Virtual Machine Management Using a Downloadable Subscriber Identity Module

A network entity configured to establish a virtual Machine-to-Machine Equipment, vM2ME that includes a Virtual Machine, VM, running in a virtualised computing environment wherein communications to/from the VM are via a 3GPP communications network, the network entity comprising a processor and memory storing programming instructions that, when executed by the processor:

• establish a Machine-to-Machine Equipment Platform, M2MEP, which comprises a Communications Module, CM, providing an end-point of a communication channel for communications between the 3GPP network and the VM and for controlling communications between the VM and the 3GPP network;
• and
• establish the vM2ME that comprises a VM running on the M2MEP, and a Machine Communication Identity Module, MCIM, associated with the CM, the MCIM including security data and functions for enabling access via the 3GPP network.

A physical Network Interface, pNIC, comprising:

• a Physical Function, PF, providing configuration resources that include Communications Module, CM, resources for providing an end-point of a communication channel for 3GPP communications and for controlling the communications between a Virtual Machine, VM, and a 3GPP network, and Machine Communication Identity Module, MCIM, resources comprising security data and functions for enabling access via the 3GPP network;
• and
• one or more Virtual Functions, the or each Virtual Function comprising an MCIM and an associated CM relating to an associated VM operating in a virtualised computing environment.

A computer node in a 3GPP telecommunications network, the computer node including a Trusted Platform Module, TPM, having a secure boot-loader and being configured to execute the TPM to perform a secure boot process of a VMM of a virtualised computing system, and to establish a TRE that comprises the VMM together with a Communications Module, CM, providing an end-point of a communication channel for 3GPP communications and for controlling the communications between a VM and the 3GPP network, and a Machine Communication Identity Module, MCIM, associated with the CM, the MCIM including security data and functions for allowing the communications with the VM via the 3GPP network.

A non-transitory computer-readable medium storing a computer program for configuring a computer node in a network to establish a virtual Machine-to-Machine Equipment that includes a Virtual Machine, VM, running in a virtualised computing environment wherein communications to/from the VM are via a 3GPP communications network, the computer program comprising instructions to cause the node to:

• establish a Machine-to-Machine Equipment Platform, M2MEP, which comprises a Communications Module, CM, providing an end-point of a channel for communications between the 3GPP network and the VM and for controlling communications between the VM and the 3GPP network;
• and
• establish a virtual Machine-to-Machine Equipment that comprises a VM running on the M2MEP and a Machine Communication Identity Module, MCIM, associated with the CM, the MCIM including security data and functions for enabling access via the 3GPP network.