CN105912936B - A method of improving SDN switch performance and safety - Google Patents
A method of improving SDN switch performance and safety Download PDFInfo
- Publication number
- CN105912936B CN105912936B CN201610219740.3A CN201610219740A CN105912936B CN 105912936 B CN105912936 B CN 105912936B CN 201610219740 A CN201610219740 A CN 201610219740A CN 105912936 B CN105912936 B CN 105912936B
- Authority
- CN
- China
- Prior art keywords
- memory
- softwares
- bios
- sdn
- operating system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 33
- 230000015654 memory Effects 0.000 claims abstract description 132
- 238000002955 isolation Methods 0.000 claims abstract description 5
- 238000003860 storage Methods 0.000 claims description 12
- 230000006870 function Effects 0.000 claims description 7
- 230000008569 process Effects 0.000 claims description 6
- 238000013507 mapping Methods 0.000 claims description 5
- 238000007689 inspection Methods 0.000 claims description 3
- 230000014759 maintenance of location Effects 0.000 claims 1
- 230000004224 protection Effects 0.000 abstract description 12
- 238000005516 engineering process Methods 0.000 abstract description 3
- 238000007726 management method Methods 0.000 description 10
- 238000009826 distribution Methods 0.000 description 8
- 230000007246 mechanism Effects 0.000 description 5
- 238000013475 authorization Methods 0.000 description 4
- 238000013461 design Methods 0.000 description 4
- 230000006399 behavior Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 230000000875 corresponding effect Effects 0.000 description 1
- 238000000151 deposition Methods 0.000 description 1
- 230000010365 information processing Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000011084 recovery Methods 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 238000013468 resource allocation Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
- G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
Abstract
The invention discloses a kind of raising SDN switch performance and the methods of safety, the method is when the BIOS or firmware of SDN switch main control processor start, it is individually for SDN controller softwares and other security application softwares reserves dedicated memory or memory space, realize the security isolation of SDN switch operating system common software and SDN controller softwares and other security application softwares, SDN controller softwares and other security application softwares can directly access the memory or memory space without interchanger operating system.The method applied in the present invention has higher novelty; it can be widely applied in the products such as SDN switch; the protection of master switch the relevant technologies intellectual property is played an important role, while the product also there is higher practical value can greatly promote product competitiveness.
Description
Technical field
The present invention relates to SDN switch technical fields, and in particular to a kind of side for improving SDN switch performance and safety
Method.
Background technology
The distribution of the hardware resource of infrastructure is generally used in computer network and cloud computing system at present unified
Resource distribution mode, the i.e. hardware resource of whole system are transparent for should be used to say that above operating system and operating system
, the resource distribution mode adaptable with it is not used for the application such as SDN.Such as the SDN controllers in SDN switch
It is the safety and performance for needing to ensure its operation when running software, and some security monitorings of application such as to network flow etc.
Deng having corresponding particular/special requirement to safety and performance.It needs to obtain its running environment and resource from bottom to reach this purpose
Mechanism is taken to carry out special consideration.In general resource allocation mode since the resource of all applications is divided by operating system
Match, the resource of all application programs is all sharable for the angle of operating system, and application program oneself can not yet
Obtain the exclusive resource except operating system.
A kind of virtualization information processing system is disclosed for patent US2009248949A1, and specifically discloses virtual machine
Management program can distribute one or more of one or more processors and storage subsystem region to each virtual machine.
When operation, each client operating system can utilize one of physical hardware to each self virtualizing machine by above-mentioned management program distribution
Or multiple physical resources.In addition, virtual machine and application can be interacted directly with physical hardware.（For example, similar to operation system
The mode that system is interacted with physical hardware）.It can be seen that it was described from the description of its patent and its attached drawing
Hypervisor programs and the application program that is implemented on Hypervisor are although can be direct（Do not pass through OS）Or indirectly
（Pass through OS or Hypervisor）It accesses to system resource, but it especially stores the hardware resource distribution of whole system
Resource（Including memory）It does not carry out more not answering different to being isolated in application layer from firmware layer to operating system layer
With carrying out safety certification.Simultaneously its be previously mentioned " management program can dynamically distribute physical hardware resources to virtual machine, to
Application performance can be improved " under operating system environment nor most effective and safe method.
Using the method by the unified resource provided of operating system in above-mentioned similar application, operating system can not be avoided
Management to resource, the path due to reaching final resource increase, and can cause the reduction of efficiency and aspect of performance.Simultaneously because phase
The resource answered is without individually dividing and managing, and also not relatively independent registration and authentication mechanism, be easy to cause secure context
Loophole.The data cut-off protection aspect of related application is not also illustrated.
Invention content
The technical problem to be solved by the present invention is to：For the above insufficient and demand, the present invention provides a kind of raising SDN friendships
The method of performance of changing planes and safety.
Therefore the resources mentioned of patent US2009248949A1 access and distribution mechanism and mentioned in the present invention are suitable for
The memory by security isolation or memory allocation access mechanism for improving SDN switch performance and safety have basic area
Not.
The technical solution adopted in the present invention is：
A method of improving SDN switch performance and safety, BIOS of the method in SDN switch main control processor
Or when firmware startup, be individually for SDN controller softwares and other security application softwares reserve dedicated memory or memory space, lead to
The independent division for carrying out memory or memory space in firmware level is crossed, realizes that SDN switch operating system common software is controlled with SDN
The security isolation of device software and other security application softwares processed, SDN controller softwares and other security application softwares can be without
It crosses interchanger operating system and the memory or memory space is directly accessed.
Caching when the dedicated memory or memory space divided is run for SDN controller softwares, to accelerate software
Performance, or for preserving relevant daily record, network flow table and data, or for the track record and net to network state
Operating system of the dedicated memory or memory space that the inspection etc. of network safety, BIOS or firmware are divided for SDN switch
It is sightless.That is operating system on startup via the obtained memories of BIOS or memory space and dedicated memory or
What memory space was entirely isolated.Operating system and the standard software run on operating system are cannot to access these memories
Or storage resource.
To ensure that the safety of system, BIOS or firmware layer face have through ID or other modes registration or certification SDN controls
The function of device software and other security application softwares processed.It is only soft by the SDN controller softwares of certification and other security applications
Part could be accessed or be used to the dedicated memory or memory space that BIOS or firmware are divided.
The authentication mode of SDN controller softwares and other security application softwares is using including but not limited to specific authentication core
Piece, BIOS reside at the modes such as specific authentication/accreditation process in memory when starting.
BIOS or firmware layer face SDN controller softwares and the use of other security application softwares by registration or certification
The including but not limited to modes such as memory lock, the mapping of Memory Allocation table for its access or use.
The including but not limited to modes such as memory lock, the mapping of Memory Allocation table can be taken for the management BIOS of special memory
It accesses or uses for upper layer application.It can also be combined with relevant hardware design, for example design relevant hardware logic control
Open or close relevant memory.
SDN controller softwares and other security application softwares are not only able to access as the other application in operating system
The resource of operating system, while also can not pass through interchanger operating system after obtaining associated rights by certification as needed
And the memory or memory space are directly accessed.It can greatly shorten in terms of access path, be accessed to reduce in this way
Time improves access performance.
The physical memory of the dedicated memory uses the memories such as including but not limited to common memory, NVDIMM memories.
Simultaneously after special memory is divided in above NVDIMM, since NVDIMM has power-down protection, so as to
Power down protection is carried out to related data, ensures the reliability of data.
The division of special memory is preferably used the memory bank address space of independent completion in the method, in this way can be with
As needed using the memory bar different from Installed System Memory, such as NVDIMM, to provide the unique functions such as power down protection.
The management program and BIOS of the dedicated memory integrate or the independent isolated operation when BIOS is run.
It may reside in memory as the management program and BIOS of the preferably described dedicated memory, to be in operation
The softwares such as SDN controllers can be communicated with management program when system operation.
Beneficial effects of the present invention are：
SDN controller softwares of the present invention and other security application softwares can be interior to this without interchanger operating system
It deposits or memory space is directly accessed, reduce access path, improve the performance of the applications such as SDN, the safety of safeguards system.Together
When after special memory is divided in above NVDIMM, can also to data carry out power down protection, ensure using data reliability.
The method applied in the present invention has higher novelty, can be widely applied in the products such as SDN switch, to certainly
The protection of host exchange the relevant technologies intellectual property plays an important role, while the product also has higher practical value can
Greatly promote product competitiveness.
Description of the drawings
Fig. 1 is the system schematic that the method for the present invention is related to；
Fig. 2 is SDN controllers of the present invention registration and browsing process figure.
Specific implementation mode
Below by Figure of description, in conjunction with specific implementation mode, the present invention is further described：
Embodiment 1：
A method of improving SDN switch performance and safety, BIOS of the method in SDN switch main control processor
Or when firmware startup, be individually for SDN controller softwares and other security application softwares reserve dedicated memory or memory space, lead to
The independent division for carrying out memory or memory space in firmware level is crossed, realizes that SDN switch operating system common software is controlled with SDN
The security isolation of device software and other security application softwares processed, SDN controller softwares and other security application softwares can be without
It crosses interchanger operating system and the memory or memory space is directly accessed.
Embodiment 2：
On the basis of embodiment 1, dedicated memory or memory space that the present embodiment is divided are used for SDN controller softs
Caching when part is run is to accelerate the performance of software, or for preserving relevant daily record, network flow table and data, or for pair
The dedicated memory or memory space that the track record of network state and the inspection of network security etc., BIOS or firmware are divided
Operating system for SDN switch is sightless.That is the memory that operating system is obtained via BIOS on startup
Or memory space and dedicated memory or memory space are entirely isolated.Operating system and run on mark on operating system
Quasi- software cannot access these memories or storage resource.
Embodiment 3：
On the basis of embodiment 1 or 2, the present embodiment is the safety of guarantee system, and BIOS or firmware layer face have logical
Cross ID or the function of other modes registration or certification SDN controller softwares and other security application softwares.Only pass through certification
SDN controller softwares and other security application softwares could to dedicated memory that BIOS or firmware are divided or memory space into
Row is accessed or is used.
Embodiment 4：
On the basis of embodiment 3, the authentication mode of the present embodiment SDN controller softwares and other security application softwares is adopted
The modes such as specific authentication/accreditation process in memory are resided at when being started with including but not limited to specific authentication chip, BIOS.
Embodiment 5：
On the basis of embodiment 4, the present embodiment BIOS or firmware layer face the SDN controllers by registration or certification
Software and other security application softwares for its access or are made using modes such as including but not limited to memory lock, the mappings of Memory Allocation table
With.
The including but not limited to modes such as memory lock, the mapping of Memory Allocation table can be taken for the management BIOS of special memory
It accesses or uses for upper layer application.It can also be combined with relevant hardware design, for example design relevant hardware logic control
Open or close relevant memory.
Embodiment 6：
On the basis of embodiment 5, the present embodiment SDN controller softwares and other security application softwares are not only able to as behaviour
Make the resource of the same access operation system of other application in system, while also can obtain correlation by certification as needed
The memory or memory space are not accessed directly by interchanger operating system after permission.It in this way can be in access path
Aspect greatly shortens, and to reduce access time, improves access performance.
Embodiment 7：
On the basis of embodiment 6, the physical memory use of dedicated memory described in the present embodiment is including but not limited to general
The memories such as logical memory, NVDIMM memories.
Simultaneously after special memory is divided in above NVDIMM, since NVDIMM has power-down protection, so as to
Power down protection is carried out to related data, ensures the reliability of data.
Embodiment 8：
On the basis of embodiment 7, the present embodiment the method is preferably used the division of special memory independent complete
Whole memory bank address space can use the memory bar different from Installed System Memory, such as NVDIMM, to carry as needed in this way
For unique functions such as power down protections.
Embodiment 9：
On the basis of embodiment 8, the management program of dedicated memory and BIOS described in the present embodiment are integrated, or independently go out
Carry out the isolated operation when BIOS is run.
Embodiment 10：
On the basis of embodiment 9, the management program of dedicated memory described in the present embodiment can be resident as BIOS
In memory, so that the softwares such as SDN controllers can be communicated with management program in operating system.
Embodiment 11：
As shown in Figure 1, the SDN switch that the method is related to includes mainly SDN switch OS（Operating system）It is handed over SDN
It changes planes BIOS two parts, wherein：
SDN switch BIOS includes Installed System Memory of the distribution for operating system, for answering for SDN controller certifications
With certification/registration module, the special memory used for SDN controllers etc.；
SDN switch OS includes special-purpose software：Interchanger tradition application, SDN controllers etc..
SDN switch BIOS is divided into two main functional modules when specific implementation, and first carries out as tradition BIOS
System initialization and be operating system distribution system memory；
Second for the special memory of software distributions such as upper layer SDN controllers and is authenticated the softwares such as SDN controllers
Or registration；
It is different from the access rights of first function for the implementation setting of second function module, such as by using packet
Include but be not limited to the mode of password or password.
Its realization method of application authorization/registration module of BIOS can take the modes such as ID identifications, digital certificate.Tool
The information such as digital certificate can be written in BIOS in terms of body implementation, need to access in special in upper layer software (applications)s such as SDN controllers
Authentication is carried out to it first by digital certificate etc. when depositing, it is authorized to access special memory.With special storage management
Similar, application authorization/registration module can be integrated with BIOS, can also the independent isolated operation when BIOS is run, preferentially
It may reside in memory as ground application authorization/registration module and BIOS, it is soft with SDN controllers etc. in operating system
Part can be communicated with management program.
SDN controllers are registered and browsing process figure is as shown in Fig. 2, the softwares such as SDN controllers first pass through relevant interface（It can
So that physical interface can also make address addressing space）It transmits the information such as digital certificate and carries out body to using registration/certification module
Part certification obtains special memory access right, and the BIOS program or special storage management being resident in memory are special by transmitting
The modes such as associated internal memory control signal are opened with memory address addressing space or by logic control allows the softwares such as SDN controllers
Access special memory.
Particularly if special memory is divided into NVDIMM, special memory has power-down protection, relevant data
It can retain after unexpected power down.The softwares such as SDN controllers can be to the memory after obtaining associated rights after re-powering
It is checked, to judge whether the data of recovery in need.Mark can also be arranged in BIOS program or special storage management
Position, to show the improper handing-over of the control authority of special memory, unexpected exit is inquired for upper layer application.
The special memory that BIOS is distributed in the specific implementation and the memory for distributing to operating system are completely independent, and are grasped
The common unauthorized application made in system can not use.Underground interface, association can also be taken in addition to authentication mode
The modes such as view, hardware resource are further ensured that security of system.
Embodiment 12：
SDN switch apply including：
SDN switch OS（Operating system）Select (SuSE) Linux OS；
SDN switch hardware selects X86 platforms；
SDN switch BIOS selects commercial BIOS and is transformed to memory distribution portion；
Application authorization/registration module of certification is authenticated using digital certificate+public key mode；
SDN controllers select Opendaylight and carry out the transformation of registration interface；
It is applied comprising Openflow in the application of interchanger tradition.
The method realizes that process is as follows：
The first step, BIOS complete the division of special memory；
Second step, SDN switch OS（Operating system）Start；BIOS certifications and storage management terminate-and-stay-resident；
Third step, SDN controllers are initiated using special memory request to BIOS certifications and storage management；
4th step, SDN controllers obtain related to BIOS certifications and storage management foundation using special memory permission
Handing-over mechanism；
5th step is directed to NVDIMM memories, checks that correlated identities are sentenced when BIOS certifications and storage management are again started up
It is disconnected to whether there is unexpected power-down conditions, associated internal memory parameter and mark are then preserved in this way in case relative program reuses；It is such as no
Then by associated internal memory turn to can storage allocation, reused for application program.
Embodiment of above is merely to illustrate the present invention, and not limitation of the present invention, in relation to the common of technical field
Technical staff can also make a variety of changes and modification without departing from the spirit and scope of the present invention, therefore all
Equivalent technical solution also belongs to scope of the invention, and scope of patent protection of the invention should be defined by the claims.
Claims (5)
1. a kind of method improving SDN switch performance and safety, it is characterised in that：The method is at SDN switch master control
Manage the BIOS of device or when firmware starts, be individually for SDN controller softwares and other security application softwares reserve dedicated memory or
Memory space realizes the safety of SDN switch operating system common software and SDN controller softwares and other security application softwares
Isolation, SDN controller softwares and other security application softwares can be without interchanger operating system and to the memory or storages
Space is directly accessed；
Caching when the dedicated memory or memory space divided is run for SDN controller softwares, to accelerate the property of software
Can, or for preserving relevant daily record, network flow table and data, or for the track record and network peace to network state
The dedicated memory or memory space that full inspection, the BIOS or firmware are divided be for the operating system of SDN switch
It is sightless；
BIOS or firmware layer face have soft by ID or other modes registration or certification SDN controller softwares and other security applications
The function of part；
When the authentication mode of SDN controller softwares and other security application softwares is using including specific authentication chip or BIOS startups
Reside at specific authentication/accreditation process in memory；
BIOS or firmware layer face by registration or certification SDN controller softwares and other security application softwares use memory
Lock or the mapping of Memory Allocation table for its access or use；
SDN controller softwares and other security application softwares are not only able to the access operation as the other application in operating system
The resource of system, while as needed also can be right not by interchanger operating system after obtaining associated rights by certification
The memory or memory space are directly accessed.
2. a kind of method improving SDN switch performance and safety according to claim 1, it is characterised in that：It is described special
The physical memory of memory uses common memory or NVDIMM memories.
3. a kind of method improving SDN switch performance and safety according to claim 2, it is characterised in that：The side
Method uses the division of special memory in the memory bank address space of independent completion.
4. a kind of method improving SDN switch performance and safety according to claim 3, it is characterised in that：It is described special
The management program and BIOS of memory integrate or the independent isolated operation when BIOS is run.
5. a kind of method improving SDN switch performance and safety according to claim 4, it is characterised in that：It is described special
The management program of memory is resident in memory as BIOS.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610219740.3A CN105912936B (en) | 2016-04-11 | 2016-04-11 | A method of improving SDN switch performance and safety |
| PCT/CN2016/108478 WO2017177694A1 (en) | 2016-04-11 | 2016-12-05 | Method for improving performance and security of sdn switch |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610219740.3A CN105912936B (en) | 2016-04-11 | 2016-04-11 | A method of improving SDN switch performance and safety |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105912936A CN105912936A (en) | 2016-08-31 |
| CN105912936B true CN105912936B (en) | 2018-09-21 |
Family
ID=56744934
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610219740.3A Active CN105912936B (en) | 2016-04-11 | 2016-04-11 | A method of improving SDN switch performance and safety |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN105912936B (en) |
| WO (1) | WO2017177694A1 (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105912936B (en) * | 2016-04-11 | 2018-09-21 | 浪潮集团有限公司 | A method of improving SDN switch performance and safety |
| CN109257204B (en) * | 2018-08-06 | 2021-06-04 | 浙江工商大学 | Network energy-saving device and method based on deep learning in software defined network |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102184373A (en) * | 2011-05-30 | 2011-09-14 | 南京大学 | Method for designing safety core of operation system based on protection mode and virtualization mechanism |
| CN102193816A (en) * | 2010-03-12 | 2011-09-21 | 中国长城计算机深圳股份有限公司 | Equipment distribution method and system |
| CN103136485A (en) * | 2011-11-28 | 2013-06-05 | 联想(北京)有限公司 | Method of realizing computer safety and computer |
| CN103746911A (en) * | 2014-01-20 | 2014-04-23 | 中国联合网络通信集团有限公司 | SDN (software defined networking) structure and communication method thereof |
| CN104008342A (en) * | 2014-06-06 | 2014-08-27 | 山东超越数控电子有限公司 | Method for achieving safe and trusted authentication through BIOS and kernel |
| CN104967615A (en) * | 2015-06-03 | 2015-10-07 | 浪潮集团有限公司 | Security SDN controller and network security method based on same |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102708330B (en) * | 2012-05-10 | 2015-07-08 | 深信服网络科技（深圳）有限公司 | Method for preventing system from being invaded, invasion defense system and computer |
| US9755901B2 (en) * | 2014-01-21 | 2017-09-05 | Huawei Technologies Co., Ltd. | System and method for a software defined protocol network node |
| CN105912936B (en) * | 2016-04-11 | 2018-09-21 | 浪潮集团有限公司 | A method of improving SDN switch performance and safety |
-
2016
- 2016-04-11 CN CN201610219740.3A patent/CN105912936B/en active Active
- 2016-12-05 WO PCT/CN2016/108478 patent/WO2017177694A1/en active Application Filing
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102193816A (en) * | 2010-03-12 | 2011-09-21 | 中国长城计算机深圳股份有限公司 | Equipment distribution method and system |
| CN102184373A (en) * | 2011-05-30 | 2011-09-14 | 南京大学 | Method for designing safety core of operation system based on protection mode and virtualization mechanism |
| CN103136485A (en) * | 2011-11-28 | 2013-06-05 | 联想(北京)有限公司 | Method of realizing computer safety and computer |
| CN103746911A (en) * | 2014-01-20 | 2014-04-23 | 中国联合网络通信集团有限公司 | SDN (software defined networking) structure and communication method thereof |
| CN104008342A (en) * | 2014-06-06 | 2014-08-27 | 山东超越数控电子有限公司 | Method for achieving safe and trusted authentication through BIOS and kernel |
| CN104967615A (en) * | 2015-06-03 | 2015-10-07 | 浪潮集团有限公司 | Security SDN controller and network security method based on same |
Non-Patent Citations (1)
| Title |
|---|
| 一种安全SDN控制器架构设计;薛聪 等;《信息网络安全》;20141017;第2014年卷(第9期);第34-38页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2017177694A1 (en) | 2017-10-19 |
| CN105912936A (en) | 2016-08-31 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103430185B (en) | For the method for switching between virtualization system operation and non-virtualized system operation | |
| EP3629540B1 (en) | Apparatus and method for secure memory access using trust domains | |
| JP7428770B2 (en) | Computer programs, computer readable storage media and devices | |
| US9426147B2 (en) | Protected device management | |
| CN109901911B (en) | Information setting method, control method, device and related equipment | |
| CN103139159B (en) | Secure communication between virtual machine in cloud computing framework | |
| US20120072734A1 (en) | Platform firmware armoring technology | |
| US8201239B2 (en) | Extensible pre-boot authentication | |
| CN101350044B (en) | Method for constructing virtual environment trust | |
| CN105022954A (en) | Dynamic running method for security kernel service of tristate operating system in Feiteng CPU | |
| CN110348204B (en) | Code protection system, authentication method, authentication device, chip and electronic equipment | |
| US20170026181A1 (en) | Technologies for trusted i/o for multiple co-existing trusted execution environments under isa control | |
| US20080040565A1 (en) | Method and apparatus for supporting immutable memory | |
| CN107690629A (en) | Address conversion | |
| CN103905466B (en) | Data access control system and method for storage system | |
| CN107690621A (en) | Shielded abnormal disposal | |
| CN112083879B (en) | Physical partition isolation and hiding method for storage space of solid state disk | |
| CN105912936B (en) | A method of improving SDN switch performance and safety | |
| WO2014059575A1 (en) | Method and apparatus for processing input/output operation | |
| US10331591B2 (en) | Logical-to-physical block mapping inside the disk controller: accessing data objects without operating system intervention | |
| JP2022522731A (en) | Storage sharing between secure domains and non-secure entities | |
| CN114117412A (en) | Virtual encryption machine platform based on trusted technology and creation method thereof | |
| CN103051963B (en) | A kind of method of controlling security of digital-television terminal equipment | |
| US10678577B2 (en) | Method for implementing virtual secure element | |
| Wan et al. | Building trust into cloud computing using virtualization of TPM |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230419 Address after: 250000 building S02, No. 1036, Langchao Road, high tech Zone, Jinan City, Shandong Province Patentee after: Shandong Inspur Scientific Research Institute Co.,Ltd. Address before: No. 1036, Shandong high tech Zone wave road, Ji'nan, Shandong Patentee before: INSPUR GROUP Co.,Ltd. |