Intel Corporation

Xuekun Hu

Tsung-Yuan Charles Tai

Andrew J Herdrich

John Joseph Browne

Jr-Shian Tsai

Chris MacNamara

Mesut A Ergin

Ping Yu

Weigang Li

Cunming Liang

Liang J Ma

Changzheng Wei

Xiaowen Zhang

Bo Cui

Hongjun Ni

Madhusudana Raghupatruni

Xiaobing Qian

Lin Luo

Shravan Nagraj

In some examples, for process-to-process communication, such as in function linking, a virtual channel can be provisioned to provide virtual machine to virtual machine communications. In response to a transmit request from a source virtual machine, the virtual channel can cause a data copy from a source buffer associated with the source virtual machine without decryption or encryption. The virtual channel provisions a key identifier for the copied data. The destination virtual machine can receive an indication data is available and can cause the data to be decrypted using a key accessed using the key identifier and source address of the copied data. In addition, the data can be encrypted using a second, different key for storage in a destination buffer associated with the destination virtual machine. In some examples, the key identifier and source address is managed by the virtual channel and is not visible to virtual machine or hypervisor.

Process-to-process secure data movement in network functions virtualization infrastructures

Examples described herein provide for a first core to map a measurement of packet processing activity and operating parameters so that a second core can access the measurement of packet processing activity and potentially modify an operating parameter of the first core. The second core can modify operating parameters of the first core based on the measurement of packet processing activity. The first and second cores can be provisioned on start-up with a common key. The first and second cores can use the common key to encrypt or decrypt measurement of packet processing activity and operating parameters that are shared between the first and second cores. Accordingly, operating parameters of the first core can be modified by a different core while providing for secure modification of operating parameters.

Remote register updates

Growing community of inventors

Shanghai, China

Xuekun Hu