Securely Establishing Key-Based SSH Communications Between Virtual Machines During Cloud Marketplace Provisioning
AssigneeEMC IP Holding Company LLC
InventorsBin Yu, Arthur Zhou
Life of this patent
Estimating the term…
Abstract
Virtual machines are launched in a public cloud software marketplace by a user purchasing a software product. The virtual machines are automatically provisioned and configured upon launching. One virtual machine generates a public/private key pair, and key-based SSH communications is securely established between the virtual machines without the necessity of insecurely transferring the private key over an insecure public communications channel.
Claims18
A method of automatically and securely establishing key-based SSH communications between processing entities over an insecure network without insecurely transferring a private key of a public/private key pair over the network, comprising:
- enabling instances of first and second virtual machines for key-based SSH communications;
- enabling password-based SSH communications on the second virtual machine;
- generating by said first virtual machine a public/private key pair of the first virtual machine for key-based SSH communications with said second virtual machine;
- establishing a password-based SSH communications channel from the first virtual machine to the second virtual machine using a default password for said second virtual machine;
- and
- transferring to said second virtual machine over said password-based communications channel the public key of said public/private key pair of the first virtual machine.
Computer readable non-transitory media storing executable instructions for controlling a processor to perform a method comprising:
- enabling instances of first and second virtual machines for key-based SSH communications;
- enabling password-based SSH communications on the second virtual machine;
- generating by said first virtual machine a public/private key pair of the first virtual machine for key-based SSH communications with said second virtual machine;
- establishing a password-based SSH communications channel from the first virtual machine to the second virtual machine using a default password for said second virtual machine;
- and
- transferring to said second virtual machine over said password-based communications channel the public key of said public/private key pair of the first virtual machine.
Dependencies are inferred from the claim text.