Intel Corporation

Zijuan Fan

Weigang Li

Junyuan Wang

Kaijie Guo

Ned M Smith

Yao Huo

Michael E Kounavis

Ashok Raj

Xin Zeng

Songwu Shen

Laurent Coquerel

Brian Will

Maksim Lukoshkov

Qianjun Xie

Yuan Wang

Lihui Zhang

An embodiment of an integrated circuit may comprise memory to store respective resource control descriptors in correspondence with respective identifiers, and an input/output (IO) memory management unit (IOMMU) communicatively coupled to the memory, the IOMMU including circuitry to determine resource control information for an IO transaction based on a resource control descriptor stored in the memory that corresponds to an identifier associated with the IO transaction, and control utilization of one or more resources of the IOMMU based on the determined resource control information. Other embodiments are disclosed and claimed.

PASID granularity resource control for IOMMU

Various examples of device and system implementations and methods for performing attestation delegation operations are disclosed. In an example, attestation operations are performed by a verifier, including: obtaining endorsement information for attestation of an entity; obtaining an appraisal policy for evaluation of attestation evidence for the attestation of the entity; determining, based on the endorsement information and the appraisal policy, that delegation to a delegate verifier entity is permitted to perform the attestation of the entity; and providing, to the delegate verifier entity, a delegation command to perform the attestation of the entity, wherein the delegation command authorizes the delegate verifier entity to perform attestation operations (e.g., verifier operations) for a domain of entities including the entity.

Attestation verifier role delegation

Techniques and mechanisms for determining an operation to be performed with a direct memory access (DMA) request. An inspection unit () is coupled between an input-output memory management unit (IOMMU) () and an endpoint device (). The inspection unit () stores a registry () comprising entries () which each correspond to a respective address, and a respective one or more resources of the endpoint device (). A given entry () of the registry () is created based on a message from the IOM MU () which indicates the successful completion of an address translation to facilitate a DMA request. The endpoint device () performs a search, based on a DMA request, to determine if any registry () entry () indicates a combination of an address and an endpoint resource, where said combination matches a corresponding combination indicated by the DMA request. Communication of the DMA request to the IOMMU () is contingent on a result of the search.

Device, system, and method for inspecting direct memory access requests

Growing community of inventors

Shanghai, China

Zijuan Fan