213 results about "Virtual hardware" patented technology

A virtualization system supports secure, controlled execution of application programs within virtual machines. The virtual machine encapsulates a virtual hardware platform and guest operating system executable with respect to the virtual hardware platform to provide a program execution space within the virtual machine. An application program, requiring license control data to enable execution of the application program, is provided within the program execution space for execution within the virtual machine. A data store providing storage of encrypted policy control information and the license control data is provided external to the virtual machine. The data store is accessed through a virtualization system including a policy controller that is selectively responsive to a request received from the virtual machine to retrieve the license control data dependent on an evaluation of the encrypted policy control information.

Some embodiments provide a method for a server hosting environment having several nodes. Each node is for using one or more hypervisors in order to host several configurations of several computer systems. The method receives a first configuration of a computer system. The first configuration includes an operating system that directly accesses hardware of the computer system. The method generates a second configuration that is based on the first configuration. The second configuration includes the first configuration modified to be operable on a particular hypervisor of a particular node in the several nodes. The method installs the second configuration on the particular node in order to allow the particular node to operate on the second configuration in conjunction with the particular hypervisor. The second configuration accesses a set of virtual hardware provided by the particular hypervisor.

The virtual supercomputer is an apparatus, system and method for generating information processing solutions to complex and / or high-demand / high-performance computing problems, without the need for costly, dedicated hardware supercomputers, and in a manner far more efficient than simple grid or multiprocessor network approaches. The virtual supercomputer consists of a reconfigurable virtual hardware processor, an associated operating system, and a set of operations and procedures that allow the architecture of the system to be easily tailored and adapted to specific problems or classes of problems in a way that such tailored solutions will perform on a variety of hardware architectures, while retaining the benefits of a tailored solution that is designed to exploit the specific and often changing information processing features and demands of the problem at hand.

A method and apparatus for providing cross-platform hardware support for a computing platform are described herein. In one embodiment, an example of a computing system includes, but is not limited to, at least one physical hardware device, a host operating system (HOS), a virtual platform running on the HOS including a virtual operating system (VOS) and at least one virtual hardware device associated with a device type of the physical hardware device, a virtual device driver included in the VOS to control the at least one virtual hardware device, and a mechanism to synchronize the at least one virtual hardware device with the at least one physical hardware device through a direct use of at least one device driver library on the HOS. Other methods and apparatuses are also described.

Systems and methods are provided, whereby partitions may become enlightened and discover the presence of a hypervisor. Several techniques of hypervisor discovery are discussed, such as detecting the presence of virtual processor registers (e.g. model specific registers or special-purpose registers) or the presence of virtual hardware devices. Upon discovery, information (code and / or data) may be injected in a partition by the hypervisor, whereby such injection allows the partition to call the hypervisor. Moreover, the hypervisor may present a versioning mechanism that allows the partition to match up the version of the hypervisor to its virtual devices. Next, once code and / or data is injected, calling conventions are established that allow the partition and the hypervisor to communicate, so that the hypervisor may perform some operations on behalf of the partition. Four exemplary calling conventions are considered: restartable instructions, a looping mechanism, shared memory transport, and synchronous or asynchronous processed packets. Last, cancellation mechanisms are considered, whereby partition requests may be cancelled.

Software executables having virtual hardware, operating systems, and networks are described herein. In one embodiment, an example of a computing system includes, but is not limited to, a host operating system (HOS) including a HOS kernel, a virtual operating system (VOS) coupled to the HOS including a first virtual platform and a second virtual platform, an executable including a first application to be run on the first virtual platform and a second application to be run on the second virtual platform, and a dispatcher in response to the executable to dispatch the first application to the first virtual platform and the second application to the second virtual platform. Other methods and apparatuses are also described.

A computing device hosts a virtual machine executing a guest that issues guest hardware requests by way of any of a plurality of paths. Such paths include a path to non-existent virtual hardware, where an emulator intercepts and processes such guest hardware request with a corresponding actual hardware command; a path to an instantiated operating system, where the instantiated operating system processes each such guest hardware request with a corresponding actual hardware request; and a path to device hardware, where the device hardware directly processes each such guest hardware request.

A virtual-machine-based system provides a control-transfer mechanism to invoke a user-mode application handler from existing virtual hardware directly, without going through an operating system kernel running in the virtual machine. A virtual machine monitor calls directly to the guest user-mode handler and the handler transfers control back to the virtual machine monitor, without involving the guest operating system.

A parallel hypervisor system for virtualizing application-specific supercomputers is disclosed. The hypervisor system comprises (a) at least one software-virtual hardware pair consisting of a software application, and an application-specific virtual supercomputer for accelerating the said software application, wherein (i) The virtual supercomputer contains one or more virtual tiles; and (ii) The software application and the virtual tiles communicate among themselves with messages; (b) One or more reconfigurable physical tiles, wherein each virtual tile of each supercomputer can be implemented on at least one physical tile, by configuring the physical tile to perform the virtual tile's function; and (c) A scheduler implemented substantially in hardware, for parallel pre-emptive scheduling of the virtual tiles on the physical tiles.

A virtual-machine-based system provides a control-transfer mechanism to invoke a user-mode application handler from existing virtual hardware directly, without going through an operating system kernel running in the virtual machine. A virtual machine monitor calls directly to the guest user-mode handler and the handler transfers control back to the virtual machine monitor, without involving the guest operating system.

Provided is a technique for adequately allocating hardware resources of physical hardware to virtual hardware that operates on the physical hardware, and achieving a server integration effect in accordance with the performance of the physical hardware. According to the present invention, before resources are added to the virtual hardware, the residual amount of the resources in the entire physical hardware and resources that will run short in the virtual hardware are predicted, so that a server configuration is changed in accordance with the prediction result, and resources that are actually running short in the virtual hardware are supplemented.

The invention discloses a system and a method for quickly arranging and updating virtual environment in a cloud computing platform. The method includes that a configuration file is used to describe the virtual environment and analyzed to be a model, model difference is calculated to acquire operation sets, the operation sets are sequenced and then executed, a programming interface and a hardware source pool provided by the cloud computing platform are used to operate virtual hardware in the process of execution, a programming interface provided by an automated software configuration management tool to operate software, needed virtual environment is acquired after execution of all operations is completed, and the above process can be repeated by modifying the configuration file and resubmitting the same to update the virtual environment which is arranged already. By the system and method, work when a user arranges the virtual environment is greatly simplified from multiple aspects, capability in updating the virtual environment is provided, arranging and updating processes are accelerated, and multiplexing capability of configuration is improved. The system and the method have wide application and popularization prospect.

A generator generates configuration information of a virtual hardware unit based on configuration information in a PCIBOX. The generator generates recognition information for recognizing the virtual PCIBOX as a PCIBOX that is connected with a slot from the configuration information of the virtual PCIBOX. When PCIBOX is connected with the slot, the generator overwrites the configuration information in PCIBOX with the configuration information of the virtual PCIBOX.

In one embodiment, a computer accessible medium comprises a plurality of instructions which, when executed, parse at least a section of an input file to identify: (i) one or more driver information files, if at least one driver information file is listed in the section, and (ii) one or more first device drivers, if at least one device driver is listed in the section. If at least one driver information file is listed in the section, the plurality of instructions parse each of the one or more driver information files to identify: (i) one or more second device drivers, if at least one device driver is included in the driver information file, and (ii) one or more miniport drivers, if at least one miniport driver is included in the driver information file. The plurality of instructions select a selected device driver from the first device drivers, the second device drivers, and the miniport drivers. The selected device driver is to be listed in an output file that is used in a text phase of an operating system installation on a computer system that includes the hardware device. In another embodiment, a computer accessible medium comprises a plurality of instructions which, when executed and if a computer system comprises at least one virtual hardware device, identify the virtual hardware device and a corresponding physical hardware device. The plurality of instructions also capture a device driver associated with the physical hardware device for use as the device driver in an install of an operating system on a second computer system having a same type of physical hardware device. Corresponding computer systems and methods are also described.

Provided is a multi-processor system. The multi-processor system comprises an application system, a virtual platform, a virtual hardware system and a hardware forwarding system, wherein one or more applications run on the application system, one or more virtual machines run on the virtual platform, each virtual machine supports operation of a different operating system, and supports operation of one or more applications of the application system, the virtual hardware system comprises a plurality of virtual CPUs, a main core and dedicated memories special for the virtual CPUs, the memories correspond to the virtual CPUs respectively, each virtual CPU is used for supporting operation of each virtual machine, each virtual CPU corresponds to the only virtual ID, a virtual hardware management system runs on the main core, and is used for being in charge of management of all the virtual CPUs, the content of management of all the virtual CPUs includes operation of having control over the number of physical CPUs or physical inner cores in each virtual CPU as needed, the hardware forwarding system is used for receiving messages, searching for forwarding tables, and carrying out processing and forwarding on the messages with corresponding entries according to indication of the entries.

The invention discloses a method and a system for automatically analyzing malicious codes based on a virtual hardware environment, and belongs to the technical field of network security. By establishing an operating environment required by the malicious codes on the basis of the virtual hardware environment and operating and controlling virtual CPU instructions and the access operation of multiplekinds of virtual hardware, multiple kinds of operation information of the malicious codes is collected, the running process of the malicious codes is controlled, all collected data is analyzed, and virtual system state information and malicious code running information are dynamically displayed. Because the data acquisition is implemented by virtual hardware, the malicious codes cannot sense thatwhether the malicious codes run in the virtual environment and also cannot distinguish that whether the malicious codes are tracked, and further the completely transparent analysis on the malicious codes is realized.

A virtualizer system based on processor virtualization technology consists of processor with virtualization technique, bottom layer hardware, virtualizer monitor and a numbers of virtual operation system. It is featured as switching in one end of virtualizer monitor to various virtual operation systems through virtual hardware platform interface and another end to said bottom layer hardware device except processor and connecting various operation systems directly to processor.

The invention provides a sandbox detection alarming method and a sandbox detection alarming system based on main engine characteristic. The method is characterized by comprising following steps: inserting a virtual machine monitor between a user operating system and a computer hardware system, the virtual machine monitor offers a virtual hardware platform completely simulating the computer hardware system for the virtual machine, and the user operating system runs on the virtual hardware platform; tracking and detecting the main engine characteristic of the virtual system when unknown program to be detected runs on the virtual machine; recognizing the alarm level according to the tracking detection result of the main engine characteristic of the virtual system, generating alarm information being corresponding to the alarm level, and recording the unknown program to be detected in a log information mode. The sandbox detection alarming method and the sandbox detection alarming system based on main engine characteristic performs the unknown program to be detected in the virtual machine monitoring environment for finding rogue program and monitoring the entire attack life cycle of the rogue program.

The invention provides a virtual hardware characteristic-based system and method for efficiently isolating kernel modules. According to the system and method, a secure and efficient strong isolation mechanism aiming at incredible kernel modules is designed, so that the present requirements for the security and functionality can be satisfied. Compared with the existing solutions, the system and method has better performance, stronger isolation and higher backward compatibility. The designed mechanism is easy to deploy in the present mainstream cloud computing platforms, so that considerable social benefit and economic benefit can be provided. In the mechanism, when the incredible kernel modules need to call functions of kernel cores or the kernel cores need to call functions in the incredible kernel modules, a secure and efficient virtual hardware characteristic-based control flow transformation mechanism is established, so that more attack surfaces are not exposed in the switching.

When a guest OS loads within the context of a container provided by the host OS, the guest OS uses PCI or other protocol to specify a virtual hardware device. The guest OS enumerates the virtual hardware device to establish the size for the BARs and establish its view of physical addresses for the memory locations. A server running in the context of the container receives read / write requests from the guest OS, maps the read / write requests to host OS physical address space, and posts responses to the virtual hardware device. Since the guest OS executes memory related operations using its own memory space, exits to the container code are not required to implement storage related actions by the Guest OS. This allows performance of an application executing in the context of the guest OS to approximate performance of an application executing in the context of the host OS.

The invention aims at the problem that a microprocessor without interlocked piped stages (MIPS) platform is not assisted and supported by hardware, discloses a system virtual machine for the MIPS platform by using a lightweight virtualization technology, and provides high-efficiency virtualization infrastructure support for upper-layer application. Modules of the virtual machine mainly comprise physical hardware, a host operating system (OS), a virtual machine inner core, virtual hardware, an equipment model, a client OS and a host quick emulator (QEMU) process. Execution modes of the virtual machine mainly comprise a management mode, an inner core mode and a user mode. According to an application request, by adoption of the virtual machine, the technical problem that an MIPS processor is not assisted and supported by the hardware is solved; and by adoption of a lightweight inner core virtual machine technology, virtualization application requirements in the embedded field can be met, and the virtualization application requirements in the field of servers can be also met. Therefore, the virtual machine has the characteristics of light weight, wide application prospect, remarkable economic benefit and the like.

The embodiment of the invention provides a hardware abstraction layer multiplexing method and device, an operating system and device. The method comprises the following steps of obtaining a sample; responsive to hardware operation instructions, calling a first application program interface (API) in a first operating system side virtual hardware abstraction layer (HAL) by a first process of the first operating system, sending a calling request of the first API to a second operating system through cross-process communication, wherein the configuration of the first API in the virtual HAL corresponds to the configuration of the second API in the second operating system side HAL, and the configuration of the first API in the virtual HAL corresponds to the configuration of the second API in thesecond operating system side HAL. The virtual HAL is set at a first operating system side, so that the calling of the API in the virtual HAL by the first operating system side can be transmitted to the second operating system side through cross-process communication, the multiplexing of the HAL of the second operating system side by the first operating system is realized, the realization is convenient, and the method can be suitable for any different operating systems.

The invention provides a computer and a method for managing a hardware device, wherein the computer comprises a hardware platform, a first operation module which is provided with a first operation system, a virtual machine management module which is provided with a virtual machine manager and a second operation module which is provided with a second operation system which is arranged on the virtual machine manager; the first operation module comprises a back-end driving control module for generating a first trigger signal when a request for unloading the hardware device is detected; the second operation module comprises a front-end driving control module for acquiring the first trigger signal, acquiring the usage status of the virtual hardware device of the hardware device by the second operation system according to the first trigger signal and generating a usage status result; and when the usage status result indicates that the second operation system is using the virtual hardware device, the back-end driving control module is notified not to unload the hardware device. The computer and the method for managing the hardware device can guarantee that the device is safely removed according to the usage status of the device by the second operation system.

Particular implementations are particularly useful in providing a system in which the hardware is more easily upgradable and new hardware functionality may be added without adding any new physical hardware. Through placement of an FPGA closely associated with the CPU of a personal computer, the FPGA may be reconfigured to act as new hardware. A system for installing new virtual hardware involves loading firmware into memory associated with the FPGA and reconfiguring the FPGA through a microcontroller. Particular implementations include universal ports associated with the FPGA into which adapter plugs can be placed to quickly adapt to any device that may be added through the virtual hardware use of the FPGA. Other implementations include high density connectors into which a plurality of ports of varying configurations may be plugged for connection of external electronic equipment through the FPGA.

The invention discloses an embedded hypervisor-oriented multi-window display virtual operation method. Virtual display equipment and virtual display service in virtual display driving management are created in a domain in which GuestOS on Hypervisor is located; a display interface is arranged in a hardware abstraction layer of the Hypervisor, the display interface is an encapsulation of a physical display equipment window operation, and operation on a window register of a physical display equipment controller is completed after the display interface is called and operated. By virtue of virtual hardware display, multiple GuestOS can use hardware display in a time-sharing way, the windows are uniformly managed in a Hypervisor layer by virtue of the hardware abstraction layer, coupling degree of systems is reduced, and system display is more stable.

The invention discloses a virtual machine reliability testing method and device, belonging to the field of computers. The method includes: receiving a fault injection instruction, the fault injection instruction at least carries a fault identifier, and the fault identifier is used to identify a virtual hardware resource of a virtual machine running in the host computer; according to the fault identifier, obtaining a fault command word, the fault command word is a virtual hardware Fault parameters for resource fault injection; when the system function of the host is monitored, judge whether the virtual machine calling the system function is a test virtual machine that occupies virtual hardware resources according to the fault command word; if so, intercept the system function , setting the return value of the system function to a specified error value, and returning the specified error value to the test virtual machine, so that the test virtual machine performs reliability testing. The invention does not require testers to locate and modify the source code of the host machine on-line, but only needs testers to input fault identifications, which reduces the skill requirements for testers and is relatively simple to operate.

A computing device hosts a virtual machine executing a guest that issues guest hardware requests by way of any of a plurality of paths. Such paths include a path to non-existent virtual hardware, where an emulator intercepts and processes such guest hardware request with a corresponding actual hardware command; a path to an instantiated operating system, where the instantiated operating system processes each such guest hardware request with a corresponding actual hardware request; and a path to device hardware, where the device hardware directly processes each such guest hardware request.

The invention discloses a virtual machine application service failure recovery system and method. The system comprises a virtual machine managing module, a virtual hardware watchdog module, a watchdog driving module and a watchdog multiplex module. The virtual machine application service failure recovery system registers application service into the watchdog multiplex module which carries out monitoring on the registered application service. When the watchdog multiplex module monitors the fact that the application service is in fault and in-fault time is longer than the overtime set by the virtual hardware watchdog module, the virtual machine managing module triggers overtime operation set by the virtual hardware watchdog module. The service usability set by a virtual server is further improved so that when an operation system is in fault or an application service process is in fault, the virtual server can recover from the fault quickly and provide service for external sides continuously.