Secure modular devices
AssigneeRed Hat, Inc.
InventorsMichael Tsirkin, Sergio Lopez Pascual
Life of this patent
Estimating the term…
Abstract
A system includes a memory and a processor. The memory is in communication with the processor and configured to initialize a secure interface configured to provide access to a virtual machine (VM) from a device, where the VM is associated with a level of security. A buffer is allocated and associated with the secure interface, where the level of security of the VM indicates whether the device has access to guest memory of the VM via the buffer. The buffer is then provided to the device. Inputs / outputs (I/Os) are sent between the device and the VM using the secure interface.
Claims20
A method, comprising:
- initializing a secure interface configured to provide access to a virtual machine (VM), a self-contained platform, or a container from a device, wherein the VM, the self-contained platform (SCP), or the container is associated with a level of security;
- allocating a buffer associated with the secure interface, wherein the level of security indicates whether the device has access to guest memory of the VM, the SCP, or the container via the buffer;
- providing the buffer to the device;
- and
- sending input/outputs (I/Os) between the device and the VM, the SCP, or the container via the secure interface, wherein the buffer is allocated based on the level of security.
A system, comprising:
- a memory;
- and
- a processor in communication with the memory, wherein the processor is configured to perform:
- initializing a secure interface configured to provide access to a virtual machine (VM), a self-contained platform, or a container from a device, wherein the VM, the self-contained platform (SCP), or the container is associated with a level of security;
- allocating a buffer associated with the secure interface, wherein the level of security indicates whether the device has access to guest memory of the VM, the self-contained platform (SCP), or the container via the buffer;
- providing the buffer to the device;
- and
- sending input/outputs (I/Os) between the device and the VM, the self-contained platform (SCP), or the container via the secure interface.
A non-transitory machine readable medium storing code, which when executed by a processor is configured to:
- initialize a secure interface configured to provide access to a virtual machine (VM), a self-contained platform, or a container from a device, wherein the VM, the self-contained platform (SCP), or the container is associated with a level of security;
- allocating a buffer associated with the secure interface, wherein the level of security indicates whether the device has access to guest memory of the VM, the self-contained platform (SCP), or the container via the buffer;
- provide the buffer to the device;
- and
- sending input/outputs (I/Os) between the device and the VM, the self-contained platform (SCP), or the container via the secure interface, wherein the buffer is allocated based on the level of security.
Dependencies are inferred from the claim text.