Abstract: Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software.

Abstract: Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software. The first operating system level software is to manage the processors in the first partition as resources individually accessible to the first operating system level software, and the second operating system level software is to manage the processors in the second partition as resources individually accessible to the second operating system level software.

Abstract: Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software. The first operating system level software is to manage the processors in the first partition as resources individually accessible to the first operating system level software, and the second operating system level software is to manage the processors in the second partition as resources individually accessible to the second operating system level software.

Abstract: Embodiments of apparatuses, methods, and systems for partitioning memory mapped device configuration space are disclosed. In one embodiment, an apparatus includes a configuration space address storage location, an access map storage location, and addressing logic. The configuration space address storage location is to store a pointer to a memory region to which transactions to configure devices in a partition of a partitioned system are addressed. The access map storage location is to store an access map or a pointer to an access map. The addressing logic is to use the access map to determine whether a configuration transaction from a processor to one of the devices is to be allowed.

Abstract: One embodiment includes a personal computer device comprising at least one machine configured to execute a primary user operating system and at least one appliance operating system independent from the primary user operating system. The personal computer device also including a system memory including a first portion of the system memory configured to be used by the primary user operating system; and a second portion of the system memory configured to be sequestered from the primary user operating system.

Abstract: Apparatuses, systems, and methods to monitor core performance and integrated circuit chip temperatures in order to alternatively partition cores and core resources are disclosed. Embodiments generally comprise integrated circuit processors in chips that contain multiple cores or processing elements. In many system and apparatus embodiments, a module monitors either the throughput or performance of one or more of the cores. In such embodiments, another module, a core allocation module, partitions or allocates cores in different arrangements of partitions to improve performance. Additionally, in some embodiments, a temperature monitoring module monitors one or more temperatures of the chip containing the cores, wherein the temperature measurements may affect the core allocations. In some embodiments, once an allocation for the cores is selected, the specifics of the cores to be placed in different partitions may be stored and later retrieved when triggered by events allowing for the reallocation of the cores.

Abstract: One embodiment includes a personal computer device comprising at least one machine to execute a primary user operating system, a first physical memory to be used by the primary user operating system, at least one appliance operating system that is independent from the primary user operating system, a second physical memory to be sequestered from the primary user operating system and an access violation monitor to restrict access from the at least one appliance operating system to the second physical memory, wherein the access violation monitor is to run only when the at least one appliance operating system is invoked and at least one appliance operating system is to be invoked only after the primary user operating system has been suspended to a standby state.

Abstract: Embodiments of apparatuses, articles, methods, and systems for intra-partitioning components within an execution environment, and transitioning between partitions using a page table pointer target list are generally described herein. Other embodiments may be described and claimed.

Abstract: Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software. The first operating system level software is to manage the processors in the first partition as resources individually accessible to the first operating system level software, and the second operating system level software is to manage the processors in the second partition as resources individually accessible to the second operating system level software.

Abstract: One embodiment includes a personal computer device comprising at least one machine to execute a primary user operating system, a first physical memory to be used by the primary user operating system, at least one appliance operating system that is independent from the primary user operating system, a second physical memory to be sequestered from the primary user operating system and an access violation monitor to restrict access from the at least one appliance operating system to the second physical memory, wherein the access violation monitor is to run only when the at least one appliance operating system is invoked and at least one appliance operating system is to be invoked only after the primary user operating system has been suspended to a standby state.

Abstract: An autonomic computing environment is provided by sequestering one of a plurality of processor resources, partitioning a memory, and hiding an input/output (I/O) device. One processor resource is sequestered such that the sequestered processor resource is not exposed to the remaining processor resources as a processor resource. A memory region is partitioned to provide a service processing portion such that the sequestered processor resource has access to all of the memory region and the remaining processor resources have access to at least a portion of the memory region but do not have access to the service processing portion. A first I/O device is hidden such that the sequestered processor resource has access to the first I/O device and the remaining processor resources do not have access to the first I/O device.

Abstract: Embodiments of apparatuses, methods, and systems for partitioning memory mapped device configuration space are disclosed. In one embodiment, an apparatus includes a configuration space address storage location, an access map storage location, and addressing logic. The configuration space address storage location is to store a pointer to a memory region to which transactions to configure devices in a partition of a partitioned system are addressed. The access map storage location is to store an access map or a pointer to an access map. The addressing logic is to use the access map to determine whether a configuration transaction from a processor to one of the devices is to be allowed.

Abstract: Apparatuses, systems, and methods to monitor core performance and integrated circuit chip temperatures in order to alternatively partition cores and core resources are disclosed. Embodiments generally comprise integrated circuit processors in chips that contain multiple cores or processing elements. In many system and apparatus embodiments, a module monitors either the throughput or performance of one or more of the cores. In such embodiments, another module, a core allocation module, partitions or allocates cores in different arrangements of partitions to improve performance. Additionally, in some embodiments, a temperature monitoring module monitors one or more temperatures of the chip containing the cores, wherein the temperature measurements may affect the core allocations. In some embodiments, once an allocation for the cores is selected, the specifics of the cores to be placed in different partitions may be stored and later retrieved when triggered by events allowing for the reallocation of the cores.

Abstract: A method according to one embodiment may include partitioning a multi-core processor into a first partition and a second partition, the first partition including a first processor core and a first interrupt controller configured to store a first partition identifier, the second partition including a second processor core and a second interrupt controller configured to store a second partition identifier. The method may also include receiving, by the first interrupt controller and the second interrupt controller, at least one interrupt that includes a partition identifier. The method may also include comparing, by the first interrupt controller, the partition identifier included with the interrupt to the first partition identifier stored in the first interrupt controller.

Abstract: A system and method are implemented within a computing system to perform tamper-resistant network security operations. For example, a method of one embodiment comprises: sequestering a partition on the computing system, the partition including a region of memory and a logical or physical processing element; forwarding incoming and/or outgoing data traffic through the sequestered portion, the incoming data traffic being received by the computing system from a network and the outgoing data traffic being transmitted from the computing system over the network; performing one or more security operations on the data traffic within the sequestered partition.

Abstract: The invention relates to a system and method to allow a remote client to remotely access a home server of a home or private network while preserving end-to-end security. A home server includes a service component. When a server application performs a network operation to start listening for a connection from a remote client, it is detected by the service component. The remote client is coupled through the Internet and through an Internet agent to a home gateway running a Network Address Translation (NAT) software program. The gateway connects to a forwarding agent. The forwarding agent is connected to the home server and provides the Internet agent with access parameters received from the home server. If the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to services running on the home server.

Abstract: An autonomic computing environment is provided by sequestering one of a plurality of processor resources, partitioning a memory, and hiding an input/output (I/O) device. One processor resource is sequestered such that the sequestered processor resource is not exposed to the remaining processor resources as a processor resource. A memory region is partitioned to provide a service processing portion such that the sequestered processor resource has access to all of the memory region and the remaining processor resources have access to at least a portion of the memory region but do not have access to the service processing portion. A first I/O device is hidden such that the sequestered processor resource has access to the first I/O device and the remaining processor resources do not have access to the first I/O device.

Abstract: Various embodiments of the invention are illustrated, discussed and claimed. In some embodiments, disclosed are techniques for facilitating a control point on an external network to interact with a UPnP device on an internal network to which access is blocked by a gateway, firewall or other such device. In particular, various embodiments disclose how the UPnP Security protocol may be utilized by such an external control point to allow the control point to remotely send actions to, query the state of, and/or otherwise securely access desired internal network UPnP devices.

Abstract: To provide an effective way to deliver high-bandwidth content to some users and low-high bandwidth to other users, two or more different versions are stored of a content element to be delivered from a server to a content recipient in a network. In response to a request for the content from the recipient, one of the versions is selected based on bandwidth capabilities of the recipient. The selected version is then delivered to the recipient.

Abstract: The invention relates to a system and method to allow a remote client to remotely access a home server of a home or private network while preserving end-to-end security. A home server includes a service component. When a server application performs a network operation to start listening for a connection from a remote client, it is detected by the service component. The remote client is coupled through the Internet and through an Internet agent to a home gateway running a Network Address Translation (NAT) software program. The gateway connects to a forwarding agent. The forwarding agent is connected to the home server and provides the Internet agent with access parameters received from the home server. If the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to services running on the home server.