Method, system, and device for securely handling virtual function driver communications with a physical function driver
AssigneeIntel Corporation
InventorsNrupal R. Jani, Shannon L. Nelson, Gregory D. Cummings
Life of this patent
Estimating the term…
Abstract
In an input/output virtualization-enabled computing environment, a device, method, and system for securely handling virtual function driver communications with a physical function driver of a computing device includes maintaining communication profiles for virtual function drivers and applying the communication profiles to communications from the virtual function drivers to the physical function driver, to determine whether the communications present a security and/or performance condition. The device, method and system may disable a virtual function driver if a security and/or performance condition is detected.
Claims30
An input/output virtualization-enabled computing device comprising:
- a request analyzer to determine whether communications from a plurality of virtual function drivers present a security and/or performance condition and determine whether to disable a virtual function driver based on at least one communication from the virtual function driver that is determined to present the security and/or performance condition.
A method for handling communications from a plurality of virtual function drivers to a physical function driver of a input/output virtualization-enabled computing device, the method comprising, at the computing device:
- maintaining a plurality of communication profiles, each communication profile comprising data relating to communications of a virtual function driver with the physical function driver;
- determining whether a communication from a virtual function driver to the physical function driver presents a security and/or performance condition based on at least a portion of a communication profile corresponding to the virtual function driver;
- counting communications from the virtual function driver to the physical function driver;
- and
- determining whether to disable the virtual function driver based on the counted number of communications from the virtual function driver to the physical function driver.
At least one computer accessible storage medium comprising a plurality of instructions that in response to being executed result in a computing device:
- maintaining a plurality of communication profiles, each communication profile comprising data relating to communications of a virtual function driver with the physical function driver;
- determining whether a communication from a virtual function driver to the physical function driver presents a security and/or performance condition based on at least a portion of a communication profile corresponding to the virtual function driver;
- counting communications from the virtual function driver to the physical function driver;
- and
- determining whether to disable the virtual function driver based on the counted number of communications from the virtual function driver to the physical function driver.
Dependencies are inferred from the claim text.