US 12,314,397 B2
Support of PCIe device with multiple security policies
Jiewen Yao, Shanghai (CN); David Harriman, Portland, OR (US); Xiaoyu Ruan, Folsom, CA (US); and Mahesh Natu, Folsom, CA (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Jan. 14, 2022, as Appl. No. 17/576,650.
Claims priority of application No. PCT/CN2021/128350 (WO), filed on Nov. 3, 2021.
Prior Publication US 2022/0179961 A1, Jun. 9, 2022
Int. Cl. G06F 13/42 (2006.01); G06F 13/40 (2006.01); G06F 21/57 (2013.01); G06F 21/85 (2013.01)
CPC G06F 21/572 (2013.01) [G06F 13/4022 (2013.01); G06F 13/4221 (2013.01); G06F 21/577 (2013.01); G06F 21/85 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A peripheral component interconnect express (PCIe) device comprising:
one or more processors to implement a data object exchange (DOE) entity; and
one or more non-transitory computer-readable media comprising instructions that, upon execution of the instructions by the one or more processors, are to cause the DOE to:
establish, by the DOE entity, a first session for communication between a first host entity of a host device and a first PCIe entity of the PCIe device, wherein the first session has a first security policy and is a session of a first connection between the PCIe device and the host device;
establish, by the DOE entity, a second session for communication between a second PCIe entity of the PCIe device and a second host entity of the host device, wherein the second session has a second security policy that is different than the first security policy and wherein the second session is a session of a second connection between the PCIe device and the host device;
identify, by the DOE entity, whether a message that is to be transmitted from the PCIe device to the host device is related to the first session or the second session based on a connection identifier (ID) indication in the message; and
transmit, by the DOE entity, the message to one of the first host entity and the second host entity based on the identification of whether the message is related to the first session or the second session.