38 results about "Hardware virtualization" patented technology

The invention discloses an embedded system resource allocation method and system based on hardware virtualization. The method comprises the following steps: deploying a Type-1 virtual machine monitor system on a multi-core processor hardware platform supporting virtualization extension; the Type-1 virtual machine monitor carries out virtualization, resource partitioning and security isolation on hardware resources, and creates operation system execution environment'domain 'partitions zoneG and zoneR. A universal operating system is deployed in a zoneG domain partition to take charge of a high-computing-power computing task, and a real-time operating system is deployed in a zoneR to take charge of a real-time computing task. Low-delay inter-core communication between a real-time operating system and a general operating system is realized based on an OpenAMP protocol, and data is transmitted through a shared memory and an interrupt mechanism; according to the requirements of real-time tasks and non-real-time tasks, a Type-1 virtual machine monitor dynamically adjusts a resource allocation strategy, and the priority and deadline of the real-time tasks are ensured.

The invention discloses a local key secure storage method and device based on a virtualized cryptographic module, and aims to solve the problem that the security, the cost and the flexibility of the existing scheme are difficult to consider at the same time. According to the method, a high-isolation virtualized cryptographic module (VCM) is created through a CPU hardware virtualization technology, a safe execution environment is constructed, and safe generation, packaging storage and unpackaging operation of a master key and a working key are achieved; the device comprises a hardware layer, a virtualization layer, a VCM and a communication interface, and all the layers are coordinated and are subjected to authority isolation. According to the scheme, the system is supported to start automatic loading or on-demand dynamic loading, and various attacks are resisted in combination with TPM (Trusted Platform Module) enhanced packaging and a strong encryption mechanism. Through verification of a 110kV intelligent substation scene, special hardware does not need to be newly added, the cost is only 0.1% of that of a traditional HSM scheme, the operation response delay meets the real-time requirement, and the method is suitable for key security storage scenes of various types of equipment.

The invention relates to the technical field of computer security, in particular to an operating system kernel security protection system based on hardware virtualization, which comprises a hardware virtualization module, a kernel isolation module, a security monitoring module and a data protection module. And the system security is obviously improved. Traditional software protection depends on authority management and access control mechanisms of an operating system and is easily subjected to bypassing attacks of malicious programs, for example, protection is broken through by modifying a system call table, utilizing memory vulnerabilities and the like. According to the system, privilege level isolation of hardware virtualization is utilized, a kernel runs in an independent virtual machine with the highest privilege level, a user application program runs in a virtual machine with the low privilege level, and hardware directly prevents unauthorized access of the application program, so that direct attack of malicious codes of an application layer to the kernel is eradicated fundamentally.

The invention discloses a system and a method for realizing multi-terminal code construction, which realize automatic selection of matched server hardware resources according to the type of a construction project. The system for realizing multi-terminal code construction comprises a service layer for providing construction types of a plurality of development languages; the link layer is used for providing matched virtual server nodes according to environmental resource characteristics required by the construction types, and performing one-to-one mapping on the construction types and the virtual server nodes; the component layer is used for respectively providing assembly line components according to different construction types and constructing assembly line script nodes; and the hardware layer is used for providing a hardware virtualization environment for code execution compiling and packaging. By introducing a high-availability mechanism, the problem of single-point failure of a traditional single dispatching center is thoroughly solved. The virtualization technology allows a plurality of applications to share the same physical resource, hardware resources are utilized to the greatest extent through dynamic resource allocation and adjustment, and the cost is reduced.

The application discloses a RISCV application program dynamic analysis method and device based on hardware virtualization, which comprises: an operating system kernel running on a reverse RISCV, obtaining process kernel data structure; simulating a RISCV CPU based on a hardware simulator, and constructing a basic process list of the operating system; using an sptbr register and the process kernel data structure to obtain characteristic information of a new process; screening the characteristic information according to the basic process list to obtain a target process; performing API detection and instruction analysis based on process information and dynamic running process information of the target process to obtain a dynamic analysis result. The application can completely and transparently monitor the whole process of program running on a RISCV CPU, and provides configurable efficient process information acquisition, API calling information acquisition and instruction execution information acquisition; the monitoring process does not depend on a system interface, transparent process monitoring can be realized, and the running process of the monitored target is not affected.

The invention belongs to the technical field of data security, and discloses a data security sandbox isolation method, which comprises the following steps of: planning authority distribution of an application program and a user according to a minimum authority principle, and preliminarily isolating communication between a sandbox environment and an external network by applying a hardware virtualization technology and a virtual local area network technology; cleaning the sandbox environment, deploying a real-time monitoring tool, and recording activities and operation logs in the sandbox; performing code auditing on the application program running in the sandbox, monitoring the running behavior of the application program through a dynamic analysis tool, and evaluating the resistance of the sandbox to the escape attack; a container technology and a user-level sandbox technology are used for conducting secondary isolation on the sandbox environment, encryption processing is conducted on data in the sandbox, and the sandbox environment is backed up based on an encryption processing result. Through the hardware virtualization technology, the performance overhead is remarkably reduced, the overall operation efficiency of the system is improved, resource waste is reduced, and efficient utilization of resources is ensured.

The invention relates to the technical field of power distribution Internet of Things, in particular to a power distribution Internet of Things area intelligent fusion terminal system which comprises a single physical processor, a first virtual machine, a second virtual machine, a virtual machine monitor and a single physical processor supporting hardware virtualization extension and an input and output memory management unit. The first virtual machine is specially used for power distribution monitoring services, running a real-time operating system, and processing fault recording and remote control tripping tasks; the second virtual machine is specially used for power utilization acquisition business, runs a non-real-time operating system and processes data reading and edge computing tasks; the virtual machine monitor runs on a single physical processor, and the virtual machine monitor realizes isolation of memory and equipment hardware between the first virtual machine and the second virtual machine through the input and output memory management unit. Redundancy of a control core is achieved so as to solve the problems of system reliability, control strategy and safety of an existing fusion terminal.

The embodiment of the invention discloses an interface interaction control method, a computer system, equipment and a computer storage medium. According to an interface type of a target virtual interface indicated by the creation request, creating a target virtual computing power device corresponding to the interface type in a target virtual environment, responding to a deep learning request of the target virtual environment through the target virtual computing power device, and forwarding the request to a host machine, and scheduling a physical computing power device corresponding to the interface type to respond to the request, and returning a processing result of the request to the target virtual environment through a target virtual computing power device. According to the method, virtualization is carried out from a software interaction level instead of virtualization of computing power hardware, the scheme is completely realized based on software, and a physical GPU is not required to have any special virtualization hardware function, so that almost all mainstream and even old models of GPUs on the market and accelerators such as NPUs with different architectures can be managed. And the user does not need to pay for expensive virtualization dedicated hardware and software license, so that the virtualization deployment cost is reduced.

Various examples disclose systems and methods related to hardware virtualization for error management. These systems and methods define a task flow for executing tasks on a first partition and a second partition. A processor can contain one or more circuits.The one or more circuits can determine that a first task of a multitude of tasks meets a criterion for execution in a redundant mode, determine a task flow for the execution of the multitude of tasks by assigning a switch before the execution of the first task, wherein the switch causes the one or more circuits to be partitioned into a first partition and a second partition, and the multitude of tasks is executed according to the task flow by executing a first instance of the first task on the first partition and a second instance of the first task on the second partition.

The invention provides a multi-dimensional self-adaptive large model inference engine method and system, and relates to the technical field of artificial intelligence, and the method comprises the steps: collecting hardware identification information of calculation hardware, and calling a hardware fingerprint database for matching to generate a hardware type result and a hardware characteristic parameter; constructing a hardware abstraction layer, loading a hardware abstraction driving plug-in according to a hardware type result, and virtualizing computing hardware into a unified logic computing power unit through a hardware abstraction interface; when a large model reasoning task is triggered, dynamically routing to a back-end executor according to a hardware type result by querying a back-end registry; on the basis of hardware characteristic parameters and a hardware abstract interface, a hardware compiling tool chain is called through a rear-end executor, graph optimization and operator fusion are executed on a large model calculation graph, and therefore self-adaptive deployment and efficient reasoning of a large model on heterogeneous hardware can be achieved; the problems that in the prior art, heterogeneous hardware is insufficient in compatibility, configuration is tedious and rigid, and compilation optimization barriers and performance losses are caused during model cross-platform migration are solved.

The invention relates to the technical field of cloud services, in particular to a computing power scheduling service system, which comprises a hardware virtualization module, a computing power scheduling module and a computing power scheduling module, the scheduling module is used for collecting user parameters for the newly added tenant container, establishing a scheduling model corresponding to the standard calculation unit and then distributing the standard calculation unit; and the charging module is used for charging according to the scheduled standard calculation unit and the user parameters. In order to solve the problem that in the prior art, a computing center is poor in effect on scheduling and charging of heterogeneous resources, in the scheme, unified virtualization processing is carried out on heterogeneous hardware resources, a standard computing unit is formed, scheduling and charging are carried out on the basis, and therefore the good adaptation effect on a heterogeneous system is achieved.

This invention discloses a hyperkernel method for managing multiple library operating systems on embedded devices. The invention first configures the hyperkernel runtime environment configuration information. Based on the directory containing the configured library operating system ELF format image files, it parses the corresponding image files and converts them into binary files. Next, it uses the binary files to build the hyperkernel runtime environment, generating a hyperkernel runtime environment image file. The hyperkernel runtime environment image file is then used to run and initialize the hyperkernel runtime environment. After starting and initializing the hyperkernel runtime environment, it parses and reads the library operating system configuration information. Resources are allocated to the library operating systems according to the configuration information. Finally, the hyperkernel runtime environment transfers the program execution flow to the library operating systems, and execution of the library operating systems begins. This invention uses hardware virtualization technology, which can virtualize hardware resources into multiple virtual resources.

The invention provides a large-scale parallel sampling environment construction method and device for reinforcement learning of an intelligent computing cloud platform through computing power, and the method comprises the steps: obtaining a plurality of physical disks of a plurality of computing power nodes of the intelligent computing cloud platform, and constructing the plurality of physical disks into a bottom storage pool through an RAID technology, storing the basic mirror image of the operating system in a qcow2 format, and further generating a plurality of virtual machine instances and running the virtual machine instances; packaging the QEMU process and the running environment of the QEMU process into a container, and performing distributed scheduling on the container according to the disk topological relation among the plurality of bottom storage pools on the plurality of computing power nodes and the real-time I / O load condition. Therefore, the construction of a large-scale parallel sampling environment of reinforcement learning can be realized by utilizing the computing power of an intelligent computing cloud platform and integrating storage optimization, hardware virtualization and container arrangement technologies.

The application relates to a machine learning training resource allocation method based on multiple graphics cards and hardware virtualization, and relates to the technical field of resource allocation.The application is used for solving the problem that the existing training resource allocation method cannot consider both training hardware cost and universality.The application comprises the following steps: obtaining a virtualizable graphics card resource list and a non-virtualizable graphics card resource list; establishing a resource allocation operator AllocTaskCanVirt of a virtualizable computing task, and obtaining the number of allocated virtualizable resources; establishing a resource allocation operator AllocTaskNoVirt of a non-virtualizable computing task, and obtaining the number of allocated graphics cards; inputting training task resource requirements, calling the AllocTaskCanVirt and the AllocTaskNoVirt, and obtaining the final resource consumption number and the allocation result.The application is used for allocating computer graphics card resources.

The invention discloses a hardware virtualization server system and an intelligent scheduling method, and relates to the technical field of computers, the hardware virtualization server system comprises a calculation module, a switching module and at least one heterogeneous resource module, and the calculation module and the at least one heterogeneous resource module are connected through the switching module. The hot plug replacement and dynamic recombination of each module are supported, the heterogeneous resource request of the calculation module is responded through the exchange module, the heterogeneous resources are scheduled, the target heterogeneous resources are allocated to the calculation module to process the target task, and the utilization rate of the resources can be effectively improved.

The invention provides a resource providing method and device which can be applied to the technical field of cloud computing. The resource providing method comprises the steps that at least one trusted node is generated on a cloud computing platform according to a hardware layer and a virtualization layer, the hardware layer comprises multiple pieces of trusted hardware, and the virtualization layer comprises a virtual machine monitor for managing the trusted hardware; in response to a received resource acquisition request sent by a user to the cloud computing platform, determining at least one to-be-allocated trusted node according to resource demand information in the resource acquisition request; and distributing at least one trusted node to be distributed to the user.

This invention discloses a memory tiered management and dynamic migration method and system based on hardware virtualization, relating to the fields of virtualization and hardware management technology. The specific steps of the method are: multi-source data collaborative collection, multi-source data fusion prediction, virtual machine memory tiered configuration, active migration trigger judgment, and tiered migration execution. This invention collects hardware health data and memory load data, uses a multi-source data fusion weight coefficient formula to weight and integrate differentiated data, and uses a memory pressure peak prediction formula and a hardware failure risk level quantification formula to predict memory bottlenecks and hardware failure risks in advance, thereby dynamically adjusting the virtual machine memory tiered configuration. For example, core business data is preferentially stored in the local high-speed cache and configured with the highest migration priority, while cold data layers are compressed to reduce resource consumption. This tiered management strategy improves memory access efficiency, and at the same time, the active migration trigger mechanism avoids service interruptions.

The present invention discloses a system and method for realizing multi-terminal code construction, which can automatically select and match server hardware resources according to the type of construction project. The system for realizing multi-terminal code construction includes: a service layer, which provides construction types of several development languages; a link layer: provides matching virtual server nodes according to the environmental resource characteristics required by the construction type, and makes a one-to-one mapping between the construction type and the virtual server nodes; a component layer: provides pipeline components respectively according to different construction types, and builds pipeline script nodes; a hardware layer: is used to provide a hardware virtualization environment for code execution, compilation and packaging. By introducing a high-availability mechanism, the single-point failure problem of the traditional single scheduling center is completely solved. Virtualization technology allows multiple applications to share the same physical resources. Through dynamic resource allocation and adjustment, hardware resources are utilized to the maximum extent, and the cost is reduced.

Techniques for processing data are described herein. For example, a method may include receiving input data by a symmetric processing engine of two or more symmetric processing engines coupled to an auxiliary processing engine. The method may also include receiving an indication to process the input data using a module of the secondary processing engine; sending the output data to the auxiliary processing engine; receiving processed data from the auxiliary processing engine; further processing the processed data in one or more portions of a pipeline of modules of the symmetric processing engine; and outputting the further processed data.

An embodiment of the present invention provides a method, apparatus, electronic device, and storage medium for internal and external interaction of virtual machines. The method includes: generating a serial port simulation device inside the virtual machine through hardware virtualization; generating a simulation pipeline outside the virtual machine through hardware virtualization; and performing data interaction between the internal program of the virtual machine and the external program of the virtual machine based on the serial port simulation device and the simulation pipeline. By directly modifying the virtual machine program, the present invention simulates a general serial port on the virtual machine and simulates a pipeline outside the virtual machine, enabling both internal and external programs to achieve data exchange through a general interface. The present invention is implemented based on simulating general hardware, without requiring programmers to modify the internal and external interaction program codes again, without affecting the integrity and stability of the operating system, and capable of achieving stable, reliable, and fast data transmission, thereby providing good support for data exchange inside and outside the virtual machine.

The invention discloses a multi-tenant resource dynamic scheduling system, and relates to the technical field of cloud computing platform multi-tenant resource management, and the system comprises a micro resource slicing engine which is used for abstracting physical resources into physical resource units which can be dynamically combined, and disassembling resource requests on a hardware virtualization layer according to service thread granularity. According to the multi-tenant resource dynamic scheduling system, through refined construction of a physical resource unit topology network and a non-critical path triple judgment mechanism, the risk of damage to the service continuity of low-priority tenants is systematically avoided while a high-priority tenant service level protocol is guaranteed. A demand distribution diagram-driven credit line dynamic calculation and countdown releaser binding strategy is adopted to ensure that a resource scheduling behavior is strictly limited by a future demand peak value of a low-priority tenant, so that deterministic management of a borrowing and returning resource space-time relationship is realized, and the problem of excessive resource invasion caused by extensive preemption in a traditional technology is effectively solved.

The application provides a network connection control platform based on hardware virtualization, comprising: a virtualization module, which is used for hardware virtualization of network equipment, obtaining equipment virtual information, and setting an access strategy for the equipment virtual information to obtain a set permission; a building module, which is used for building global network information based on the equipment virtual information; and a control module, which is used for controlling network configuration and protocol deployment based on the global network information and the set permission in combination with user demand to realize network connection; by building the global network information, the network configuration and protocol deployment are facilitated, and finally the network equipment is connected on the network connection control platform, so that the difficulty of configuration and deployment is reduced, and the network connection control platform realizes control operation without data operation, thereby reducing the demand for traffic and saving cost.

The invention relates to hardware virtualization for fault management. In various examples, systems and methods related to hardware virtualization for fault management are disclosed. Systems and methods of determining a task flow to perform tasks on a first partition and a second partition are disclosed. The processor may include one or more circuits. The one or more circuits may determine that a first task of the plurality of tasks satisfies criteria for execution in a redundant mode, determine a task flow for execution of the plurality of tasks, where a translator is assigned prior to execution of the first task, the translator causing the one or more circuits to be divided into a first partition and a second partition, and execute the plurality of tasks according to the task stream by executing a first instance of the first task on the first partition and executing a second instance of the first task on the second partition.

The invention provides a remote control method and system based on a lightweight IP-KVM special processing chip, and relates to the field of integrated circuit design. The method comprises the following steps: acquiring video data and remote control instruction data of a remote target host; performing compression processing on the video data by adopting an image compression algorithm to obtain compressed image data; converting the remote control instruction data into a USB data packet according with a USB protocol standard through a hardware virtualization technology; storing the compressed image data and the USB data packet to an output cache region; and transmitting the data in the output cache region to a remote target host to realize immediate response. According to the method and the device, the problem that the remote control instruction cannot be stably identified at the host end due to high delay of remote response in the process of transmitting the remote user input instruction to the target host is solved.

Techniques are described herein for processing data. For instance, a process can include receiving input data by a symmetrical processing engine of two or more symmetrical processing engines coupled to an auxiliary processing engine. The process can further include receiving an indication to process the input data using a module of the auxiliary processing engine, transmitting output data to the auxiliary processing engine, receiving processed data from the auxiliary processing engine, further processing the processed data in one or more portions of a pipeline of modules of the symmetrical processing engine, and outputting the further processed data.

In various examples, systems and methods are disclosed relating to hardware virtualization for fault management. Systems and methods are disclosed that determine a task flow to execute the tasks on a first partition and a second partition. A processor may include one or more circuits. The one or more circuits may determine that a first task of a plurality of tasks satisfies a criterion for execution in a redundant mode, determine a task flow, for execution of the plurality of tasks, in which a switch is assigned prior to execution of the first task, the switch to cause the one or more circuits to be partitioned into a first partition and a second partition and execute the plurality of tasks according to the task flow by executing a first instance of the first task on the first partition and a second instance of the first task on the second partition.

Techniques for customer initiated virtual machine resource allocation sharing are described. A hardware virtualization service of a cloud provider network receives a request to launch a first virtual machine, where the first virtual machine belongs to a first virtual machine type having an amount of resources allocated to virtual machines of the first virtual machine type. The hardware virtualization service causes startup of the first virtual machine on a host computer system of the cloud provider network. The host computer system shares an allocation of the amount of resources from the host computer system for corresponding resources between the first virtual machine and a second virtual machine, wherein the second virtual machine belongs to the first virtual machine type.

The embodiment of the invention provides a communication method applied to a hardware virtualization system. According to the system, two partitions for operating a first operating system and a second operating system respectively are isolated through a virtual machine monitoring program, and a first equipment file for a user program of the first operating system to access is created based on a shared memory. The method comprises the following steps: mapping the shared memory to an address space of a user program through the equipment file, so that the user program can directly read data written into the shared memory by the second operating system, or directly write the data and notify the second operating system to read the data. According to the scheme, intervention of a kernel of the first operating system is avoided, and data copying and context switching between a kernel mode and a user mode are eliminated, so that communication delay is remarkably reduced, throughput is improved, and efficient communication among different operating systems is realized.

The present invention discloses a RISC-V memory access violation detection method and device based on hardware virtualization, comprising: reverse engineering the operating system kernel running on the RISC-V to obtain the process kernel data structure; simulating the RISC-V CPU based on a hardware simulator; constructing a basic process list of the operating system; using the sptbr register and the process kernel data structure to obtain feature information of a new process; filtering the feature information based on the basic process list to obtain a target process; performing API detection and instruction analysis based on the process information of the target process and dynamic running process information, comparing the obtained memory access data with the memory access permission list to obtain a violation detection result. The present invention can completely and transparently monitor the entire process of program execution on the RISC-V CPU, provides a configurable memory access violation configuration interface, and the monitoring process does not rely on system-provided functions or interfaces. It can achieve transparent process monitoring and memory access violation detection, thereby improving the memory access violation detection capability and accuracy.