Security for microengine access
AssigneeATI Technologies ULC
InventorsYinan Jiang, Kamraan Nasim, Dezhi Ming, Ahmed M. Abdelkhalek, Dmytro Chenchykov, Andy Sung
Life of this patent
Estimating the term…
Abstract
A technique for managing access to a micro engine, the method comprising: determining that a virtual function “VF”) is to be given access to direct communication with a micro engine; in response to the determining, configuring the micro engine to accept direct communication from the VF; monitoring for unpermitted communication; and after a time period has expired, configuring the micro engine to no longer accept direct communication from the VF.
Claims20
A method for managing access to a micro engine, the method comprising:
- during a virtual machine initialization period, determining that a virtual function (“VF”) associated with the virtual machine is to be given access to direct communication with the micro engine;
- in response to the determining, configuring the micro engine to accept direct communication from the VF through an interrupt-based doorbell mechanism;
- and
- after a pre-programmed time period has expired, configuring the micro engine to no longer accept direct communication from the VF via the interrupt-based doorbell mechanism.
A device, comprising:
- a set of one or more processors operating as micro engines;
- and
- a permissions agent comprising one of a micro engine access agent or microcode executing in one or more micro engines of the set of micro engines,
- wherein the permissions agent is configured to
- during a virtual machine initialization period, determine that a virtual function (“VF”) associated with the virtual machine is to be given access to direct communication with a micro engine of the set of one or more micro engines;
- in response to the determining, configure the micro engine to accept direct communication from the VF through an interrupt-based doorbell mechanism;
- and
- after a pre-programmed time period has expired, configure the micro engine to no longer accept direct communication from the VF via the interrupt-based doorbell mechanism.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:
- during a virtual machine initialization period, determine that a virtual function (“VF”) associated with the virtual machine is to be given access to direct communication with a micro engine;
- in response to the determining, configure the micro engine to accept direct communication from the VF through an interrupt-based doorbell mechanism;
- monitor for unpermitted communication;
- and
- after a pre-programmed time period has expired, configure the micro engine to no longer accept direct communication from the VF via the interrupt-based doorbell mechanism.
Dependencies are inferred from the claim text.