. Golliver ,  Howard C. Herbert ,  Derrick C. Lin ,  Francis X. McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James A. Sutton ,  Shreekant S. Thakkar ,  Milland Mittal

Inventor： Carl M. Ellison ,  Roger A. Golliver ,  Howard C. Herbert ,  Derrick C. Lin ,  Francis X. McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James A. Sutton ,  Shreekant S. Thakkar ,  Milland Mittal

IPC: G06F12/14 ,  G06F15/00 ,  G06F21/00 ,  H04L9/00

CPC classification number: G06F12/1491 ,  G06F21/57 ,  G06F21/74

Abstract: A processor executive (PE) handles an operating system executive (OSE) in a secure environment. The secure environment has a fused key (FK) and is associated with an isolated memory area in the platform. The OSE manages a subset of an operating system (OS) running on the platform. The platform has a processor operating in one of a normal execution mode and an isolated execution mode. The isolated memory area is accessible to the processor in the isolated execution mode. A PE supplement supplements the PE with a PE manifest representing the PE and a PE identifier to identify the PE. A PE handler handles the PE using the FK and the PE supplement.

Abstract translation: 处理器执行（PE）在安全环境中处理操作系统执行程序（OSE）。 安全环境具有融合密钥（FK），并且与平台中的隔离存储器区域相关联。 OSE管理在平台上运行的操作系统（OS）的子集。 该平台具有以正常执行模式和隔离执行模式之一操作的处理器。 在隔离的执行模式下，处理器可以访问隔离的内存区域。 PE补充用PE代替PE补充PE，PE标识符用于标识PE。 PE处理程序使用FK和PE补充来处理PE。

公开(公告)号：US06941458B1

公开(公告)日：2005-09-06

申请号：US09668585

申请日：2000-09-22

Applicant: Carl M. Ellison ,  Roger A. Golliver ,  Howard C. Herbert ,  Derrick C. Lin ,  Francis X. McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James A. Sutton ,  Shreekant S. Thakkar ,  Milland Mittal

Inventor： Carl M. Ellison ,  Roger A. Golliver ,  Howard C. Herbert ,  Derrick C. Lin ,  Francis X. McKeen ,  Gilbert Neiger ,  Ken Reneris ,  James A. Sutton ,  Shreekant S. Thakkar ,  Milland Mittal

IPC: G06F12/14 ,  G06F15/00 ,  G06F21/00 ,  H04L9/00

CPC classification number: G06F12/1491 ,  G06F21/57 ,  G06F21/74

Abstract: A processor executive (PE) handles an operating system executive (OSE) in a secure environment. The secure environment has a platform key (PK) and is associated with an isolated memory area in the platform. The OSE manages a subset of an operating system (OS) running on the platform. The platform has a processor operating in one of a normal execution mode and an isolated execution mode. The isolated memory area is accessible to the processor in the isolated execution mode. A PE supplement supplements the PE with a PE manifest representing the PE and a PE identifier to identify the PE. A PE handler handles the PE using the PK and the PE supplement.

Abstract translation: 处理器执行（PE）在安全环境中处理操作系统执行程序（OSE）。 安全环境具有平台密钥（PK），并且与平台中的隔离存储器区域相关联。 OSE管理在平台上运行的操作系统（OS）的子集。 该平台具有以正常执行模式和隔离执行模式之一操作的处理器。 在隔离的执行模式下，处理器可以访问隔离的内存区域。 PE补充用PE代替PE补充PE，PE标识符用于标识PE。 PE处理程序使用PK和PE补充来处理PE。