专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20230089541A1 ADJUNCT PROCESSOR EXTENDED MESSAGE LIMIT FACILITY 有权
公开(公告)号：US20230089541A1
公开(公告)日：2023-03-23
申请号：US17483344
申请日：2021-09-23
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Louis P. Gomes , Damian Osisek , Harald Freudenberger , Richard John Moore , Volker Urban , Michael D. Hocker , Eric David Rossman , Richard Victor Kisley
IPC分类号： G06F9/54 , G06F11/07
摘要： A message limit value to be used in enqueuing one or more messages on a queue of a device of the computing environment is obtained. The message limit value indicates whether an extended maximum message length is supported by the device. The extended maximum message length is different from a default maximum message length supported by the device. Based on determining that the extended maximum message length is supported and that the obtained message limit value has a defined relationship with a select value, at least one message of an extended length is enqueued on the queue of the device.

2. 发明申请

US20210234681A1 BINDING SECURE OBJECTS OF A SECURITY MODULE TO A SECURE GUEST 有权
公开(公告)号：US20210234681A1
公开(公告)日：2021-07-29
申请号：US16775851
申请日：2020-01-29
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Reinhard Theodor Buendgen , Richard Victor Kisley , Volker Urban
IPC分类号： H04L9/08 , G06F9/455 , G06F21/60 , G06F21/57
摘要： At least one secure object of a security module is bound to a secure guest. A trusted component determines whether metadata of the secure guest includes a confidential binding attribute for the security module. Based on determining that the metadata includes the confidential binding attribute, the trusted component configures the security module for the secure guest in a select mode. The select mode prevents certain operations from being intercepted by a hypervisor associated with the secure guest. The trusted component intercepts a security module communication and performs a cryptographic operation on one or more secure objects of the security module communication using the confidential binding attribute to provide a cryptographic result. An outcome of the security module communication, which includes the cryptographic result, is provided to a receiver.

3. 发明授权

US11475167B2 Reserving one or more security modules for a secure guest 有权
公开(公告)号：US11475167B2
公开(公告)日：2022-10-18
申请号：US16775887
申请日：2020-01-29
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Reinhard Theodor Buendgen , Volker Urban , Richard Victor Kisley , Jonathan D. Bradbury , Torsten Hendel , Harald Freudenberger , Benedikt Klotz , Klaus Werner , Markus Selve
IPC分类号： G06F9/455 , G06F21/72 , G06F21/60
摘要： A security module, such as a cryptographic adapter, is reserved for a secure guest of a computing environment. The reserving includes binding one or more queues of the security module to the secure guest. The one or more queues are then managed based on one or more actions relating to the reservation.

4. 发明授权

US09886327B2 Resource mapping in multi-threaded central processor units 有权
公开(公告)号：US09886327B2
公开(公告)日：2018-02-06
申请号：US14953469
申请日：2015-11-30
申请人： International Business Machines Corporation
发明人： Khary J. Alexander , Markus Helms , Christian Jacobi , Bernd Nerz , Volker Urban
IPC分类号： G06F9/44 , G06F9/45 , G06F9/52 , G06F9/50
CPC分类号： G06F9/52 , G06F8/10 , G06F8/314 , G06F8/45 , G06F9/5077
摘要： A processor determines that processing of a thread is suspended due to limited availability of a processing resource. The processor supports execution of the plurality of threads in parallel. The processor obtains a lock on a second processing resource that is substitutable as a resource during processing of the first thread. The second processing resource is included as part of a component that is external to the processor. The component supports a number of threads that is less than the plurality of threads. The processing of the thread is suspended until the lock is available. The processor processes the first thread using the second processing resource. The processor includes a shared register to support mapping a portion of the plurality of threads to the component. The portion of the plurality of threads is equal to, at most, the number of threads supported by component.

5. 发明申请

US20160117193A1 RESOURCE MAPPING IN MULTI-THREADED CENTRAL PROCESSOR UNITS 有权
公开(公告)号：US20160117193A1
公开(公告)日：2016-04-28
申请号：US14520505
申请日：2014-10-22
申请人： International Business Machines Corporation
发明人： Khary J. Alexander , Markus Helms , Christian Jacobi , Bernd Nerz , Volker Urban
IPC分类号： G06F9/50
CPC分类号： G06F9/52 , G06F8/10 , G06F8/314 , G06F8/45 , G06F9/5077
摘要： A processor determines that processing of a thread is suspended due to limited availability of a processing resource. The processor supports execution of the plurality of threads in parallel. The processor obtains a lock on a second processing resource that is substitutable as a resource during processing of the first thread. The second processing resource is included as part of a component that is external to the processor. The component supports a number of threads that is less than the plurality of threads. The processing of the thread is suspended until the lock is available. The processor processes the first thread using the second processing resource. The processor includes a shared register to support mapping a portion of the plurality of threads to the component. The portion of the plurality of threads is equal to, at most, the number of threads supported by component.

6. 发明公开

US20240176913A1 SELECTING AN HSM FOR ASSOCIATION TO A SECURE GUEST 审中-公开
公开(公告)号：US20240176913A1
公开(公告)日：2024-05-30
申请号：US18159376
申请日：2023-01-25
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Reinhard Theodor Buendgen , Viktor Mihajlovski , Jonathan D. Bradbury , Harald Freudenberger , Steffen Eiden , Volker Urban , Eric David Rossman
IPC分类号： G06F21/72
CPC分类号： G06F21/72
摘要： A method for a policy-based association of a hardware security module to a secure guest is disclosed. The method comprises maintaining a binding between a secure guest and an HSM. Thereby, the binding enables the trusted guest to send only non-sensitive request to the HSM. The method comprises further maintaining, for a secure guest, a pair of a secret and a secret name, submitting a query to the bound HSM for obtaining HSM configuration data, and upon determining that the obtained HSM configuration data match a rule available to the secure guest, wherein the rule associates the HSM to a secret name, requesting to associate the secret from the pair of secret and the secret name to the bound HSM, thereby triggering that the trusted firmware allows the secure guest to submit a sensitive crypto-request to the bound and associated HSM.

7. 发明授权

US11533174B2 Binding secure objects of a security module to a secure guest 有权
公开(公告)号：US11533174B2
公开(公告)日：2022-12-20
申请号：US16775851
申请日：2020-01-29
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Reinhard Theodor Buendgen , Richard Victor Kisley , Volker Urban
IPC分类号： H04L9/08 , G06F9/455 , G06F21/57 , G06F21/60
摘要： At least one secure object of a security module is bound to a secure guest. A trusted component determines whether metadata of the secure guest includes a confidential binding attribute for the security module. Based on determining that the metadata includes the confidential binding attribute, the trusted component configures the security module for the secure guest in a select mode. The select mode prevents certain operations from being intercepted by a hypervisor associated with the secure guest. The trusted component intercepts a security module communication and performs a cryptographic operation on one or more secure objects of the security module communication using the confidential binding attribute to provide a cryptographic result. An outcome of the security module communication, which includes the cryptographic result, is provided to a receiver.

8. 发明申请

US20160117200A1 RESOURCE MAPPING IN MULTI-THREADED CENTRAL PROCESSOR UNITS 有权
标题翻译：多层中央处理器单元资源映射
公开(公告)号：US20160117200A1
公开(公告)日：2016-04-28
申请号：US14953469
申请日：2015-11-30
申请人： International Business Machines Corporation
发明人： Khary J. Alexander , Markus Helms , Christian Jacobi , Bernd Nerz , Volker Urban
IPC分类号： G06F9/52
CPC分类号： G06F9/52 , G06F8/10 , G06F8/314 , G06F8/45 , G06F9/5077
摘要： A processor determines that processing of a thread is suspended due to limited availability of a processing resource. The processor supports execution of the plurality of threads in parallel. The processor obtains a lock on a second processing resource that is substitutable as a resource during processing of the first thread. The second processing resource is included as part of a component that is external to the processor. The component supports a number of threads that is less than the plurality of threads. The processing of the thread is suspended until the lock is available. The processor processes the first thread using the second processing resource. The processor includes a shared register to support mapping a portion of the plurality of threads to the component. The portion of the plurality of threads is equal to, at most, the number of threads supported by component.
摘要翻译：由于处理资源的可用性有限，处理器确定线程的处理被暂停。处理器支持并行执行多个线程。处理器在第一线程的处理期间获得在可替代为资源的第二处理资源上的锁定。第二处理资源被包括在处理器外部的组件的一部分。该组件支持少于多个线程的多个线程。螺纹的处理被暂停，直到锁可用。处理器使用第二处理资源处理第一线程。处理器包括共享寄存器以支持将多个线程的一部分映射到组件。多个线程的部分最多等于部件所支持的线数。

9. 发明授权

US11875200B2 Adjunct processor extended message limit facility 有权
公开(公告)号：US11875200B2
公开(公告)日：2024-01-16
申请号：US17483344
申请日：2021-09-23
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Louis P. Gomes , Damian Osisek , Harald Freudenberger , Richard John Moore , Volker Urban , Michael D. Hocker , Eric David Rossman , Richard Victor Kisley
IPC分类号： G06F9/54 , G06F11/07
CPC分类号： G06F9/546 , G06F11/0787
摘要： A message limit value to be used in enqueuing one or more messages on a queue of a device of the computing environment is obtained. The message limit value indicates whether an extended maximum message length is supported by the device. The extended maximum message length is different from a default maximum message length supported by the device. Based on determining that the extended maximum message length is supported and that the obtained message limit value has a defined relationship with a select value, at least one message of an extended length is enqueued on the queue of the device.

10. 发明申请

US20210232709A1 RESERVING ONE OR MORE SECURITY MODULES FOR A SECURE GUEST 有权
公开(公告)号：US20210232709A1
公开(公告)日：2021-07-29
申请号：US16775887
申请日：2020-01-29
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Reinhard Theodor Buendgen , Volker Urban , Richard Victor Kisley , Jonathan D. Bradbury , Torsten Hendel , Harald Freudenberger , Benedikt Klotz , Klaus Werner , Markus Selve
IPC分类号： G06F21/72 , G06F9/455 , G06F21/60
摘要： A security module, such as a cryptographic adapter, is reserved for a secure guest of a computing environment. The reserving includes binding one or more queues of the security module to the secure guest. The one or more queues are then managed based on one or more actions relating to the reservation.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式