Patent ID: 8782779
Filing Date: 2014-07-15
Classification: G06F

Abstract:
1. A computer system comprising: a plurality of partitions having respective operating systems; a layer to communicate with each of the plurality of partitions; unprotected resources including processing devices and dynamically assignable to the plurality of partitions, where a portion of the unprotected resources is reassignable from one of the partitions to another of the partitions; and protected resources accessible by the layer but configured to not provide a useful response to the operating systems, and where the protected resources include dedicated resources assigned to the layer that are invisible to the operating systems, and wherein the protected resources are arranged to restrict communications between the partitions, the protected resources including an address conversion resource to convert between addresses in a first address space and addresses in a second address space, and a firewall to accept or reject communications between the partitions, wherein the firewall is to determine whether a request from a requester in a first of the partitions is allowed to access a resource in a second of the partitions, the firewall to allow the request to access the resource in the second partition under a first condition, and to not allow the request to access the resource in the second partition under a second condition.