Patents by Inventor Stephen T. Palermo

Stephen T. Palermo has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Publication number: 20190042292
    Abstract: Technologies for application-specific network acceleration include a computing device including a processor and an accelerator device such as a field-programmable gate array (FPGA). The processor and the accelerator device are coupled via a coherent interconnect and may be included in a multi-chip package. The computing device binds a virtual machine executed by the processor with an application function unit of the accelerator device via the coherent interconnect. The computing device processes network application data with the virtual machine and the application function unit within a coherency domain maintained with the coherent interconnect. Processing the network data may include processing a packet of a network flow by the virtual machine and processing subsequent packets of the network flow by the application function unit. Other embodiments are described and claimed.
    Type: Application
    Filed: February 25, 2018
    Publication date: February 7, 2019
    Inventors: Stephen T. Palermo, Gerald Rogers, Shih-Wei Roger Chien, Namakkal Venkatesan, Rajesh Gadiyar
  • Patent number: 10200410
    Abstract: A round-robin network security system implemented by a number of peer devices included in a plurality of networked peer devices. The round-robin security system permits the rotation of the system security controller among at least a portion of the peer devices. Each of the peer devices uses a defined trust assessment ruleset to determine whether the system security controller is trusted/trustworthy. An untrusted system security controller peer device is replaced by another of the peer devices selected by the peer devices. The current system security controller peer device transfers system threat information and security risk information collected from the peer devices to the new system security controller elected by the peer devices.
    Type: Grant
    Filed: September 30, 2016
    Date of Patent: February 5, 2019
    Assignee: Intel Corporation
    Inventors: Michael Hingston McLaughlin Bursell, Stephen T. Palermo, Chris MacNamara, Pierre Laurent, John J. Browne
  • Patent number: 10178054
    Abstract: Methods and apparatus for accelerating VM-to-VM Network Traffic using CPU cache. A virtual queue manager (VQM) manages data that is to be kept in VM-VM shared data buffers in CPU cache. The VQM stores a list of VM-VM allow entries identifying data transfers between VMs that may use VM-VM cache “fast-path” forwarding. Packets are sent from VMs to the VQM for forwarding to destination VMs. Indicia in the packets (e.g., in a tag or header) is inspected to determine whether a packet is to be forwarded via a VM-VM cache fast path or be forwarded via a virtual switch. The VQM determines the VM data already in the CPU cache domain while concurrently coordinating with the data to and from the external shared memory, and also ensures data coherency between data kept in cache and that which is kept in shared memory.
    Type: Grant
    Filed: April 1, 2016
    Date of Patent: January 8, 2019
    Assignee: Intel Corporation
    Inventors: Stephen T. Palermo, Iosif Gasparakis, Scott P. Dubal, Kapil Sood, Trevor Cooper, Jr-Shian Tsai, Jesse C. Brandeburg, Andrew J. Herdrich, Edwin Verplanke
  • Publication number: 20180373633
    Abstract: Method and apparatus for per-agent control and quality of service of shared resources in a chip multiprocessor platform is described herein. One embodiment of a system includes: a plurality of core and non-core requestors of shared resources, the shared resources to be provided by one or more resource providers, each of the plurality of core and non-core requestors to be associated with a resource-monitoring tag and a resource-control tag; a mapping table to store the resource monitoring and control tags associated with each non-core requestor; and a tagging circuitry to receive a resource request sent from a non-core requestor to a resource provider, the tagging circuitry to responsively modify the resource request to include the resource-monitoring and resource-control tags associated with the non-core requestor in accordance to the mapping table and send the modified resource request to the resource provider.
    Type: Application
    Filed: June 27, 2017
    Publication date: December 27, 2018
    Inventors: Andrew J. Herdrich, Edwin Verplanke, Stephen R. Van Doren, Ravishankar Iyer, Eric R. Wehage, Rupin H. Vakharwala, Rajesh M. Sankaran, Jeffrey D. Chamberlain, Julius Mandelblat, Yen-Cheng Liu, Stephen T. Palermo, Tsung-Yuan C. Tai
  • Patent number: 10127072
    Abstract: The present disclosure is directed to enhanced virtual function capabilities in a virtualized network environment. In general, devices may comprise physical and virtualized resources. The physical resources may comprise at least a network adaptor that may handle incoming data from a network and outgoing data to the network. The virtualized resources may comprise at least one virtual machine (VM) and a corresponding interface. The corresponding interface may be one of a physical interface, a virtual interface or a “super” virtual interface. The physical interface may provide a first set of capabilities allowing the VM to access (e.g., control) at least the network adaptor. The virtual interface may provide a second set of capabilities that is a subset of the first set. The super virtual interface may provide a third set of capabilities including the second set of capabilities and at least one additional capability from the first set of capabilities.
    Type: Grant
    Filed: January 18, 2018
    Date of Patent: November 13, 2018
    Assignee: Intel Corporation
    Inventors: Stephen T. Palermo, Scott P. Dubal, Trevor Cooper, Anjali S. Jain, Iosif Gasparakis, Jr-Shian Tsai, Mike Bursell, Pradeepsunder Ganesh, Parthasarathy Sarangam, Jesse C. Brandeburg
  • Publication number: 20180302909
    Abstract: System and techniques for a multi-class Long Range Lower Power (LRLP) access point (AP) multifactor intelligent agent control are described herein. A station (STA) association at the AP is received. Here, the association includes Class Identifier (ID) information. The Class ID information encompasses a set of communication parameters. A schedule of LRLP and non-LRLP STAs with associations at the AP is maintained. A transceiver chain is modified based on the schedule and the set of communication parameters to complete a communication with the STA.
    Type: Application
    Filed: April 14, 2017
    Publication date: October 18, 2018
    Inventors: Chittabrata Ghosh, Hassnaa Moustafa, Stephen T. Palermo
  • Publication number: 20180275893
    Abstract: Discussed herein are component redundancy systems, devices, and methods. A method to transfer a workload from a first component to a second component of a same device may include monitoring a wear indicator associated with the first component, and in response to an indication that the first component is stressed based on the wear indicator, transferring a workload of the first component to the second component.
    Type: Application
    Filed: March 21, 2017
    Publication date: September 27, 2018
    Inventors: Hang T. Nguyen, Stephen T. Palermo, John J. Browne, Chris MacNamara, Pradeepsunder Ganesh
  • Publication number: 20180246768
    Abstract: Embodiments of a system and method for dynamic hardware acceleration are generally described herein. A method may include identifying a candidate task from a plurality of tasks executing in an operating environment, the operating environment within a hardware enclosure, the candidate task amenable to hardware optimization, instantiating, in response to identifying the candidate task, a hardware component in the operating environment to perform hardware optimization for the task, the hardware component being previously inaccessible to the operating environment, and executing, by the operating environment, a class of tasks amenable to the hardware optimization on the hardware component.
    Type: Application
    Filed: October 21, 2015
    Publication date: August 30, 2018
    Inventors: Stephen T. Palermo, Soo Jin Tan, Valerie Young, Hassnaa Moustafa
  • Patent number: 10048977
    Abstract: Methods and Apparatus for Multi-Stage VM Virtual Network Function and Virtual Service Function Chain Acceleration for NFV and needs-based hardware acceleration. Compute platform hosting virtualized environments including virtual machines (VMs) running service applications performing network function virtualization (NFV) employ Field Programmable Gate Array (FPGA) to provide a hardware-based fast path for performing VM-to-VM and NFV-to-NFV transfers. The FPGAs, along with associated configuration data are also configured to support dynamic assignment and performance of hardware-acceleration to offload processing tasks from processors in virtualized environments, such as cloud data centers and the like.
    Type: Grant
    Filed: December 22, 2015
    Date of Patent: August 14, 2018
    Assignee: Intel Corporation
    Inventors: Stephen T. Palermo, Thomas E. Willis, Kapil Sood, Ilango S. Ganga, Scott P. Dubal, Pradeepsunder Ganesh, Jesse C. Brandeburg
  • Publication number: 20180189087
    Abstract: Disclosed is a source host including a processor. The processor operates a virtual machine (VM) to communicate network traffic over a communication link. The processor also initiates migration of the VM to a destination host. The processor also suspends the VM during migration of the VM to the destination host. The source host also includes a live migration circuit coupled to the processor. The live migration circuit manages a session associated with the communication link while the VM is suspended during migration. The live migration circuit buffers changes to a session state and transfers the buffered session state changes to the destination host for replay after the VM is reactivated on the destination host. The live migration circuit keeps the sessions alive during migration to alleviate connection losses.
    Type: Application
    Filed: December 30, 2016
    Publication date: July 5, 2018
    Applicant: Intel Corporation
    Inventors: Stephen T. Palermo, Krishnamurthy Jambur Sathyanarayana, Sean Harte, Thomas Long, Eliezer Tamir, Hari K. Tadepalli
  • Publication number: 20180143846
    Abstract: The present disclosure is directed to enhanced virtual function capabilities in a virtualized network environment. In general, devices may comprise physical and virtualized resources. The physical resources may comprise at least a network adaptor that may handle incoming data from a network and outgoing data to the network. The virtualized resources may comprise at least one virtual machine (VM) and a corresponding interface. The corresponding interface may be one of a physical interface, a virtual interface or a “super” virtual interface. The physical interface may provide a first set of capabilities allowing the VM to access (e.g., control) at least the network adaptor. The virtual interface may provide a second set of capabilities that is a subset of the first set. The super virtual interface may provide a third set of capabilities including the second set of capabilities and at least one additional capability from the first set of capabilities.
    Type: Application
    Filed: January 18, 2018
    Publication date: May 24, 2018
    Applicant: Intel Corporation
    Inventors: STEPHEN T. PALERMO, SCOTT P. DUBAL, TREVOR COOPER, ANJALI S. JAIN, IOSIF GASPARAKIS, JR-SHIAN TSAI, MIKE BURSELL, PRADEEPSUNDER GANESH, PARTHASARATHY SARANGAM, JESSE C. BRANDEBURG
  • Publication number: 20180097843
    Abstract: A round-robin network security system implemented by a number of peer devices included in a plurality of networked peer devices. The round-robin security system permits the rotation of the system security controller among at least a portion of the peer devices. Each of the peer devices uses a defined trust assessment ruleset to determine whether the system security controller is trusted/trustworthy. An untrusted system security controller peer device is replaced by another of the peer devices selected by the peer devices. The current system security controller peer device transfers system threat information and security risk information collected from the peer devices to the new system security controller elected by the peer devices.
    Type: Application
    Filed: September 30, 2016
    Publication date: April 5, 2018
    Applicant: INTEL CORPORATION
    Inventors: MICHAEL HINGSTON MCLAUGHLIN BURSELL, STEPHEN T. PALERMO, CHRIS MACNAMARA, PIERRE LAURENT, JOHN J. BROWNE
  • Patent number: 9934062
    Abstract: Technologies for dynamically allocating acceleration units of a network device include a network device configured to determine a present compute usage value associated with a workload of the virtual machine, determine whether to accelerate the virtual machine as a function of the present compute usage and a compute capability usage limit, and select, in response to a determination to accelerate the virtual machine, an acceleration unit from one or more acceleration units, as a function of a type of the workload. Additionally, the network device is configured to allocate the identified acceleration unit. Other embodiments are described and claimed.
    Type: Grant
    Filed: March 30, 2016
    Date of Patent: April 3, 2018
    Assignee: Intel Corporation
    Inventors: Stephen T. Palermo, Scott P. Dubal, Rashmin N. Patel
  • Patent number: 9910692
    Abstract: The present disclosure is directed to enhanced virtual function capabilities in a virtualized network environment. In general, devices may comprise physical and virtualized resources. The physical resources may comprise at least a network adaptor that may handle incoming data from a network and outgoing data to the network. The virtualized resources may comprise at least one virtual machine (VM) and a corresponding interface. The corresponding interface may be one of a physical interface, a virtual interface or a “super” virtual interface. The physical interface may provide a first set of capabilities allowing the VM to access (e.g., control) at least the network adaptor. The virtual interface may provide a second set of capabilities that is a subset of the first set. The super virtual interface may provide a third set of capabilities including the second set of capabilities and at least one additional capability from the first set of capabilities.
    Type: Grant
    Filed: January 26, 2016
    Date of Patent: March 6, 2018
    Assignee: Intel Corporation
    Inventors: Stephen T. Palermo, Scott P. Dubal, Trevor Cooper, Anjali S. Jain, Iosif Gasparakis, Jr-Shian Tsai, Mike Bursell, Pradeepsunder Ganesh, Parthasarathy Sangam, Jesse C. Brandeburg
  • Publication number: 20180054379
    Abstract: Technologies for simulating service degradation in telemetry data include a simulator device. The simulator device is to identify a telemetry data stream from a production system to a first management system. The simulator device is also to fork a copy of the telemetry data stream for transmission to a second management system, determine perturbations associated with a determined service degradation type, and apply the perturbations to the forked telemetry data stream. Other embodiments are also described and claimed.
    Type: Application
    Filed: August 19, 2016
    Publication date: February 22, 2018
    Inventors: Mike Bursell, Stephen T. Palermo, John J. Browne, Chris MacNamara, Pierre Laurent
  • Publication number: 20180004662
    Abstract: An input/output (I/O) device arranged to receive an information element including a payload, determine control information from the information element, classify the information element based on the control information, and issue a write to one of a plurality of computer-readable media based on the classification of the information element, the write to cause the payload to be written to the one of the plurality of computer-readable media.
    Type: Application
    Filed: July 1, 2016
    Publication date: January 4, 2018
    Applicant: INTEL CORPORATION
    Inventors: ANDREW CUNNINGHAM, MARK D. GRAY, ALEXANDER LECKEY, CHRIS MACNAMARA, STEPHEN T. PALERMO, PIERRE LAURENT, NIALL D. MCDONNELL, TOMASZ KANTECKI, PATRICK FLEMING
  • Publication number: 20170286142
    Abstract: Technologies for dynamically allocating acceleration units of a network device include a network device configured to determine a present compute usage value associated with a workload of the virtual machine, determine whether to accelerate the virtual machine as a function of the present compute usage and a compute capability usage limit, and select, in response to a determination to accelerate the virtual machine, an acceleration unit from one or more acceleration units, as a function of a type of the workload. Additionally, the network device is configured to allocate the identified acceleration unit. Other embodiments are described and claimed.
    Type: Application
    Filed: March 30, 2016
    Publication date: October 5, 2017
    Inventors: Stephen T. Palermo, Scott P. Dubal, Rashmin N. Patel
  • Publication number: 20170289068
    Abstract: Methods and apparatus for accelerating VM-to-VM Network Traffic using CPU cache. A virtual queue manager (VQM) manages data that is to be kept in VM-VM shared data buffers in CPU cache. The VQM stores a list of VM-VM allow entries identifying data transfers between VMs that may use VM-VM cache “fast-path” forwarding. Packets are sent from VMs to the VQM for forwarding to destination VMs. Indicia in the packets (e.g., in a tag or header) is inspected to determine whether a packet is to be forwarded via a VM-VM cache fast path or be forwarded via a virtual switch. The VQM determines the VM data already in the CPU cache domain while concurrently coordinating with the data to and from the external shared memory, and also ensures data coherency between data kept in cache and that which is kept in shared memory.
    Type: Application
    Filed: April 1, 2016
    Publication date: October 5, 2017
    Inventors: Stephen T. Palermo, Iosif Gasparakis, Scott P. Dubal, Kapil Sood, Trevor Cooper, Jr-Shian Tsai, Jesse C. Brandeburg, Andrew J. Herdrich, Edwin Verplanke
  • Publication number: 20170250892
    Abstract: Technologies for monitoring service level agreement (SLA) performance in an end-to-end SLA monitoring architecture include a network functions virtualization (NFV) SLA controller configured to manage SLA agents initialized in various network processing components of the end-to-end SLA monitoring architecture. To do so, the NFV SLA controller is configured to provide instruction to the SLA agents indicating which types of telemetry data to monitor and receive the requested telemetry data, as securely collected and securely packaged by the SLA agents. The NFV SLA controller is further configured to securely analyze the received telemetry data to determine one or more performance metrics and compare performance benchmarks against the performance metrics to generate an SLA report that includes the results of the comparison. Other embodiments are described and claimed.
    Type: Application
    Filed: February 29, 2016
    Publication date: August 31, 2017
    Inventors: Trevor Cooper, Kapil Sood, Scott P. Dubal, Michael Hingston McLaughlin Bursell, Jesse C. Brandeburg, Stephen T. Palermo
  • Publication number: 20170212776
    Abstract: The present disclosure is directed to enhanced virtual function capabilities in a virtualized network environment. In general, devices may comprise physical and virtualized resources. The physical resources may comprise at least a network adaptor that may handle incoming data from a network and outgoing data to the network. The virtualized resources may comprise at least one virtual machine (VM) and a corresponding interface. The corresponding interface may be one of a physical interface, a virtual interface or a “super” virtual interface. The physical interface may provide a first set of capabilities allowing the VM to access (e.g., control) at least the network adaptor. The virtual interface may provide a second set of capabilities that is a subset of the first set. The super virtual interface may provide a third set of capabilities including the second set of capabilities and at least one additional capability from the first set of capabilities.
    Type: Application
    Filed: January 26, 2016
    Publication date: July 27, 2017
    Applicant: Intel Corporation
    Inventors: STEPHEN T. PALERMO, SCOTT P. DUBAL, TREVOR COOPER, ANJALI S. JAIN, IOSIF GASPARAKIS, JR-SHIAN TSAI, MIKE BURSELL, PRADEEPSUNDER GANESH, PARTHASARATHY SANGAM, JESSE C. BRANDEBURG