Temporal Capabilities: Access Control for Time
Temporal Capabilities: Access Control for Time
复制标题
时间功能：时间访问控制
DOI：
10.1109/rtss.2017.00013
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Gabriel Parmer
中科院分区：
文献类型：
--
作者：
Phani Kishore Gadepalli;Robert Gifford;Lucas Baier;M. Kelly;Gabriel Parmer
嵌入式系统越来越需要处理各种质量的代码，这些代码通常必须被隔离，但可预见地共享资源。这促使人们使用诸如虚拟化之类的隔离结构，将关键任务代码与尽力而为的特性隔离开来。这样的系统通常侧重于限制子系统之间的干扰，这会使子系统之间日益常见的功能依赖关系变得复杂。尽管隔离必须是最重要的，但有效共享硬件的基本目标激发了子系统之间协作的原则机制。本文介绍了时序能力（TCaps），它将CPU管理集成到一个基于能力的访问控制系统中，并为调度分配权限。在这样做的过程中，子系统之间的受控时间协调成为系统的头等关注点。通过启用伴随服务激活和请求的临时委托，我们将tcap应用于具有共享VM的虚拟化环境，用于编排I/O。我们表明，TCaps与优先级和精心选择的预算不同，它既满足硬实时子系统的最后期限，又保持了尽力而为子系统的高吞吐量。
Embedded systems are increasingly required to handle code of various qualities that must often be isolated, yet predictably share resources. This has motivated the isolation of, for example, mission-critical code from best-effort features using isolation structures such as virtualization. Such systems usually focus on limiting interference between subsystems, which complicates the increasingly common functional dependencies between them. Though isolation must be paramount, the fundamental goal of efficiently sharing hardware motivates a principled mechanism for cooperating between subsystems. This paper introduces Temporal Capabilities (TCaps) which integrate CPU management into a capability-based access-control system and distribute authority for scheduling. In doing so, the controlled temporal coordination between subsystems becomes a first-class concern of the system. By enabling temporal delegations to accompany activations and requests for service, we apply TCaps to a virtualization environment with a shared VM for orchestrating I/O. We show that TCaps, unlike prioritizations and carefully chosen budgets, both meet deadlines for a hard real-time subsystem, and maintain high throughput for a best-effort subsystem.