Virtual Machine Thread Switching for Privacy Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing virtualization technologies face challenges in efficiently switching resources between virtual machines, leading to increased complexity in management and control, as well as potential privacy breaches due to shared computing resources and side-channel attacks.

Innovation Solution

A resource configuration method and apparatus that allows for the direct switching of threads between virtual machines without creating new threads, maintaining binding relationships between computing cores and threads, and using running identifiers to ensure exclusive operation and privacy isolation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If new vCPU threads are created to split CPU computing resources from an existing virtual machine, then CPU resources can be allocated to new virtual machines, but resource overhead increases and management complexity increases

Engineering Contradiction:
ImproveCPU resource allocation flexibilityVSAvoidmanagement complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a copy of the vCPU thread structure to enable resource sharing. Specifically, it creates a thread group that copies the parent vCPU thread's binding settings to multiple child vCPU threads, allowing multiple virtual machines to share the same physical computing core resources while maintaining independent management control. This copying mechanism reduces overhead by reusing existing thread configurations rather than creating entirely new thread structures.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent segments the vCPU thread into a hierarchical structure with a parent vCPU thread and multiple child vCPU threads. This segmentation allows the system to divide CPU resource management into manageable units where the parent thread handles binding settings and child threads represent different virtual machine instances sharing those resources. This segmentation reduces management complexity by organizing resources in a tree structure rather than managing flat, independent thread objects.

Inventive Principle:
Principle #1Segmentation

2Productivity

If binding settings between offline vCPU threads and computing cores are reused when creating new vCPU threads, then resource allocation is efficient, but adjustment complexity increases when original virtual machine settings need to be modified

Engineering Contradiction:
Improveresource allocation efficiencyVSAvoidcontrol complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent performs preliminary action by pre-establishing a thread group structure with inherited binding settings before virtual machines need to use the resources. The parent vCPU thread's binding configuration is copied to child threads in advance, enabling efficient resource allocation. When adjustments are needed, the system has already prepared the hierarchical structure that facilitates centralized control through the parent thread.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent inverts the traditional management approach by making the parent vCPU thread the central control point rather than managing each child thread independently. Instead of adjusting settings on each child thread when modifications are needed, the system adjusts the parent thread's binding settings, and these changes are automatically propagated to all child threads. This inversion simplifies control by reversing the direction of configuration management from bottom-up to top-down.

Inventive Principle:
Principle #13The other way round (Inversion)

3Productivity

If split vCPUs are forced to go online and run on the same computing cores with another virtual machine's vCPU threads, then resource utilization increases, but side-channel attacks can compromise privacy

Engineering Contradiction:
Improveresource utilizationVSAvoidprivacy security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces an intermediary mechanism through the thread group hierarchy and running identifier system. The parent vCPU thread acts as an intermediary that controls and coordinates resource sharing between multiple child threads representing different virtual machines. Running identifiers serve as mediators that track which virtual machine currently owns the computational resources, ensuring that even when multiple vCPUs share physical cores, there is always a clear owner that prevents side-channel attacks by maintaining logical isolation through the intermediary control structure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240086228A1Resource Configuration Method and Apparatus, Electronic Device, and Computer-Readable Storage Medium
Publication Date: 2024.03.14 CLOUD INTELLIGENCE ASSETS HOLDING (SINGAPORE) PTE LTD
  • US20240086228A1 patent drawing
  • US20240086228A1 patent drawing
  • US20240086228A1 patent drawing

AI summary

A method and an apparatus are provided. The method includes: obtaining first computing resources of a first virtual machine; receiving a computing resource switching instruction, wherein the computing resource switching instruction instructs to switch at least one computing core of the first virtual machine to a second virtual machine for use; determining a computing core to be switched and a corresponding first thread in the first computing resources according to the computing resource switching instruction and the first computing resources; and switching the first thread to run the second virtual machine. In the present disclosure, when computing resources are switched between first virtual machine and the second virtual machine, which solves the problem of synchronizing the settings of two virtual machines in the existing technologies due to adjustment of binding core settings of the original virtual machine, which greatly reduces the complexity of management and control, and realizes privacy isolation.