Intel Corporation

China Petroleum Chemical Corporation

Inventec Appliances Corporation

Shanghai Research Institute of Petrochemical Technology, Sinopec

Wei Shen

Ren Wang

Kapil Sood

Tsung-Yuan Charles Tai

Carlos V Rozas

Vincent R Scarlata

Sameh Gobriel

Mona Vij

Somnath Chakrabarti

Christian Maciocco

Jiangqi He

Mesut A Ergin

Michael Mesnier

Wen Ju Zhang

Tsung-Yuan Charlie Tai

Shen Zhang

Zhi He

Saikrishna Edupuganti

Yiming Wu

Hongfei Yan

Byron Marohn

Weishuang Zhao

Chunlei Guo

Baixiang Shao

Methods and apparatus for extending packet processing to trusted programmable and fixed-function accelerators. Secure enclaves are created in system memory of a compute platform, wherein software code external from a secure enclave cannot access code or data within a secure enclave, and software code in a secure enclave can access code and data both within the secure enclave and external to the secure enclave. Software code for implementing packet processing operations is installed in the secure enclaves. The compute platform further includes one or more hardware-based accelerators that are used by the software to offload packet processing operations. The accelerators are configured to read packet data from input queues, process the data, and output processed data to output queues, wherein the input and output queues are located in encrypted portions of memory that may be in a secure enclave or external to the secure enclaves. Tokens are used by accelerators to validate access to memory in secure enclaves, and used by both accelerators and secure enclaves to access encrypted memory external to secure enclaves.

Extending packet processing to trusted programmable and fixed-function accelerators

Methods and apparatus for implemented trusted packet processing for multi-domain separatization and security. Secure enclaves are created in system memory of a compute platform configured to support a virtualized execution environment including a plurality of virtual machines (VMs) or containers, each secure enclave occupying a respective protected portion of the system memory, wherein software code external from a secure enclave cannot access code or data within a secure enclave, and software code in a secure enclave can access code and data both within the secure enclave and external to the secure enclave. Software code for implementing packet processing operations is installed in the secure enclaves. The software in the secure enclaves is then executed to perform the packet processing operations. Various configurations of secure enclaves and software code may be implemented, including configurations supporting service chains both within a VM or contain or across multiple VMs or containers, as well a parallel packet processing operations.

Trusted packet processing for multi-domain separatization and security

Technologies for managing lookup tables are described. The lookup tables may be used for a two-level lookup scheme for packet processing. When the tables need to be updated with a new key for packet processing, information about the new key may be added to a first-level lookup table and a second-level lookup table. The first-level lookup table may be used to identify a handling node for an obtained packet, and the handling node may perform a second-level table lookup to obtain information for further packet processing. The first lookup table may be replicated on all the nodes in a cluster, and the second-level lookup table may be unique to each node in the cluster. Other embodiments are described herein and claimed.

Technologies for management of lookup tables

A method and device for temperature measurement of a processor is disclosed. A temperature-sensing circuit of the processor may have an associated resonance frequency, wherein the resonance frequency depends on a temperature of the temperature-sensing circuit. A temperature of the temperature-sensing circuit may be determined by determining the resonance frequency of the temperature-sensing circuit.

Technologies for temperature measurement of a processor

Technologies for efficient network flow classification include a computing device that receives a network packet that includes a header. The computing device generates a vector Bloom filter (VBF) key as a function of the header and searches multiple VBFs for a VBF that matches the VBF key. Each VBF is associated with a flow sub-table that includes one or more flow rules. Each flow sub-table is associated with a mask length. If a matching VBF is found, the computing device searches the corresponding flow sub-table for a flow rule that matches a masked header of the network packet. If no matching VBF is found or if no matching flow rule is found, the computing device searches all of the flow sub-tables for a flow rule that matches the header. The computing device applies a flow action of a matching flow rule. Other embodiments are described and claimed.

Technologies for efficient network flow classification with vector bloom filters

An apparatus for producing ethylene includes: a reactor; a first separation column, connected to the reactor; a second separation column, the upper part of the second separation column being connected to the bottom of the first separation column, and the top of the second separation column being connected to the lower part of the first separation column; a first condenser, an inlet of the first condenser being connected to the top of the first separation column, and an outlet of the first condenser being connected to the upper part of the first separation column; and a third separation column, used for receiving a second part of a first condensate from the condenser and separating the received part. A method for producing ethylene using the aforementioned apparatus is also described.

Apparatus for producing ethylene and a producing method thereof

Computer-readable storage media, computing devices and methods associated with file cache management are discussed herein. In embodiments, a computing device may include a file cache and a file cache manager coupled with the file cache. The file cache manager may be configured to implement a context-aware eviction policy to identify a candidate file for deletion from the file cache, from a plurality of individual files contained within the file cache, based at least in part on file-level context information associated with the individual files. In embodiments, the file-level context information may include an indication of access recency and access frequency associated with the individual files. In such embodiments, identifying the candidate file for deletion from the file cache may be based, at least in part, on both the access recency and the access frequency of the individual files. Other embodiments may be described and/or claimed.

Computing method and apparatus associated with context-aware management of a file cache

The invention is to provide a method for inputting different characters by multi-directionally pressing one single key of a portable electronic device more than one time, the key having a plurality of protuberances on an underside and a circuit board having a plurality of pads being equal in number to the protuberances and disposed correspondingly thereto, the method comprises determining the conduction periods of time by a control circuit, while one key being multi-directionally pressed a plurality of times to cause the protuberances to contact the corresponding pads at different conduction periods of time; reading a corresponding character sequentially from a built-in character database based on a longer one of the conduction periods of time; and displaying the read character. By utilizing this method, it is possible of effecting a fast input on the keypad.

Method for inputting different characters by multi-directionally pressing a single key more than one time

Growing community of inventors

Hillsboro, OR, United States of America

Wei Shen