150 results about "Hypervisor" patented technology

A method for authentication using a virtual machine by an electronic device is provided. The method includes identifying, in a first virtual machine in which a host operating system (OS) is implemented, a user input for an application or data requiring authentication, in response to the user input, setting, by the first virtual machine through a hypervisor, a control authority for the application or the data to a second virtual machine in which a guest operating system (OS) is implemented, and performing, based on control of the second virtual machine, an external authentication procedure for the application or the data, wherein the hypervisor is a platform for concurrently executing the host OS and the guest OS on the electronic device.

Disclosed are systems and methods for debugging program code using a computing system. The disclosed method includes designating a control point in a software application subject to a debugging procedure, and then executing the program code for the software application as a guest application executing within a virtual machine. Upon detection of a virtualization event, the hardware processor transfers program control to a hypervisor which then determines whether the virtualization event corresponds to the designated control point based on an execution state of the guest application. If so, the virtualization event handler may generate a debugging event that is used by a debugger.

The invention discloses a vehicle-mounted intelligent cabin log system and a vehicle-mounted intelligent cabin log management method, and relates to the field of vehicle machine logs, and the vehicle-mounted cabin system comprises an MCU and an SOC; the MCU runs an AutoSAR real-time operating system and is responsible for CAN signal receiving and transmitting, communication diagnosis, sleep awakening and power management of the whole vehicle; the SOC runs dual systems through a Hypervisor virtual machine monitoring program, and the dual systems comprise an instrument system and a central control system; wherein the instrument system end runs a QNX / Linux system to realize quick response, and the central control system end runs an Android system to process intelligent interaction and cockpit entertainment functions; wherein the cabin log system is established based on the vehicle-mounted cabin system of the vehicle infotainment device 1 and the vehicle-mounted cabin system of the vehicle infotainment device 2; the cabin log system is used for log generation and storage of the vehicle-mounted cabin system of the vehicle infotainment device 1 and the vehicle-mounted cabin system of the vehicle infotainment device 2.

Systems and methods for encryption support for virtual machines. An example method may comprise initializing, by a firmware module associated with a virtual machine running on a host computer system, an exclusion range register associated with the virtual machine with a value specifying a first portion of guest memory. The first portion of the guest memory may include an exclusion range marked as reserved. The second portion of the guest memory may b e encrypted using an ephemeral encryption key. Virtual machine firmware may identify, in the second portion of the guest memory, an instruction to a virtual device associated with the virtual machine, copy data corresponding to the instruction to the first portion of guest memory, and alert the hypervisor of the data stored in the first portion of guest memory.

A system for kernel protection includes a processor and a transmission interface. The processor is arranged to execute at least one guest virtual machine (VM), at least one primary VM, and a hypervisor. The at least one guest VM is arranged to send at least one command to a command hub. The at least one primary VM is arranged to manage and configure a safety setting according to the at least one command from the command hub and at least one policy, and manage and configure a safety protection component according to the safety setting. The hypervisor is arranged to manage and configure the safety protection component according to a ground rule and at least one safety setting command from the at least one primary VM. The transmission interface is arranged to bind the at least one primary VM to the hypervisor.

A method and system for replicating data change operations in a virtualized environment is provided. A data change filter and a data change driver in a hypervisor intercept data change operations from a virtual machine. A replication processing service receives a first stream of data change operations from the data change driver and a second stream from the data change filter. The service identifies a matching data change operation in both streams, replicates operations from the first stream up to a transition point, and then replicates operations from the second stream starting from the transition point. The transition point is pre-defined with respect to the matching data change operation. This approach enables seamless migration between driver-based and filter-based replication methods while maintaining data consistency and continuity.

A first hypervisor running on a first processor cluster is provided. During operation, the first hypervisor can determine a first set of processing nodes and a first memory unit of the first processor cluster in response to the booting up of a first Basic Input / Output System (BIOS) of the first processor cluster. The first hypervisor can discover a second hypervisor running on a second processor cluster comprising a second set of processing nodes and a second memory unit. The first hypervisor can operate, with the second hypervisor, a distributed system comprising the first and second sets of processing nodes and the first and second memory units. The first hypervisor can then operate, with the second hypervisor, a global virtual machine on the distributed system. The virtual memory space of the global virtual machine can be mapped to respective memory spaces of the first and second processor clusters.

The embodiment of the invention provides a security defense method and device based on Hypervisor, and relates to the technical field of virtualization. The method comprises the steps of determining a memory processing type in response to a preset trigger operation; and calling an hvc command by calling a virtual machine monitor corresponding to the memory processing type so as to indicate a Hypervisor to execute a Hypervisor processing function corresponding to the hvc command. According to the embodiment of the invention, the distribution or release of the internal memory of the process is realized through the Hypervisor with higher authority, even if the kernel of the operating system is broken by a malicious application program, the integrity of a security mechanism of the operating system can still be ensured, and the effective defense of security threats of the operating system is realized.

The invention relates to a method for providing attestations for a virtualized computing platform communicating with a relay server, the relay server being configured to generate a vector commitment from a random vector transmitted by the hypervisor of the virtualized computing platform and generate a zero-knowledge proof from this vector commitment, the proof being generated so as to prove that the hypervisor is in a valid configuration and that the link between the hypervisor and a virtual machine is valid, without disclosing the exact configuration thereof.

A method, according to one embodiment, includes obtaining information generated by a hypervisor, where the generated information details a classification process. The classification process includes classifying physical memory blocks as residing on a first server or a second server, and associating the physical memory blocks with logical memory blocks of logical partitions of the first server and logical partitions of the second server. The method further includes providing the generated information to an operating system used to manage the logical partitions of the first server and the logical partitions of the second server. The operating system is caused to use the information to classify memory pools to a home memory cluster of the first server or to a remote memory cluster of the second server, and memory pages are caused to be dynamically stored within allocations of the memory pools based on predetermined usage statistics.

An aspect of the present disclosure is directed to a system for dynamic provisioning of hardware instances via reprogrammable fabric provided by a reprogrammable hardware device (RHD). The system preferably includes a memory having a first instruction set disposed therein, the first instruction set for provisioning a hypervisor processing unit (HPU) instance (also referred to herein as an orchestrator instance) within the reprogrammable fabric of the RHD, and a startup sequence for execution by the HPU instance. The startup sequence of the HPU instance is preferably configured to cause provisioning of at least a first hardware instance within the second portion of the reprogrammable fabric of the RHD, and for provisioning an interface instance to allow for a physical hardware device of the host computer system to communicate with the first hardware instance via a virtualized communication channel.

Systems and techniques are provided for a booting a container. For instance, a process can include obtaining, from a first verified boot metadata partition of a host operating system, a first public key associated with a container; verifying a second verified boot metadata partition of the container using the first public key, wherein the second verified boot metadata partition of the container is signed using a first private key corresponding to the first public key associated with the container; accessing the second verified boot metadata partition of the container to obtain a first hash tree for a first file system of the container; and verifying the first file system of the container based on the first hash tree for the first file system of the container.

Memory pages can be migrated between non-uniform memory access (NUMA) nodes based on entries in a page modification log according to some examples described herein. In one example, a physical processor can detect a request from a virtual machine to access a memory page. The physical processor can then update a page modification log to include an entry indicating the request. A hypervisor supporting the virtual machine can be configured to detect the request based on the entry in the page modification log and, in response to detecting the request, migrate the memory page from a second NUMA node to a destination NUMA node.

The invention relates to an interrupt controller isolation access control method based on a virtual machine monitor, and the method comprises the steps: analyzing an access instruction of a virtual machine to an interrupt controller, so as to obtain an operation attribute and a target address; querying a predefined mapping relationship based on the virtual machine identifier, the processor core information and the target address, and generating an interrupt nucleophilicity parameter; dynamically generating a register operation mask according to the interrupt nucleophilicity parameter and interrupt register configuration information corresponding to the target address; verifying the access authority of the virtual machine to the target address based on the register operation mask; and in response to the fact that the access permission passes the verification, executing the access of the access instruction to the interrupt controller in an atomic operation mode by applying the register operation mask.

The invention discloses a method and a device for interrupt between virtual machine processors, and electronic equipment. The method includes generating an inter-core communication interrupt for a second virtual CPU by a fast interrupt module configured by an inter-processor interrupt transmit function of a first virtual CPU, routing the inter-core communication interrupt to a physical CPU where the second virtual CPU is located by a universal interrupt controller, and responding to the inter-core communication interrupt by a virtual machine hypervisor of the physical CPU. In this way, the rapid interrupt module is added in the interrupt sending function between the processors of the virtual CPU to trigger rapid interrupt, the virtual CPU does not need to trigger the VM-Exit, the frequency of triggering the VM-Exit by the virtual CPU is greatly reduced, the intervention operation of a virtual machine management program is reduced, and therefore the performance of communication between the virtual CPUs of the virtual machine is effectively improved.

A signal processing device and a display apparatus including the same are disclosed. The signal processing device includes a processor to perform signal processing, wherein the processor is configured to execute a server virtual machine and a plurality of guest virtual machines on a hypervisor, first and second guest virtual machine operate for first and second display, respectively, the server virtual machine is configured to encode and store processed video data in a shared memory, the first guest virtual machine is configured to receive and decode the encoded video data and store decoded video data in the shared memory, and the second guest virtual machine is configured to receive the decoded video data and display at least a portion of the decoded video data on the second display. Accordingly, it is possible to reduce a delay in displaying images between a plurality of displays.

A command is received by a data protection agent to conduct an application-consistent backup of an application. The agent and application are installed as guests in a virtual machine (VM) provided by a hypervisor of a host. The VM is connected to a virtual machine guest network. The hypervisor is connected to an infrastructure network, separate from the virtual machine guest network. A socket communication channel is established between the agent and a snapshot data mover running on the host and outside the VM. A request for a snapshot is issued over the socket communication channel to the snapshot data mover. The snapshot request is passed to a virtual machine manager connected to the infrastructure network.

During a post-copy migration process, latency and memory overrides can be avoided by implementing some techniques described herein. For example, during a post-copy migration process involving migrating a virtual machine from a source computing device to the destination computing device, a hypervisor can start the virtual machine on the destination computing device. After starting the virtual machine, the hypervisor can receive a message associated with storing data from a passthrough device to a virtual memory segment of the virtual machine on the destination computing device. Based on receiving the message, the hypervisor can prevent the virtual memory segment from being migrated from the source computing device to the destination computing device. This can prevent the data from the passthrough device from being overridden.

The invention discloses a closed source software system behavior description method based on virtualization, which comprises the following steps of: starting a VMX mode, and configuring a processor register to support a virtualization environment; a binary instruction stream of the closed source software is analyzed, and a real function entry address of the target is obtained; setting an INT3 breakpoint at the function entry address, and storing an original instruction; and breakpoint triggering information is received and processed through the Hypervisor layer. According to the method, the execution process of the closed source software is captured and analyzed in the virtual environment, the analysis process reduces the dependence on the symbol table, the system call sequence is modeled and analyzed in combination with the Markov chain model, the operation behavior of the closed source software is accurately described, and in addition, the operation efficiency of the closed source software is improved. According to the method, regular behaviors of normal applications can be found, and potential abnormal calling and malicious behaviors can be identified in time, so that a customization function is realized according to requirements, and a reliable basis is provided for system security monitoring and behavior analysis.

A fair and efficient guest to hypervisor virtual machine socket protocol may be provided by: in response to a host determining to reject a message received from a guest that was previously accepted for processing by the host, transmitting a rejection to the guest; in response to receiving, at the guest, the rejection, adding the message to a processing request queue on the guest; in response to determining that resources to handle the message have become available for the guest, transmitting an indication to the guest that the host is able to reaccept the message; in response to receiving, at the guest, the indication, retransmitting the message to the host according to the processing request queue; and in response to receiving the message from the guest a second time, accepting the message in an execution queue in a virtual memory of the host.

A server includes physical compute nodes. Each physical compute node includes a host and physical management resources. The physical management resources include a physical management processor. The server includes a distributed hypervisor to provide a distributed application operating environment that is hosted by the physical management resources. The distributed hypervisor to allocate, from the physical management processors, virtual processors for the distributed application operating environment to execute applications to manage the physical compute nodes. The distributed hypervisor includes a plurality of hyper-kernels that are associated with respective physical compute nodes. Each hyper-kernel is hosted on the physical management resources of the associated physical compute node.

The invention relates to the field of airplane airborne system design, and discloses a Hypervisor-based cross-system adaptive communication architecture, method and equipment, a virtual machine monitor is introduced between two operating systems, so that the virtual machine monitor is located between the two operating systems, and the virtual machine monitor is responsible for managing hardware resources and providing a virtual operation environment for the two operating systems; according to the method, a virtual machine monitor is partitioned and placed in a shared memory area according to the type of cross-system data, and key real-time data can be preferentially transmitted without waiting for scheduling of a CPU (Central Processing Unit) by performing priority ranking on the data, so that the strict requirement of the aviation field on real-time performance is met; meanwhile, the division of the exclusive channel and the shared channel further optimizes the data transmission path. According to the invention, the data transmission speed can be effectively improved, and the time delay is reduced, so that the communication efficiency in the cross-system service process is improved.

The application provides a virtual large language model LLM device, and belongs to the technical field of virtualization, and comprises an LLM app, a virtio_llm device, a virtio_llm driver, physical hardware Host, a virtual machine monitor Hypervisor, a virtual machine Guest and a large language model inference device LLM. The application does not rely on network transmission data, and does not need to passthrough computing resources to the virtual machine.

This electronic device may comprise a memory, and a processor including processing circuit. The processor can use an image file for a kernel at a first privilege, a hypervisor at a second privilege higher than the first privilege, and a security function at a third privilege higher than the second privilege. The processor can execute, in response to the execution of a bootloader including address information for the hypervisor, an instruction for requesting the security function to load the address information; use, on the basis of using the security function to verify the reliability of the address information, the security function to load the address information in a security area within the memory; use, in response to the execution of the kernel at the first privilege, the security function to load execution information for the hypervisor in the image file into the secure area; and execute the hypervisor.

The present invention relates to an operating system performance interference preventing apparatus of a hypervisor system.The present invention includes a hardware physical layer, an operating system layer composed of a plurality of operating systems of different types, and a hypervisor that allocates basic resources for using system resources of the hardware physical layer for each of a plurality of operating system domains corresponding to a plurality of operating systems constituting the operating system layer so that the plurality of operating systems operate in a virtual machine environment, and the basic resources allocated by the hypervisor for each of the plurality of operating system domains include a first resource consumed when a specific operating system domain, which is one of the plurality of operating system domains, directly uses the system resources, a second resource consumed when the hypervisor uses the system resources, and a third resource consumed in a process of using the system resources by a device driver domain that drives an input / output device of the hardware physical layer when the specific operating system domain uses the input / output device.According to the present invention, there is an effect of solving the problem that a phenomenon, in which system resources allocated according to the original specifications for each operating system on the hypervisor become insufficient, occurs due to an occurrence of a situation, in which some operating system domains operating on the hypervisor excessively use system resources, and remaining operating system domains, particularly a real-time operating system, cannot operate while satisfying real-time requirements.

The present disclosure relates to a pin control virtualization method, device and electronic equipment, the method is applied to a host operating system and a guest operating system constructed based on a hypervisor, and the method comprises: the guest operating system configures state and configuration information of a pin controller in a device tree script (DTS) of a driver; when a preset operation is performed on the pin controller state, the preset operation is performed on a virtual pin controller state at the guest operating system end, and state name and configuration information are sent to the host operating system; and according to the state name and configuration information sent by the guest operating system, the preset operation is performed on the pin controller state at the host operating system end, and an execution result is returned to the guest operating system. Through the pin control virtualization method, the host operating system and the guest operating system can both access PIN CONTROLLER hardware, so that the purpose of configuring pins is achieved.

A computing system is provided with an enhanced entry to a deep sleep mode. The enhanced entry occurs after an initial deep sleep mode before which the computing system backed up an entirety of a configuration context to a configuration context buffer in a system memory. After the initial deep sleep mode, the computing system updates the configuration context buffer with any changes made to the configuration context. Since the configuration context stored in the configuration context buffer is thus in sync with the actual configuration context, a subsequent entry to a deep sleep state may be performed without any updating of the configuration context buffer.

The invention discloses a cross-virtual machine GPU resource scheduling optimization method based on a shared memory, and belongs to the technical field of virtual machine resource scheduling. The overall structure of the system comprises a virtual machine layer and a host layer, and in the virtual machine layer, nodes are divided into user nodes and resource nodes according to whether the nodes have the GPU direct connection capability or not. In a host layer, a back-end daemon process is arranged, and the process is used as a core component for system transfer and scheduling and is mainly responsible for uniformly managing a shared memory and channel resources; monitoring and maintaining the running state of each node managed by the Hypervisor; packaging and processing a node registration request, a resource application request and a task scheduling request; and according to a decision result of the internal scheduling module, dynamically establishing or allocating a high-speed data channel, and realizing rapid transmission of the task between the user node and the resource node.

This vehicle control device is provided with a hypervisor, first and second virtual machines operating on the hypervisor, a real device occupied and directly accessible by the first virtual machine, and a shared memory accessible by the first virtual machine. The first and the second virtual machines communicate via a ring buffer. In that situation, the first virtual machine secures the ring buffer for each of different levels determined as safety standard levels.

A signal processing device and a vehicle display apparatus including the same according to an embodiment of the present disclosure include a processor including a plurality of processor cores, and the processor is configured to execute a plurality of virtual machines on a hypervisor, and a first virtual machine among the plurality of virtual machines is configured to transmit first data to a second virtual machine based on one of heterogeneous data communication schemes, and transmit second data to an external signal processing device based on one of the heterogeneous data communication schemes. Accordingly, it is possible to transmit the data quickly and stably through various communication schemes.