Back to results
US 11,080,403 B1Granted
Securely constructing a trusted virtual environment
AssigneeHewlett-Packard Development Company, L.P.
InventorAdrian Taylor
Life of this patent
Estimating the term…
Abstract
Approaches for securely constructing a trusted operating environment. A trusted operating environment manager executes on a device and instantiates a trusted operating environment on the device by composing at least of portion of the trusted operating environment using data from an untrusted operating environment also executing on the device. The trusted operating environment manager only permits the trusted operating environment to access the data upon the trusted operating environment manager successfully confirming that the data is presently in a state that has been deemed trustworthy.
Claims21
A non-transitory computer-readable storage medium storing one or more sequences of instructions for securely constructing a trusted virtual machine disk, which when executed, cause:
- a device comprising an untrusted operating environment, a first trusted operating environment, and a second trusted operating environment, wherein an operating environment refers to a self-contained bounded environment for executing software;
- a trusted operating environment manager within the first trusted operating environment, executing on the device, instantiating said the second trusted operating environment comprising the trusted virtual machine disk on said device by composing at least a portion of said trusted virtual machine disk using data from a host operating system of an untrusted operating environment also executing on said device by storing, in the trusted virtual machine disk, a reference to the data from the host operating system, wherein the trusted operating environment manager creates a file in the second trusted operating environment to include the reference that points to another file stored by the untrusted operating environment;
- and
- each time an access request from a user associated with the device for a file stored by the second trusted operating environment is issued to the second trusted operating environment, the trusted operating environment manager only permitting the access request to be performed and said trusted virtual machine disk to access said data upon the trusted operating environment manager successfully confirming that the file which is the subject of the access request is associated with an authenticated digital signature and when the digital signature is authenticated, then evidences that said data is presently in a state corresponding to when said data left the custody of its manufacturer.
1 more element
An apparatus for securely constructing a trusted virtual machine disk, comprising:
- one or more processors;
- and
- one or more non-transitory computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
- a trusted operating environment manager operating within a first trusted operating environment, executing on a device comprising an untrusted operating environment, the first trusted operating environment, and a second trusted operating environment, wherein an operating environment refers to a self-contained bounded environment for executing software, instantiating said the second trusted operating environment comprising the trusted virtual machine disk on said device by composing at least of portion of said trusted virtual machine disk using data from a host operating system of an untrusted operating environment also executing on said device by storing, in the trusted virtual machine disk, a copy of the data from the host operating system, wherein the trusted operating environment manager creates a file in the second trusted operating environment to include the reference that points to another file stored by the untrusted operating environment;
- and
- each time an access request from a user associated with the device for a file stored by the second trusted operating environment is issued to the second trusted operating environment, the trusted operating environment manager only permitting the access request to be performed and said trusted virtual machine disk to access said data upon the trusted operating environment manager successfully confirming that the file which is the subject of the access request is associated with an authenticated digital signature and when the digital signature is authenticated, then evidences that said data is presently in a state corresponding to when said data left the custody of its manufacturer.
3 more elements
A method for securely constructing a trusted virtual machine disk, comprising:
- a device comprising an untrusted operating environment, a first trusted operating environment, and a second trusted operating environment, wherein an operating environment refers to a self-contained bounded environment for executing software;
- a trusted operating environment manager within the first trusted operating environment, executing on the device, instantiating said the second trusted operating environment comprising the trusted virtual machine disk on said device by composing at least of portion of said trusted virtual machine disk using data from a host operating system of an untrusted operating environment also executing on said device by storing, in the trusted virtual machine disk, a reference to the data from the host operating system, wherein the trusted operating environment manager creates a file in the second trusted operating environment to include the reference that points to another file stored by the untrusted operating environment;
- and
- each time an access request from a user associated with the device for a file stored by the second trusted operating environment is issued to the second trusted operating environment, the trusted operating environment manager only permitting the access request to be performed and said trusted virtual machine disk to access said data upon the trusted operating environment manager successfully confirming that the file which is the subject of the access request is associated with an authenticated digital signature and when the digital signature is authenticated, then evidences that said data is presently in a state corresponding to when said data left the custody of its manufacturer.
1 more element
Dependencies are inferred from the claim text.