Back to results
US 12,737,467 B2Granted
Method and system for dynamic application of storage encryption
AssigneeNaver Cloud Corporation
InventorsTakkyun Ko, Jung Joon Yoon
Life of this patent
Estimating the term…
Abstract
An encryption setting application method may include acquiring a virtual machine image including a script that describes a hooking operation of a booting process and an encryption setting operation; hooking the booting process based on the hooking operation after booting of a virtual machine starts; applying an encryption setting to the virtual machine based on the encryption setting operation; and restarting the booting process of the virtual machine.
Claims11
An encryption setting application method in a cloud environment including a host computer apparatus and physical storage, the method executed by at least one processor of the host computer apparatus and comprising:
- acquiring a virtual machine image including a script that describes a hooking operation of a booting process for booting a virtual machine and an encryption setting operation for the virtual machine;
- generating the virtual machine based on the virtual machine image;
- booting the generated virtual machine based on the booting process;
- hooking the booting process based on the hooking operation after booting of the virtual machine starts;
- verifying whether the encryption setting is applied to the generated virtual machine, and when the encryption setting is not applied to the generated virtual machine, applying the encryption setting to the generated virtual machine by performing the following steps:
- copying, to a memory included in the host computer apparatus, an initial file system temporarily loaded to the physical storage corresponding to the virtual machine to back up an initial setting of the physical storage associated with the initial file system;
- loading an actual file system of the virtual machine, after copying to the memory, the initial file system temporarily loaded to the physical storage;
- initializing the physical storage, after loading the actual file system, and applying the encryption setting to the physical storage to encrypt data of the physical storage;
- and restoring the initial file system copied to the memory so that the initial setting of the physical storage is restored;
- and
- restarting the hooked booting process for booting the generated virtual machine.
8 more elements
A non-transitory computer-readable recording medium storing instructions that, when executed by a processor of a host computer apparatus, cause the processor to perform the encryption setting application method comprising:
- acquiring a virtual machine image including a script that describes a hooking operation of a booting process for booting a virtual machine and an encryption setting operation for the virtual machine;
- generating the virtual machine based on the virtual machine image;
- booting the generated virtual machine based on the booting process;
- hooking the booting process based on the hooking operation after booting of the virtual machine starts;
- verifying whether the encryption setting is applied to the generated virtual machine, and when the encryption setting is not applied to the generated virtual machine, applying the encryption setting to the generated virtual machine by performing the following steps:
- copying, to a memory included in the host computer apparatus, an initial file system temporarily loaded to a physical storage corresponding to the virtual machine to back up an initial setting of the physical storage associated with the initial file system;
- loading an actual file system of the virtual machine, after copying to the memory, the initial file system temporarily loaded to the physical storage;
- initializing the physical storage, after loading the actual file system, and applying the encryption setting to the physical storage to encrypt data of the physical storage;
- and
- restoring the initial file system copied to the memory so that the initial setting of the physical storage is restored;
- and
- restarting the hooked booting process for booting the virtual machine.
9 more elements
A host computer apparatus comprising:
- at least one processor configured to execute computer-readable instructions, wherein the at least one processor is configured to:
- acquire a virtual machine image including a script that describes a hooking operation of a booting process for booting a virtual machine and an encryption setting operation for the virtual machine,
- generate the virtual machine based on the virtual machine image;
- boot the generated virtual machine based on the booting process;
- hook the booting process based on the hooking operation after booting of the virtual machine starts,
- verifying whether the encryption setting is applied to the generated virtual machine, and when the encryption setting is not applied to the generated virtual machine, applying the encryption setting to the generated virtual machine by performing the following steps:
- copying, to a memory included in the host computer apparatus, an initial file system temporarily loaded to a physical storage corresponding to the virtual machine to back up an initial setting of the physical storage associated with the initial file system;
- loading an actual file system of the virtual machine, after copying to the memory, the initial file system temporarily loaded to the physical storage;
- initializing the physical storage, after loading the actual file system, and applying the encryption setting to the physical storage to encrypt data of the physical storage;
- and
- restoring the initial file system copied to the memory so that the initial setting of the physical storage is restored, and
- restart the hooked booting process for booting the virtual machine.
9 more elements
Dependencies are inferred from the claim text.