BR112014007400A2 - método para controle de dispositivo virtual em um sistema de computador, sistema de computador e meio legível por computador - Google Patents
método para controle de dispositivo virtual em um sistema de computador, sistema de computador e meio legível por computadorInfo
- Publication number
- BR112014007400A2 BR112014007400A2 BR112014007400A BR112014007400A BR112014007400A2 BR 112014007400 A2 BR112014007400 A2 BR 112014007400A2 BR 112014007400 A BR112014007400 A BR 112014007400A BR 112014007400 A BR112014007400 A BR 112014007400A BR 112014007400 A2 BR112014007400 A2 BR 112014007400A2
- Authority
- BR
- Brazil
- Prior art keywords
- computer system
- virtual device
- virtual
- access permissions
- configuration policy
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/82—Protecting input, output or interconnection devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/468—Specific access rights for resources, e.g. using capability register
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
- G06F9/4411—Configuring for operating with peripheral devices; Loading of device drivers
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45579—I/O management, e.g. providing access to device drivers or storage
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45587—Isolation or security of virtual machine instances
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
Abstract
resumo método para controle de dispositivo virtual em um sistema de computador, sistema de computador e meio legível por computador é descrito um controle de dispositivo virtual em um sistema de computador. os exemplos incluem: obtenção de uma política de configuração de dispositivo a partir do firmware no sistema de computador, a política de configuração de dispositivo definindo permissões de acesso globais a pelo menos um dispositivo incorporado no sistema de computador sendo aplicada no momento da inicialização. obtenção de uma política de configuração de dispositivo virtual estabelecida para pelo menos um dentre um usuário selecionado ou uma máquina virtual (mv) selecionada, a política de configuração de dispositivo virtual definindo permissões de acesso adicionais ao pelo menos um dispositivo incorporado. estabelecimento de uma definição de hardware virtual para uma instância da mv selecionada sendo executada no sistema de computador com base nas permissões de acesso globais e nas permissões de acesso adicionais. 1/1
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/US2011/054110 WO2013048422A1 (en) | 2011-09-30 | 2011-09-30 | Virtualized device control in computer systems |
Publications (1)
Publication Number | Publication Date |
---|---|
BR112014007400A2 true BR112014007400A2 (pt) | 2017-04-04 |
Family
ID=47996163
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
BR112014007400A BR112014007400A2 (pt) | 2011-09-30 | 2011-09-30 | método para controle de dispositivo virtual em um sistema de computador, sistema de computador e meio legível por computador |
Country Status (6)
Country | Link |
---|---|
US (1) | US9390294B2 (pt) |
EP (1) | EP2761441A4 (pt) |
JP (1) | JP5779281B2 (pt) |
CN (1) | CN103827819B (pt) |
BR (1) | BR112014007400A2 (pt) |
WO (1) | WO2013048422A1 (pt) |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8893261B2 (en) | 2011-11-22 | 2014-11-18 | Vmware, Inc. | Method and system for VPN isolation using network namespaces |
US11182185B2 (en) * | 2014-06-27 | 2021-11-23 | Vmware, Inc. | Network-based signaling to control virtual machine placement |
US9678783B2 (en) | 2015-10-14 | 2017-06-13 | International Business Machines Corporation | Temporal dynamic virtual machine policies |
JP6821509B2 (ja) * | 2017-05-25 | 2021-01-27 | ルネサスエレクトロニクス株式会社 | 情報処理装置並びにその制御方法及び制御プログラム |
Family Cites Families (54)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE69601149T2 (de) | 1995-07-03 | 1999-08-05 | Sun Microsystems Inc | Systen und Verfahren zum Implementieren einer hierarchischen Politik für die Administration eines Computersystems |
US6587876B1 (en) * | 1999-08-24 | 2003-07-01 | Hewlett-Packard Development Company | Grouping targets of management policies |
JP2001265612A (ja) | 2000-03-17 | 2001-09-28 | Omron Corp | 組込み機器用仮想マシンシステム |
JP2002183076A (ja) | 2000-12-11 | 2002-06-28 | Toshiba Corp | 情報処理装置及び情報処理装置の起動方法 |
US7103529B2 (en) * | 2001-09-27 | 2006-09-05 | Intel Corporation | Method for providing system integrity and legacy environment emulation |
US7216369B2 (en) * | 2002-06-28 | 2007-05-08 | Intel Corporation | Trusted platform apparatus, system, and method |
JP4277952B2 (ja) * | 2002-11-15 | 2009-06-10 | パナソニック株式会社 | 競合調停装置、競合調停方法および競合調停プログラム |
US7788489B2 (en) * | 2003-05-06 | 2010-08-31 | Oracle International Corporation | System and method for permission administration using meta-permissions |
CA2525578A1 (en) * | 2003-05-15 | 2004-12-02 | Applianz Technologies, Inc. | Systems and methods of creating and accessing software simulated computers |
US20050204357A1 (en) * | 2004-03-15 | 2005-09-15 | Ajay Garg | Mechanism to protect extensible firmware interface runtime services utilizing virtualization technology |
US7421533B2 (en) * | 2004-04-19 | 2008-09-02 | Intel Corporation | Method to manage memory in a platform with virtual machines |
US20050246453A1 (en) | 2004-04-30 | 2005-11-03 | Microsoft Corporation | Providing direct access to hardware from a virtual environment |
US20060069828A1 (en) * | 2004-06-30 | 2006-03-30 | Goldsmith Michael A | Sharing a physical device among multiple clients |
US20060020940A1 (en) * | 2004-07-08 | 2006-01-26 | Culter Bradley G | Soft-partitioning systems and methods |
US9606821B2 (en) * | 2004-12-17 | 2017-03-28 | Intel Corporation | Virtual environment manager for creating and managing virtual machine environments |
US8627315B2 (en) * | 2004-12-31 | 2014-01-07 | Intel Corporation | Apparatus and method for cooperative guest firmware |
US7392172B2 (en) * | 2005-04-28 | 2008-06-24 | Hewlett-Packard Development Company, L.P. | Providing virtual device access via firmware |
US20070162475A1 (en) * | 2005-12-30 | 2007-07-12 | Intel Corporation | Method and apparatus for hardware-based dynamic escape detection in managed run-time environments |
US8015563B2 (en) * | 2006-04-14 | 2011-09-06 | Microsoft Corporation | Managing virtual machines with system-wide policies |
US8170859B1 (en) * | 2006-04-28 | 2012-05-01 | Intel Corporation | Methods, apparatuses and computer program products for simulating arbitrary unmodified code |
US7853958B2 (en) | 2006-06-28 | 2010-12-14 | Intel Corporation | Virtual machine monitor management from a management service processor in the host processing platform |
JP4233585B2 (ja) | 2006-07-25 | 2009-03-04 | 株式会社エヌ・ティ・ティ・ドコモ | ペリフェラル切替装置及びペリフェラル切替制御装置 |
US9015703B2 (en) * | 2006-10-17 | 2015-04-21 | Manageiq, Inc. | Enforcement of compliance policies in managed virtual systems |
US8949825B1 (en) * | 2006-10-17 | 2015-02-03 | Manageiq, Inc. | Enforcement of compliance policies in managed virtual systems |
US8949826B2 (en) * | 2006-10-17 | 2015-02-03 | Managelq, Inc. | Control and management of virtual systems |
US8127292B1 (en) * | 2007-06-22 | 2012-02-28 | Parallels Holdings, Ltd. | Virtualization system with hypervisor embedded in bios or using extensible firmware interface |
US8516481B2 (en) | 2008-04-04 | 2013-08-20 | Hewlett-Packard Development Company, L.P. | Virtual machine manager system and methods |
FR2929733B1 (fr) * | 2008-04-08 | 2010-08-27 | Eads Defence And Security Syst | Systeme et procede de securisation d'un ordinateur comportant un micronoyau |
US8327415B2 (en) * | 2008-05-30 | 2012-12-04 | Intel Corporation | Enabling byte-code based image isolation |
JP4922255B2 (ja) * | 2008-06-30 | 2012-04-25 | 株式会社日立製作所 | 情報処理システムおよびそのシステムにおける省電力制御方法 |
US20090327741A1 (en) * | 2008-06-30 | 2009-12-31 | Zimmer Vincent J | System and method to secure boot uefi firmware and uefi-aware operating systems on a mobile internet device (mid) |
US8726364B2 (en) * | 2008-06-30 | 2014-05-13 | Intel Corporation | Authentication and access protection of computer boot modules in run-time environments |
US9733959B2 (en) * | 2008-09-15 | 2017-08-15 | Vmware, Inc. | Policy-based hypervisor configuration management |
US8260603B2 (en) * | 2008-09-30 | 2012-09-04 | Hewlett-Packard Development Company, L.P. | Scaling a prediction model of resource usage of an application in a virtual environment |
US8117346B2 (en) | 2008-10-03 | 2012-02-14 | Microsoft Corporation | Configuration space virtualization |
US8694761B2 (en) * | 2008-12-31 | 2014-04-08 | Vincent Zimmer | System and method to secure boot both UEFI and legacy option ROM's with common policy engine |
JP5245869B2 (ja) | 2009-01-29 | 2013-07-24 | 富士通株式会社 | 情報処理装置、情報処理方法及びコンピュータプログラム |
WO2010100769A1 (ja) | 2009-03-06 | 2010-09-10 | 株式会社日立製作所 | セキュリティ管理装置及び方法 |
US8321656B2 (en) * | 2009-06-13 | 2012-11-27 | Phoenix Technologies Ltd. | Timer use in extensible firmware interface compliant systems |
US8387060B2 (en) * | 2009-10-01 | 2013-02-26 | Dell Products L.P. | Virtual machine resource allocation group policy based on workload profile, application utilization and resource utilization |
US9158567B2 (en) | 2009-10-20 | 2015-10-13 | Dell Products, Lp | System and method for reconfigurable network services using modified network configuration with modified bandwith capacity in dynamic virtualization environments |
US9069596B2 (en) * | 2009-11-17 | 2015-06-30 | International Business Machines Corporation | Hypervisor file system |
CN101706742B (zh) * | 2009-11-20 | 2012-11-21 | 北京航空航天大学 | 一种基于多核动态划分的非对称虚拟机i/o调度方法 |
US8321703B2 (en) * | 2009-12-12 | 2012-11-27 | Microsoft Corporation | Power aware memory allocation |
US8627309B2 (en) * | 2010-02-25 | 2014-01-07 | Microsoft Corporation | Automated deployment and servicing of distributed applications |
US8775781B2 (en) * | 2010-03-25 | 2014-07-08 | Microsoft Corporation | Intelligent boot device selection and recovery |
JP5593856B2 (ja) * | 2010-06-02 | 2014-09-24 | 富士通株式会社 | 情報処理装置およびドライバ実行制御方法 |
US9135044B2 (en) * | 2010-10-26 | 2015-09-15 | Avago Technologies General Ip (Singapore) Pte. Ltd. | Virtual function boot in multi-root I/O virtualization environments to enable multiple servers to share virtual functions of a storage adapter through a MR-IOV switch |
US8819708B2 (en) * | 2011-01-10 | 2014-08-26 | Dell Products, Lp | System and method to abstract hardware routing via a correlatable identifier |
US9256745B2 (en) * | 2011-03-01 | 2016-02-09 | Microsoft Technology Licensing, Llc | Protecting operating system configuration values using a policy identifying operating system configuration settings |
US8984508B2 (en) * | 2011-06-02 | 2015-03-17 | Vmware, Inc. | System and method for restarting a workload based on global load balancing |
US8719560B2 (en) * | 2011-12-13 | 2014-05-06 | International Business Machines Corporation | Virtual machine monitor bridge to bare-metal booting |
US9218490B2 (en) * | 2011-12-30 | 2015-12-22 | Intel Corporation | Using a trusted platform module for boot policy and secure firmware |
US9047112B2 (en) * | 2013-03-12 | 2015-06-02 | American Megatrends, Inc. | Installation of virtual service processor to computer system having existing operating system |
-
2011
- 2011-09-30 US US14/241,132 patent/US9390294B2/en active Active
- 2011-09-30 JP JP2014531785A patent/JP5779281B2/ja not_active Expired - Fee Related
- 2011-09-30 WO PCT/US2011/054110 patent/WO2013048422A1/en active Application Filing
- 2011-09-30 CN CN201180073777.5A patent/CN103827819B/zh not_active Expired - Fee Related
- 2011-09-30 BR BR112014007400A patent/BR112014007400A2/pt not_active Application Discontinuation
- 2011-09-30 EP EP11873507.5A patent/EP2761441A4/en not_active Ceased
Also Published As
Publication number | Publication date |
---|---|
CN103827819A (zh) | 2014-05-28 |
JP5779281B2 (ja) | 2015-09-16 |
US20140201743A1 (en) | 2014-07-17 |
WO2013048422A1 (en) | 2013-04-04 |
EP2761441A4 (en) | 2015-04-01 |
EP2761441A1 (en) | 2014-08-06 |
JP2014530427A (ja) | 2014-11-17 |
CN103827819B (zh) | 2017-03-01 |
US9390294B2 (en) | 2016-07-12 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
BR112016014653A8 (pt) | Método implementado por computador para prever preferências de compartilhamento de privacidade, meio legível por computador não transitório e pelo menos um dispositivo de computação | |
BR112013031078A2 (pt) | emissor-receptor móvel, emissor-receptor de estação base, servidor de dados e aparelhos relacionados, métodos e programas de computadores | |
BRPI0801772A2 (pt) | sistema e mÉtodo para usar um hipervisor para controlar acesso a um computador de aluguel | |
BR112018073496A2 (pt) | sistemas e métodos para localizar um dispositivo sem fio | |
BR112015027847A2 (pt) | Método para acessar um serviço, um dispositivo compreendendo uma memória, dispositivo para acessar um serviço , e sistema para acessar um serviço | |
GB2505804A8 (en) | Multi-domain information sharing | |
BR112015022493A2 (pt) | sistema de determinação de contexto demográfico | |
BR112014030607A2 (pt) | métodos e aparelhos para controlar e/ou monitorar um atuador pneumático | |
BR112016004493A8 (pt) | método, dispositivo de computação e meio de armazenamento legível por computador para imposição de integridade de código seletiva facilitada por gerenciador de máquina virtual | |
BR112013016711A2 (pt) | configuração de dispositivo dinâmico com o uso de predicados | |
BR112014003390A2 (pt) | sistema de computação, método para lidar com pedidos de gerenciamento de sistema em um sistema de computação e meio lido por computador | |
BR112012004052A2 (pt) | conjuntos de entropia para máquinas virtuais | |
BR112016012904A2 (pt) | Indicação de disponibilidade de usuário para comunicação | |
BR112014010082A8 (pt) | método, sistema de computador e meio não transitório lido por computador armazenando um programa | |
BR112015028449A2 (pt) | atribuir ação do usuário com base em identidade biométrica | |
BR112015008807A2 (pt) | processador submarino para operações de perfuração submarina | |
BR112015001614A2 (pt) | método e sistema de controle de terminal de usuário | |
BR112015032258A8 (pt) | Método implementado por computador para segurança de operações em sistemas de autenticação e autorização utilizando informações biométricas, sistema de comunicação para segurança de operações em sistemas de autenticação e autorização utilizando informações biométricas, e, produto de programa de computador | |
BR112012023140A8 (pt) | método e sistema de substituição de cache. | |
BR112015029277A8 (pt) | método e dispositivo de computação para sincronizar dados de associação de dispositivo entre dispositivos de computação | |
BR112015027633A2 (pt) | Autenticação de usuário | |
BR112015029108A2 (pt) | sistemas de armazenamento e memória "aliased | |
BR112015015803A2 (pt) | interface de feed de capa social | |
BR112016016288A8 (pt) | método implementado por computador, meio legível por computador não transitório, e dispositivo de computação relativos a metadados de definição de privacidade para desenvolvedores de aplicativo | |
BR112015013917A2 (pt) | método, unidade de computação, e sistema |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
B06F | Objections, documents and/or translations needed after an examination request according [chapter 6.6 patent gazette] | ||
B06U | Preliminary requirement: requests with searches performed by other patent offices: procedure suspended [chapter 6.21 patent gazette] | ||
B07A | Application suspended after technical examination (opinion) [chapter 7.1 patent gazette] | ||
B09B | Patent application refused [chapter 9.2 patent gazette] | ||
B09B | Patent application refused [chapter 9.2 patent gazette] |
Free format text: MANTIDO O INDEFERIMENTO UMA VEZ QUE NAO FOI APRESENTADO RECURSO DENTRO DO PRAZO LEGAL |