Installing and manipulating a secure virtual machine image through an untrusted hypervisor
AssigneeIntel Corporation
InventorsDavid M. Durham, Karanvir S. Grewal, Sergej Deutsch, Michael Lemay
Life of this patent
Estimating the term…
Abstract
Systems, apparatuses and methods may provide for technology that associates a key domain of a plurality of key domains with a customer boot image, receives the customer boot image from the customer, and verifies the integrity of the customer boot image that is to be securely installed at memory locations determined from an untrusted privileged entity (e.g., a virtual machine manager).
Claims20
A system comprising:
- a system manager that manages actions for an associated guest virtual machine that is to be provisioned;
- and
- a semiconductor hardware device provided between the system manager and memory of
- the system, the semiconductor hardware device comprising:
- a substrate;
- and
- logic coupled to the substrate, wherein the logic is implemented at least partly in one or more of configurable logic or fixed-functionality hardware logic, the logic coupled to the substrate working in conjunction with the system manager to:
- associate, using a key for a customer, a key domain of a plurality of key domains with a virtual machine image associated with the guest virtual machine, the key being unknown to a virtual machine manager associated with the guest virtual machine;
- receive the virtual machine image from the customer;
- partition, by at least the system manager, the virtual machine image as a sequence of protocol data units (PDUs);
- load content of each PDU of the sequence of PDUs consecutively into a sequential page of the memory, wherein each page is loaded into a page table of the guest virtual machine and the logic keeps track of loading using a global transaction count for the key domain and a location in memory of the page;
- and
- verify an integrity of the virtual machine image that is to be installed in the key domain by checking, using the key, a value calculated using the page location, content, and the global transaction count of each of the loaded PDUs.
A semiconductor package apparatus of a system including a system manager that manages actions of an associated guest virtual machine that is to be provisioned, the semiconductor package apparatus comprising:
- a substrate;
- and
- logic coupled to the substrate, wherein the logic is implemented at least partly in one or more of configurable logic or fixed-functionality hardware logic, the logic coupled to the substrate working in conjunction with the system manager to:
- associate, using a key for a customer, a key domain of a plurality of key domains with a virtual machine image associated with the guest virtual machine, the key being unknown to a virtual machine manager associated with the guest virtual machine;
- receive the virtual machine image from a customer;
- partition, in conjunction with the system manager, the virtual machine image as a sequence of protocol data units (PDUs);
- load content of each PDU of the sequence of PDUs consecutively into a sequential page in a memory, wherein each page is loaded into a page table of the guest virtual machine and the logic keeps track of loading using a global transaction count for the key domain and a location in memory of the page;
- and
- verify an integrity of the virtual machine image that is to be installed in the key domain by checking, using the key, a value calculated using the page location, content, and the global transaction count of each of the loaded PDUs.
An article comprising a non-transitory machine-readable medium having stored thereon instructions that, when executed by a machine, cause a logic of the machine in conjunction with a system agent, to execute on the machine, wherein the system agent manages actions of an associated guest virtual machine that is to be provisioned and the logic is implemented at least partly in one or more of configurable logic or fixed-functionality hardware logic of the machine, to:
- associate, using a key for a customer, a key domain of a plurality of key domains with a virtual machine image associated with the guest virtual machine, the key being unknown to a virtual machine manager associated with the guest virtual machine;
- receive the virtual machine image from a customer;
- partition, by at least the system agent, the virtual machine image as a sequence of protocol data units (PDUs);
- load content of each PDU of the sequence of PDUs consecutively into a sequential page of a memory, wherein each page is loaded into a page table of the guest virtual machine and the logic keeps track of loading using a global transaction count for the key domain and a location in memory of the page;
- and
- verify an integrity of the customer image that is to be installed in the key domain by checking, using the key, a value calculated using the page location, content, and the global transaction count of each of the loaded PDUs.
Dependencies are inferred from the claim text.