545 results about "Hypervisor" patented technology

The invention discloses a micro-kernel Hypervisor-based virtual machine cross-operating system communication method, which comprises the following steps of: creating virtual machines which independently run in respective operating system environments by a micro-kernel Hypervisor, then constructing a shared memory between two virtual machines with communication requirements, respectively initializing virtual machine shared equipment by the two virtual machines, and storing the virtual machine shared equipment in the shared memory; according to the cross-operating-system communication method, the shared memory is mapped to a virtual address of the shared memory, when one virtual machine needs to transmit data to the opposite side, communication is initiated to write the data into the shared memory, and the virtual machine receiving the data reads the data from the shared memory, so that cross-operating-system communication of the virtual machines is realized. Based on the shared memory technology, the communication process of the shared memory and the virtual machines is managed by using the microkernel Hypervisor, and cross-operating system communication between the virtual machines is realized.

The invention discloses a method for communication between a user program and a virtual machine on a microkernel Hypervisor, the microkernel Hypervisor is provided with two shared memory areas, the shared memory area 1 is accessed by the user program and a root service Rootserver, the shared memory area 2 is accessed by the Rootserver and the virtual machine, the user program writes communication request data with the virtual machine into the shared memory area 1, and the user program writes communication request data with the virtual machine into the shared memory area 2. The method comprises the following steps that a VMM sub-thread is used as a shared memory area 1, a Rootserver is notified through inter-process communication, the Rootserver reads communication request data from the shared memory area 1, the communication request data is written into a shared memory area 2 after being analyzed by the VMM sub-thread, a system calls a syscale to transmit a communication request to a kernel, the kernel injects virtual interrupt into a virtual machine, and the virtual machine sends the communication request to the Rootserver. And an interrupt processing program of the virtual machine processes the communication request and writes a processing result into the shared memory area 2, then the processing result is returned to the Hypervisor through the Hypercall, and a Rootserver of the Hypervisor feeds back the processing result to a user program through the IPC. The method is designed for the microkernel Hypervisor environment, and the overall performance and efficiency of the embedded virtualization system are improved.

In one embodiment, a system for managing a virtualization environment includes a set of host machines, each of which includes a hypervisor, virtual machines, and a virtual machine controller, and a first virtualized file server configured to receive a request to access a storage item located at a second virtualized file server, determine that the storage item is designated as being accessible by other virtualized file servers, identify an FSVM of the second virtualized file server at which the storage item is located, and forward the request to the FSVM of the second virtualized file server. The storage item may be designated as being accessible by other virtualized file servers when the storage item is associated with a predetermined tag value indicating that the storage item is shared among virtualized file servers. The predetermined tag value may be stored in a sharding map in association with the storage item.

A method for dynamically optimizing and modifying allocation of virtual resources to processes includes allocating, by a first hypervisor, a first amount of a first virtual resource to a process executing in a virtual machine on a first machine. An agent, in communication with a resource allocation process executing in the virtual machine, determines a second amount of the first virtual resource to be utilized by the process. A scheduler receives an identification of the determined second amount and directs migration of the process to a second machine. A second hypervisor executing on the second machine allocates a third amount of the first virtual resource, the third amount substantially similar to the second amount. The method includes communicating, by the resource allocation process, to the process, that the first amount of the first virtual resource is allocated to the at least one process.

The invention relates to the technical field of vehicle-mounted intelligent computing, in particular to a hybrid key task scheduling method, system and equipment based on a virtualization technology. The method comprises the following steps: firstly, carrying out hybrid criticality grading on vehicle-mounted intelligent cabin tasks, and establishing a priority table; then, creating a dynamic resource partition based on a QNX Hypervisor platform, monitoring a system load state in real time through a hardware performance counter, and predicting a computing power demand of a large model; dynamically calculating an allocation scheme in combination with the task criticality level and the system energy efficiency state; then determining an optimal calculation unit selection strategy and a model precision grade by adopting an energy consumption-time delay joint optimization model; and finally, executing encrypted storage and integrity verification of large model parameters in a trusted environment, and completing end-side deployment and security verification. According to the method, the dynamic resource scheduling of the mixed key task is realized, the resource utilization rate is improved, the real-time requirement of the safety key task is ensured, and the dynamic balance between the performance and the energy efficiency is realized.

The invention discloses an ARMv8-based virtual machine interrupt through routing method, which comprises the following steps that: a Hypervisor directly routes a physical interrupt to an EL1 through configuration, sets a top page table address of a vCPU (Virtual Central Processing Unit) and a Hypervisor control register at the same time, and sets a vcpudid flag bit for indicating whether the vCPU adopts a virtual interrupt injection mechanism or a physical interrupt through routing mechanism; and judging whether an interrupt through routing condition is met or not so as to determine whether an interrupt through routing mechanism or a virtual interrupt injection mechanism is adopted, periodically judging whether a switching condition is met or not when the interrupt through routing mechanism is adopted, and switching from the interrupt through routing mechanism to the virtual interrupt injection mechanism if the switching condition is met. The method is compatible with two interrupt controller specifications of GICv2 and GICv3, supports the virtual machine and the hypervisor to respectively and independently respond to respective corresponding interrupt requests, and meanwhile, the method has the capability of dynamically switching an interrupt routing mechanism during the system operation period, so that the flexibility of interrupt processing and the expandability of the system are improved.

A direct-attached storage device software RAID crash dump system includes a chassis housing a software RAID subsystem coupled to physical storage devices, controller devices, and a hypervisor subsystem. The software RAID subsystem presents a primary controller device to the hypervisor subsystem as being connected to a logical storage device provided by the physical storage devices. When the software RAID subsystem receives a first crash dump command from the hypervisor subsystem directed to the primary controller device and identifying a crash dump logical storage subsystem in the logical storage device, it transmits a respective second crash dump command to each of a subset of the physical storage devices that provide the crash dump logical storage subsystem via a respective controller device that couple the software RAID subsystem to that physical storage device, confirms completion of the respective second crash dump commands, and transmits a crash dump confirmation to the hypervisor subsystem.

A direct-attached storage device software RAID crash dump system includes a chassis housing a software RAID subsystem coupled to physical storage devices, controller devices, and a hypervisor subsystem. The software RAID subsystem presents a primary controller device to the hypervisor subsystem as being connected to a logical storage device provided by the physical storage devices. When the software RAID subsystem receives a first crash dump command from the hypervisor subsystem directed to the primary controller device and identifying a crash dump logical storage subsystem in the logical storage device, it transmits a respective second crash dump command to each of a subset of the physical storage devices that provide the crash dump logical storage subsystem via a respective controller device that couple the software RAID subsystem to that physical storage device, confirms completion of the respective second crash dump commands, and transmits a crash dump confirmation to the hypervisor subsystem.

The invention relates to firmware partitioning for a GPU via a virtual SOC. One embodiment provides a graphics processor, the graphics processor comprising: an interpolator comprising a plurality of core grain sockets; a plurality of core particles coupled with the plurality of core particle sockets; and circuitry configured to provide a firmware super supervisor for causing the processing resources of the plurality of core particles to be dynamically divided into a plurality of partitions.

The embodiment of the invention discloses a system startup memory detection method and device, equipment and a storage medium, and the method comprises the steps: calculating the maximum value of a Hypervisor early virtual address mapping range according to the initial address of Hypervisor operation before a final page table takes effect; when the dynamic allocation pool is utilized to allocate the memory page, determining a virtual address range of the allocated memory page by utilizing a base address of the allocated memory page, and detecting whether the virtual address range of the allocated memory page exceeds a maximum value of a Hypervisor early virtual address mapping range or not; and when the maximum value of the Hypervisor early virtual address mapping range is exceeded, outputting an error prompt, and returning a memory error. Compared with a traditional estimation mode, the probability that estimation is inaccurate due to the fact that dynamic allocation changes is reduced, the memory errors can be accurately detected in advance before the system crashes, and a developer can conveniently locate the reason of crashes.

Memory access control in a virtualization environment is provided. Sets of page tables are maintained, with each set corresponding to a given hypervisor application and guest virtual machine (VM), and each set including mappings to a subset of the guest VM memory to thereby limit an amount of the quest VM memory that is accessible Presentation of these sets is controlled to present just one of the sets at any given time for hypervisor processing to access guest VM memory.

A method of executing a safety-critical application (130) on a hardware platform (100) is proposed. The method includes executing, on the hardware platform (100), a hypervisor (115); instantiating, by the hypervisor (115), an execution environment (120); executing, in the execution environment (120), an operating system having a kernel (125, 125a); executing, in the execution environment (120), on the operating system, the safety-critical application (130) on a privilege level that is lower than that of the kernel (125, 125a); executing, by the safety-critical application (130), a system call instruction of the kernel (125, 125a) that diverts the control flow to a first-level handler (127) in the kernel (125, 125a) with the goal of invoking, by a particular intended system call, a functionality provided by the kernel (125, 125a); further diverting, by the processor core (112a, 112b), the control flow to a second-level handler (119) in the hypervisor (115); passing, by the second-level handler (119), the intended system call to a supervisor component (150); and checking, by the supervisor component (150), operations to be performed by the intended system call against a predetermined ruleset, so as to allow or disallow the system call.

A display apparatus for a vehicle includes: first, second, and third displays located in the vehicle, a first signal processing device comprising a first processor configured to perform signal processing for the first display and the second display, and a second signal processing device comprising a second processor configured to perform signal processing for the third display. The first processor is configured to execute first, second, and third virtual machines on a hypervisor in the first processor. The first virtual machine is configured to transmit, from at least one of the second virtual machine or the third virtual machine to the second signal processing device, a remote processing request, receive image data processed by the second signal processing device in response to the remote processing request, and control at least one of the first display or the second display to display an image related to the received image data.

A hardware apparatus for isolated virtual environments includes graphics processing unit comprising a first dedicated memory and a first plurality of processing cores, a central processing unit comprising a second dedicated memory and a second plurality of processing cores, a field programmable gate array comprising a third dedicated memory, a control and data bus assembly connecting the field programmable gate array, the central processing unit, and the graphics processing unit, and a hypervisor located on a non-volatile memory of the hardware apparatus, the hypervisor configured to create one or more virtual machines by isolating the graphics processing unit, the central processing unit and the field programmable gate array.

One embodiment provides a graphics processor comprising an interposer including a plurality of chiplet sockets, a plurality of chiplets coupled with the plurality of chiplet sockets, and circuitry configured to provide a firmware hypervisor to enable dynamic partitioning of processing resources of the plurality of chiplets into a plurality of partitions.

A signal processing device and a vehicle display device comprising same, according to an embodiment of the present disclosure, comprise a processor for executing a hypervisor, wherein the processor: executes, on the hypervisor, a recognition service for performing recognition on the basis of sensor data and a safety monitor service for monitoring the recognition service; and performs a recovery mode by using a redundant recognition service when the recognition service is executed. Accordingly, the stability of the recognition service can be improved.

The invention provides a virtual machine thermal migration system used in a DPU (Data Processing Unit) environment, which comprises a source host on which a source Hypervisor is operated, and the source Hypervisor manages a source virtual machine to be migrated; the destination host is used for establishing a destination virtual machine in response to the live migration instruction of the source host and receiving data to be migrated; the agent module is deployed in a source virtual machine managed by the source Hypervisor and is used for receiving an instruction of the source Hypervisor and collecting memory information of the source virtual machine, and the memory data comprises information of an unused memory; and the thermal migration control module is used for controlling a thermal migration process, including initiating a thermal migration instruction, marking memory data to be migrated according to information of an unused memory, executing data migration operation, monitoring a thermal migration process, and performing thermal migration rollback when migration is abnormal. The invention further discloses a corresponding method, equipment and a storage medium. By implementing the application, the efficiency, stability and service continuity of thermal migration are improved.

A host server computer with an uncorrectable memory error can be repaired without a reboot operation. While initially booting a hypervisor, a special software Application Programming Interface (API) can be loaded between a BIOS System Management Mode (SMM) code and the hypervisor. Once the host server computer is booted and a number of virtual machines are executing, a memory error (e.g., uncorrectable error correction code (UECC)) can occur. In response, the hypervisor calls into the special software API identifying the defective memory rows that the BIOS needs to repair. The BIOS starts a soft Post Package Repair (PPR) process on those rows and gives back control to the hypervisor. When the repair is completed, the hypervisor loads a scrubbing virtual machine and validates that the memory is corrected. After the repair is validated, the hypervisor allows the available partition to take a new customer instance.

A device may receive an input associated with deploying a virtual firewall on a computing device. The device may determine a first set of characteristics associated with the virtual firewall and a second set of characteristics associated with a hypervisor associated with the computing device. The device may automatically tune the virtual firewall based on the first set of characteristics and the second set of characteristics. The device may deploy the virtual firewall after tuning the virtual firewall.

The signal processing device and the vehicle display apparatus including the same according to an embodiment of the present disclosure includes a processor to process a vehicle signal, wherein the processor is configured to execute a server virtual machine and a plurality of guest virtual machines on a hypervisor in the processor, wherein the server virtual machine is configured to transmit processed camera data to a shared memory, a second guest virtual machine is configured to receive the camera data from the shared memory, to generate first data for a first application service based on the camera data and to transmit the first data to the shared memory, and a first guest virtual machine is configured to display an image, synthesized based on the camera data from the shared memory and the first data, on the first display. Accordingly, data processing may be performed efficiently.

The invention discloses a method for communication between jailhome partitions. The method comprises the following steps: configuring a jailhome cell configuration file according to hardware platform resources and task requirements in a cell; compiling and operating jailhouse, starting an inmate cell, and completing registration of a destination port and a source port and memory mapping of an FIFO annular buffer area; sending data to the virtual PCI device through a source port, filling in a Doorbell register after data sending is completed, and sending an interrupt signal to a destination port through a Hypervisor; reading data from the virtual PCI device through the destination port; and after the application program of the destination port receives the data, executing the predefined task. According to the method, the controllability, verifiability and adaptation flexibility of communication behaviors are enhanced, and the method is suitable for safety key scenes with strict requirements for high-frequency, small-data-volume, low-delay and deterministic communication.

The invention discloses a virtual machine pause processing method of a micro kernel Hypervisor based on an ARM VHE (Advanced RISC Machines VHE), which is characterized in that the micro kernel Hypervisor based on the ARM VHE is deployed and comprises a Hypervisor micro kernel module, a Host OS (Operating System) service thread and a virtual machine user mode management thread, wherein a CPU (Central Processing Unit) virtualization module in a kernel virtualization extension module in the Hypervisor microkernel module comprises a vCPU running thread running in an EL0 / EL1 mode and a vCPU processing thread running in the EL0 mode, and when the Hypervisor monitors that the vCPU running thread is suspended, the kernel virtualization extension module in the kernel virtualization extension module in the Hypervisor microkernel module is started; corresponding processing operation is adopted according to the pause trigger reason: if the current pause reason belongs to interrupt trigger or abnormal trigger processed under a Hypervisor microkernel, the kernel virtualization extension module directly performs corresponding virtual machine pause processing operation on EL2, and if the current pause reason belongs to other conditions, the kernel virtualization extension module directly performs corresponding virtual machine pause processing operation on the EL2; if yes, scheduling a vCPU processing thread to perform virtual machine pause processing operation at EL0; and after the operation is completed, the vCPU running thread recovers running. According to the method, the interrupt and exception processing of the Hypervisor on the virtual machine is optimized, and the pause processing performance of the virtual machine is improved.

The signal processing device and the vehicle display apparatus including the same according to an embodiment of the present disclosure includes a processor to process a vehicle signal, wherein the processor is configured to execute a server virtual machine and a plurality of guest virtual machines on a hypervisor in the processor, wherein the server virtual machine is configured to transmit processed camera data to a shared memory, a second guest virtual machine is configured to receive the camera data from the shared memory, to generate first data for a first application service based on the camera data and to transmit the first data to the shared memory, and a first guest virtual machine is configured to display an image, synthesized based on the camera data from the shared memory and the first data, on the first display. Accordingly, data processing may be performed efficiently.

Systems, apparatuses, and methods related to a hypervisor status register in a computer processor are described. For example, a memory coupled to the computer processor can store instructions of routines of predefined, non-hierarchical domains. The computer processor can store a value in the hypervisor status register during a power up process of the computer system. The value stored in the hypervisor status register that identifies whether or not an operating hypervisor is present in the computer system. The computer processor can configure its operations (e.g., address translation) based on the value stored in the hypervisor status register.

The invention relates to an operating system environment construction technology, and discloses an ARM (Advanced RISC Machines) processor-oriented micro-kernel operating system confidential computing environment construction method, which is characterized in that a hierarchical system architecture is constructed, a virtual machine monitor and a confidential domain management monitor are decoupled at an ARM exception level EL2, and the virtual machine monitor and the confidential domain management monitor run in mutually isolated address spaces. The RMM is used as an independent module for dynamic loading, a management mechanism of a confidential computing domain is specially used, and the Hypervisor is only responsible for strategy scheduling, so that the defect that the Hypervisor is bloated in function in a traditional scheme is overcome. According to the method, the RMM is loaded through the security startup process during startup, the confidential virtual machine is dynamically created during running, mirror image security verification, memory encryption and other mechanisms are integrated, and finally the security domain is destroyed after the application is finished. The method has the advantages that a flexible and safe confidential computing environment conforming to the minimum privilege principle is provided for the microkernel system, and the method is particularly suitable for embedded scenes with high safety requirements such as the Internet of Things and industrial control.

The embodiment of the invention relates to the technical field of terminal security management, and discloses a kernel management method and device based on Hypervisor, and the method comprises the steps: obtaining abnormal event information of an operating system kernel of terminal equipment; determining virtual address field information corresponding to the abnormal event according to the abnormal event information; performing virtual memory measurement on the operating system kernel according to the virtual address field information to obtain a memory measurement result; and determining whether data in the kernel of the operating system is tampered or not according to the memory measurement result. According to the embodiment of the invention, effective detection and protection of data tampering in the kernel of the operating system are realized, and the overall security and system integrity of the terminal equipment are improved.

A native cloud-based VM in a cloud computing environment of choice is live-mounted without requiring nesting techniques. All operating system data needed to live-mount the VM is accessed over ISCSI. The disclosed technology: supports both Windows and Unix-like (e.g., Linux) operating systems; handles any number of partitions of the root file system without repeated mounting, exporting, and unmounting; and uses only internet protocols (e.g., HTTP, (SCSI) to live-mount the VM. The live-mounted VM gains access to a variety of secondary copies, e.g., made with file-level techniques or with block-level techniques, made within or outside the public cloud computing environment, made from other VMs having the same or a different hypervisor than the public cloud computing environment, and / or made from non-virtualized sources. Access to snapshots as a data source for the live-mounted VM is also disclosed. Thus, a streamlined and source-agnostic technology is disclosed for live-mounting VMs in a public cloud.

Secure and efficient access to host memory for guests is disclosed. For example, a system includes (i) a processor, (ii) a host memory, (iii) a hypervisor including a filesystem daemon, (iv) a guest including a storage controller, and (v) a first filesystem queue. The storage controller is configured to receive a file request, translate the file request, and add the translated file request to a filesystem queue. The filesystem daemon is configured to retrieve the translated file request from the filesystem queue and provide access to a file in the host memory identified in the file request to the guest.

A secure boot method, system and device for an in-vehicle infotainment system, and a medium and a vehicle, which improve the security of a vehicle startup process. The method comprises: when a microcontroller unit detects an in-vehicle infotainment system power-on signal, using a first preset encryption algorithm to verify an application program; and if the verification of the application program is successful, outputting an enable signal to initiate the boot of a system on chip (S100); the system on chip using a second preset encryption algorithm to verify a digital signature of the system on chip; and if the verification of the digital signature is successful, loading a bootloader (S200); once the bootloader starts successfully, launching a hypervisor and a kernel to boot the system on chip (S300); and once the system on chip is successfully booted, loading a file system to boot an in-vehicle infotainment system (S400). The present invention can improve the security of the vehicle startup process and can be widely applied in the technical field of automotive control.