Secure access to virtual machines in heterogenous cloud environments

A system comprising:

• one or more processors;
• and
• memory including instructions that, upon being executed by the one or more processors, cause the system to perform operations comprising:
• generating a first public-private key pair including a first public key and a first private key;
• inserting the first public key into a virtual machine in a first cloud;
• migrating the virtual machine from the first cloud to a second cloud;
• accessing the virtual machine in the second cloud for a first time based at least in part on first encrypted data encrypted using the first private key, the virtual machine providing access based at least in part on a first decryption of the first encrypted data using the first public key to generate first unencrypted data and a first comparison of the first unencrypted data to first data;
• generating a second public-private key pair including a second public key and a second private key;
• replacing the first public key in the virtual machine in the second cloud with the second public key;
• and
• accessing the virtual machine in the second cloud for a second time based at least in part on second encrypted data encrypted using the second private key, the virtual machine providing access based at least in part on a second decryption of the second encrypted data using the second public key to generate second unencrypted data and a second comparison of the second unencrypted data to second data.

A non-transitory computer-readable storage medium having stored therein instructions that, upon being executed by a processor, cause the processor to perform operations comprising:

• generating a first public-private key pair including a first public key and a first private key;
• inserting the first public key into a virtual machine in a first cloud;
• migrating the virtual machine from the first cloud to a second cloud;
• accessing the virtual machine in the second cloud for a first time based at least in part on first encrypted data encrypted using the first private key, the virtual machine providing access based at least in part on a first decryption of the first encrypted data using the first public key to generate first unencrypted data and a first comparison of the first unencrypted data to first data;
• generating a second public-private key pair including a second public key and a second private key;
• replacing the first public key in the virtual machine in the second cloud with the second public key;
• and
• accessing the virtual machine in the second cloud for a second time based at least in part on second encrypted data encrypted using the second private key, the virtual machine providing access based at least in part on a second decryption of the second encrypted data using the second public key to generate second unencrypted data and a second comparison of the second unencrypted data to second data.