Cryptographic AP Adapter Domain Dependency Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems face challenges in efficiently determining and verifying control domain and usage domain settings, particularly in scenarios where the dependency between these domains is not required, leading to potential security risks and operational inefficiencies.
Innovation Solution
A method is provided where a program queries for an indicator of dependency between usage and control domains in a virtual machine configuration with a cryptographic AP adapter, sets an internal bitmap based on the result, generates and enqueues AP commands, and receives status upon completion to manage domain settings efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both control domain and usage domain are required for AP commands, then security and administrative control are improved, but device complexity and operational overhead increase
Solution Approach 1:
The patent segments the domain requirements by command type: control domain is required only for administrative commands (NQAP, DQAP, PQAP), while usage domain is required only for functional commands. This segmentation allows the system to maintain security for administrative operations while reducing complexity for functional operations, resolving the contradiction between security and device complexity.
2Ease of operation
If feature bit is architected for new enhancement, then software control is simplified, but hardware complexity increases
Solution Approach 1:
The patent extracts the domain dependency information from the hardware feature bit and places it in software-manageable configuration structures. The system queries AP queue configuration information to determine domain requirements, separating the hardware enhancement detection from the software control logic. This allows new enhancements to be added to hardware without requiring corresponding feature bits, while maintaining software control through configuration queries.
3Reliability
If domain dependency is enforced, then security is improved, but productivity and operational efficiency decrease
Solution Approach 1:
The patent implements dynamic domain requirement determination based on command type rather than static enforcement. The system determines at runtime whether control domain or usage domain is required based on the specific AP command being executed. This dynamic approach maintains security for administrative commands while allowing functional commands to operate with reduced domain requirements, improving operational efficiency without compromising security.
Data Source
AI summary
Method, computer program product, and computer system are provided. Program queries for an indicator of dependency between a usage domain and a control domain in a virtual machine (VM) configuration having a cryptographic AP adapter. The VM and the cryptographic AP adapter are both installed on a hardware server. Program sets an internal bitmap based on a result and generates one or more sets of AP commands, based on the setting of the internal bitmap. The sets of AP commands are directed to an adjunct processor (AP) message queue on a cryptographic AP in the VM configuration. Program enqueues the one or more sets of program instructions to the VM having an identifier corresponding to an offset in the program internal bitmap. Program receives status at completion of the one or more sets of AP commands from the VM having the cryptographic AP in the VM configuration.