公开(公告)号：US08539481B2

公开(公告)日：2013-09-17

申请号：US11301093

申请日：2005-12-12

Applicant: Frederick J. Smith ,  Jeff L. Havens ,  Madhusudhan Talluri ,  Yousef A. Khalidi

Inventor： Frederick J. Smith ,  Jeff L. Havens ,  Madhusudhan Talluri ,  Yousef A. Khalidi

IPC: G06F9/455

CPC classification number: G06F21/6281 ,  G06F9/45558 ,  G06F2009/45566

Abstract: A containment mechanism provides for the grouping and isolation of multiple processes running on a single computer using a single instance of the operating system. A system is divided into one or more side-by-side and/or nested isolated environments enabling the partitioning and controlled sharing of resources by creating different views of hierarchical name spaces via virtual hierarchies.

Abstract translation: 遏制机制提供了使用单个操作系统实例在单个计算机上运行的多个进程的分组和隔离。 系统分为一个或多个并行和/或嵌套的隔离环境，通过虚拟层次结构创建分层名称空间的不同视图，从而实现资源的分区和控制共享。

公开(公告)号：US08312459B2

公开(公告)日：2012-11-13

申请号：US11301071

申请日：2005-12-12

Applicant: Frederick J. Smith ,  Jeff L. Havens ,  Madhusudhan Talluri ,  Yousef A. Khalidi

Inventor： Frederick J. Smith ,  Jeff L. Havens ,  Madhusudhan Talluri ,  Yousef A. Khalidi

IPC: G06F9/46

CPC classification number: G06F9/5072

Abstract: A containment mechanism provides for the grouping and isolation of multiple processes running on a single computer using a single instance of the operating system. A system environment is divided into one or more side-by-side and/or nested spaces enabling the partitioning and controlled sharing of resources by creating different views of hierarchical name spaces via virtual hierarchies. A set of declarative rules specifying access capabilities may specify a set of filter drivers to be used to limit access to nodes in the hierarchical name space. The rules may be applied in sequence to construct a new name space from an existing one, or to add to an existing hierarchy. Filter drivers are used to limit access to nodes in the new name space or new portion of the name space. Access to nodes can be limited (read-only access instead of read/write) or nodes can be hidden altogether. Rules may be specified in a declarative language such as XML.

Abstract translation: 遏制机制提供了使用单个操作系统实例在单个计算机上运行的多个进程的分组和隔离。 系统环境分为一个或多个并排和/或嵌套空间，通过虚拟层次结构创建分层名称空间的不同视图，实现资源的分区和控制共享。 指定访问功能的一组声明性规则可以指定一组用于限制对分层名称空间中的节点的访问的过滤器驱动程序。 这些规则可以按顺序应用，以从现有规则中构建新的名称空间，或添加到现有的层次结构中。 过滤器驱动程序用于限制对新名称空间中节点或名称空间的新部分的访问。 可以限制对节点的访问（只读访问而不是读/写），或者可以完全隐藏节点。 规则可以声明性语言（如XML）来指定。

公开(公告)号：US08271938B2

公开(公告)日：2012-09-18

申请号：US12203860

申请日：2008-09-03

Applicant: Patrick H. Dussud ,  Scott D. Mosier ,  Peter F. Sollich ,  Frank V. Peschel-Gallee ,  Raja Krishnaswamy ,  Simon J. Hall ,  Madhusudhan Talluri ,  Rudi Martin ,  Michael M. Magruder ,  Andrew J. Pardoe

Inventor： Patrick H. Dussud ,  Scott D. Mosier ,  Peter F. Sollich ,  Frank V. Peschel-Gallee ,  Raja Krishnaswamy ,  Simon J. Hall ,  Madhusudhan Talluri ,  Rudi Martin ,  Michael M. Magruder ,  Andrew J. Pardoe

IPC: G06F9/44

CPC classification number: G06F8/36 ,  G06F8/76 ,  G06F9/44521 ,  G06F9/44584 ,  G06F9/45508 ,  G06F9/4552

Abstract: Mechanisms that allow frameworks significant flexibility in varying the library of common base classes in a manner that better suits the domain of applications served by the framework. Instead of providing the base class library, the runtime provides a data contract for the data structure of each base class. The frameworks can then define each base class in a custom way so long as the data contract is honored. Thus, for example, the framework may provide custom framework-specific methods and/or properties as is appropriate for the framework. Another framework might define the base classes in a different way.

Abstract translation: 允许框架在以更好的方式适应框架所服务的应用程序的方式来改变共同基类库的大量灵活性的机制。 运行时不提供基类库，而是为每个基类的数据结构提供数据契约。 只要符合数据合约，框架就可以以自定义的方式定义每个基类。 因此，例如，框架可以提供适合框架的特定于框架的特定方法和/或属性。 另一个框架可能会以不同的方式定义基类。

公开(公告)号：US20080109466A1

公开(公告)日：2008-05-08

申请号：US11555731

申请日：2006-11-02

Applicant: Jeffrey L. Havens ,  Frederick J. Smith ,  Yousef A. Khalidi ,  Madhusudhan Talluri

Inventor： Jeffrey L. Havens ,  Frederick J. Smith ,  Yousef A. Khalidi ,  Madhusudhan Talluri

IPC: G06F7/00

CPC classification number: G06F9/44505 ,  G06F9/45537

Abstract: An element such as a Registry key or value is virtually deleted by creating a deletion marker for the element. Two or more separate sets of physical Registry keys/values are presented as one merged (virtual) Registry to a process running in a silo. The operating system provides the merged view of the Registry by monitoring Registry key or value system requests made by processes in silos on a computer or computer system and filtering out those elements associated with deletion markers. Special processing is invoked in response to detecting certain types of Registry key or value system access requests, including but not limited to: enumeration, open, create, rename or delete.

Abstract translation: 通过创建元素的删除标记，实际上删除了诸如注册表项或值的元素。 两个或多个单独的物理注册表项/值集合作为一个合并（虚拟）注册表呈现给在一个仓中运行的进程。 操作系统通过监视计算机或计算机系统上的进程的注册表项或值系统请求来提供注册表的合并视图，并过滤掉与删除标记相关的元素。 响应于检测某些类型的注册表项或值系统访问请求而调用特殊处理，包括但不限于枚举，打开，创建，重命名或删除。

公开(公告)号：US20080005133A1

公开(公告)日：2008-01-03

申请号：US11479192

申请日：2006-06-30

Applicant: Yousef A. Khalidi ,  Frederick J. Smith ,  Madhusudhan Talluri

Inventor： Yousef A. Khalidi ,  Frederick J. Smith ,  Madhusudhan Talluri

IPC: G06F17/00

CPC classification number: G06F17/30235

Abstract: Two or more separate physical file system directories are presented as one merged (virtual) file system directory to a process running in a silo. The operating system controls the level of access to the files in the merge directory. The operating system provides the merged view of the file system directories by monitoring file system requests made by processes in silos on a computer or computer system and in response to detecting certain types of file system access requests, provides the view of the seemingly merged directories by performing special processing. The types of requests which trigger the special processing include: enumeration, open, create, rename or close.

Abstract translation: 将两个或多个单独的物理文件系统目录作为一个合并的（虚拟）文件系统目录呈现给在筒仓中运行的进程。 操作系统控制对合并目录中文件的访问级别。 操作系统通过监视由计算机或计算机系统上的孤岛中的进程产生的文件系统请求并响应于检测到某些类型的文件系统访问请求而提供文件系统目录的合并视图，通过以下方式提供看似合并的目录的视图： 进行特殊处理。 触发特殊处理的请求类型包括：枚举，打开，创建，重命名或关闭。

公开(公告)号：US20080005060A1

公开(公告)日：2008-01-03

申请号：US11480072

申请日：2006-06-30

Applicant: Yousef A. Khalidi ,  Frederick J. Smith ,  Madhusudhan Talluri

Inventor： Yousef A. Khalidi ,  Frederick J. Smith ,  Madhusudhan Talluri

IPC: G06F17/30

CPC classification number: G06F9/44505

Abstract: Two or more separate physical Registry directories are presented as a single (virtual) Registry directory to an application running in a controlled execution environment called a silo. All of the operations normally available to be performed on the Registry directory can be performed on the merge directory, however, the operating system controls the level of access to the keys in the merge directory. The operating system provides the merged view of the Registry directories by a Registry filter driver. The Registry filter model provides a single callback with a notification code indicating the reason the callback was called. The types of notifications which trigger the special processing include: enumeration of a key, enumeration of the value of a key, query a key, close a key, delete a key, create or open a key or rename a key.

Abstract translation: 将两个或多个单独的物理注册表目录作为单个（虚拟）注册表目录呈现给在受控执行环境中运行的称为“仓库”的应用程序。 通常可以在注册表目录中执行的所有操作都可以在合并目录上执行，但是操作系统控制对合并目录中的密钥的访问级别。 操作系统通过注册表过滤器驱动程序提供注册表目录的合并视图。 注册表过滤器模型提供单个回调，并带有一个通知代码，指示调用回调的原因。 触发特殊处理的通知的类型包括：枚举密钥，枚举密钥的枚举，查询密钥，关闭密钥，删除密钥，创建或打开密钥或重命名密钥。

公开(公告)号：US20070134070A1

公开(公告)日：2007-06-14

申请号：US11301065

申请日：2005-12-12

Applicant: Frederick Smith ,  Jeff Havens ,  Madhusudhan Talluri ,  Yousef Khalidi

Inventor： Frederick Smith ,  Jeff Havens ,  Madhusudhan Talluri ,  Yousef Khalidi

IPC: B65G53/40

CPC classification number: G06F21/53 ,  G06F21/6281 ,  G06F2221/2141 ,  H04L49/90

Abstract: A containment mechanism provides for the grouping and isolation of multiple processes running on a single computer using a single instance of the operating system. A system is divided into one or more side-by-side and/or nested spaces enabling the partitioning and controlled sharing of resources by creating different views of hierarchical name spaces by creating a new branch of an existing global system name space or by linking the sub-root level nodes of a new hierarchy to a subset of nodes in an existing global system name space.

Abstract translation: 遏制机制提供了使用单个操作系统实例在单个计算机上运行的多个进程的分组和隔离。 系统被划分为一个或多个并排和/或嵌套空间，通过创建现有全球系统名称空间的新分支，通过创建分层名称空间的不同视图来实现资源的分区和控制共享，或者通过链接 新层次结构的子根级别节点到现有全局系统名称空间中的节点子集。

公开(公告)号：US20070134068A1

公开(公告)日：2007-06-14

申请号：US11301066

申请日：2005-12-12

Applicant: Frederick Smith ,  Jeff Havens ,  Madhusudhan Talluri ,  Yousef Khalidi

Inventor： Frederick Smith ,  Jeff Havens ,  Madhusudhan Talluri ,  Yousef Khalidi

IPC: B60P1/60

CPC classification number: G06F9/4401 ,  Y10S707/99939

Abstract: An intra-operating system isolation mechanism called a silo provides for the grouping and isolation of processes running on a single computer using a single instance of the operating system. The operating system enables the controlled sharing of resources by providing a view of a system name space to processes executing within an isolated application called a server silo. A server silo is created by performing a separate “mini-boot” of user-level services within the server silo. The single OS image serving the computer employs the mechanism of name space containment to constrain which server silos can use which resource(s). Restricting access to resources is therefore directly based on the process or application placed in the server silo rather than who is running the application because if a process or application is unable to resolve a name used to access a resource, it will be unable to use the resource.

Abstract translation: 称为仓库的操作系统隔离机制提供了使用单个操作系统实例在单个计算机上运行的进程的分组和隔离。 操作系统通过提供系统名称空间的视图来实现资源的受控共享，以便在被称为服务器仓的隔离应用程序内执行的进程进行处理。 通过在服务器仓内执行用户级服务的单独“微引导”来创建服务器仓库。 服务于计算机的单个OS映像使用名称空间容纳的机制来约束哪个服务器孤岛可以使用哪个资源。 因此，限制对资源的访问直接基于放置在服务器仓中的进程或应用程序，而不是运行应用程序的用户，因为如果进程或应用程序无法解析用于访问资源的名称，则无法使用 资源。

公开(公告)号：US06748429B1

公开(公告)日：2004-06-08

申请号：US09480330

申请日：2000-01-10

Applicant: Madhusudhan Talluri ,  Bart Smaalders ,  Sundeep Panicker ,  Krishna Kondaka

Inventor： Madhusudhan Talluri ,  Bart Smaalders ,  Sundeep Panicker ,  Krishna Kondaka

IPC: G06F15177

CPC classification number: G06F9/5061 ,  G06F2209/505 ,  H04L41/0816 ,  H04L41/0856 ,  H04L41/0873 ,  H04L41/12 ,  H04L69/40

Abstract: Method for enabling the dynamic modification of cluster configurations, and apparatus including software to perform the method. To enable this dynamic modification, cluster configuration data is stored as a table in a cluster configuration repository that is accessible from all nodes in the cluster. Accordingly, the present invention enables the modification of the cluster configuration from any node in the cluster dynamically. When a reconfiguration command is given, the configuration table is changed and all the nodes in the cluster are notified of the changed configuration in parallel. Following the notification by the nodes of the changed cluster configuration, the changes to the cluster are implemented dynamically as specified by the command.

Abstract translation: 用于实现群集配置的动态修改的方法，以及包括执行该方法的软件的设备。 要启用此动态修改，集群配置数据将作为表存储在可从集群中的所有节点访问的集群配置存储库中。 因此，本发明能够动态地从集群中的任何节点修改集群配置。 当给出重新配置命令时，更改配置表，并并行地向群集中的所有节点通知已更改的配置。 在节点通知更改的集群配置后，对集群的更改将按照命令的规定动态实现。

公开(公告)号：US6144999A

公开(公告)日：2000-11-07

申请号：US087261

申请日：1998-05-29

Applicant: Yousef A. Khalidi ,  Madhusudhan Talluri ,  David Dion ,  Anil Swaroop

Inventor： Yousef A. Khalidi ,  Madhusudhan Talluri ,  David Dion ,  Anil Swaroop

IPC: G06F11/20 ,  G06F13/00

CPC classification number: G06F11/2074 ,  G06F11/2064

Abstract: A file disaster recovery system that employs geographical replication of data from a local site to remote site in a such a manner that file requests from clients of the local site can be handled by a file server on the remote site following a failover from the local site to the remote site. Geographical data replication software running on a local server checkpoints to a log in local stable storage all information on file operations that change the file state of the local file system. According to a selected mode, the local geographical data replication software flushes information in the log pertaining to the file operations since the last flush to the remote site. At the remote site, compatible remote geographical data replication software running on a remote file server receives the flushed log and replicates in sequence order the file operations represented in the flushed log. The results of the operations are stored on remote stable storage. The local and remote servers can be clusters or single servers. There is no need for commonality, except for operating and file systems, between the local and remote sites. Because operations are replicated and not low level, formatted data, the local and remote stable file storage can be completely different.