Vmware, Inc.

Stanko Novakovic

Pratap Subrahmanyam

Rajesh Venkatasubramanian

Marcos Kawazoe Aguilera

Kiran Tati

Michael Wei

Irina Calciu

Xavier Deguillard

Nadav Amit

Jayneel Gandhi

Gerd Zellweger

Lalith Suresh

The present disclosure provides an approach for granting access to a resource located on a first server, the granting being done by a second server to a third server. The method results in a decentralized granting of access to a resource, preventing a bottleneck in the first server that could develop if the first server were to grant each access to each of its resources. The access is provided in the form of an encrypted capability, and transmitted through a secure channel. The code on the second server for granting access is located within an encrypted memory region, such that unauthorized processes cannot access the code or the data within the encrypted memory region.

Decentralized sparse capability system with secure enclaves

Exemplary methods, apparatuses, and systems include a distributed memory agent within a first node intercepting an operating system request to open a file from an application running on the first node. The request includes a file identifier, which the distributed memory agent transmits to a remote memory manager. The distributed memory agent receives, from the remote memory manager, a memory location within a second node for the file identifier and information to establish a remote direct memory access channel between the first node and the second node. In response to the request to open the file, the distributed memory agent establishes the remote direct memory access channel between the first node and the second node. The remote direct memory access channel allows the first node to read directly from or write directly to the memory location within the second node while bypassing an operating system of the second node.

File system interface for remote direct memory access

Growing community of inventors

Mountain View, CA, United States of America

Stanko Novakovic