US 9,882,901 B2 · End-to-end protection for shrouded virtual servers

Abstract

Technical solutions are described for securely deploying a shrouded virtual server. An example method includes sending, by a host manager, authentication information of a hosting system to a client device in response to a request from the client device. The \method also includes receiving a request to deploy a virtual server using a shrouded mode. The method also includes deploying a preconfigured hypervisor on the hosting system, where the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor. The method also includes deploying, by the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor. The method also includes sending, by the host manager, an identifier of the virtual server for receipt by the client device.

Claims18

Dependent claims

A computer implemented method for securely deploying a shrouded virtual server, the method comprising:

sending, by a host manager, authentication information of a hosting system to a client device in response to a request from the client device;
receiving, by the host manager, a request to deploy a virtual server using a shrouded mode, the shrouded mode preventing an administrator of the hosting system from accessing data of the virtual server, the request being sent by the client device in response to the hosting system being authenticated by the client device;
deploying, by the host manager, a preconfigured hypervisor on the hosting system, wherein the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor;
deploying, by the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor;
sending, by the host manager, an identifier of the virtual server for receipt by the client device
storing, by the host manager, a memory address range corresponding to the virtual server;
and
in response to a system failure in the virtual server, clearing, by the host manager, the memory address range prior to storing a memory dump.

5 more elements

A system for securely deploying a shrouded virtual server, the system comprising:

a server computer;
and
a host manager console configured to:
send an authentication information of a hosting system to a client device in response to a request from the client device;
receive a request to deploy a virtual server using a shrouded mode, the shrouded mode preventing an administrator of the hosting system from accessing data of the virtual server, the request being sent by the client device in response to the hosting system being authenticated by the client device;
deploy a preconfigured hypervisor on the hosting system, wherein the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor;
deploy, via the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor;
send an identifier of the virtual server for receipt by the client device
store a memory address range corresponding to the virtual server;
and
in response to a system failure in the virtual server, clear the memory address range prior to storing a memory dump.

8 more elements

A computer program product for extending shrouding capability of a virtual server hosting system, the computer program product comprising a computer readable storage device, the computer readable storage device comprising computer executable instructions, wherein the computer readable storage device comprises instructions to:

send an authentication information of a hosting system to a client device in response to a request from the client device;
receive a request to deploy a virtual server using a shrouded mode, the shrouded mode preventing an administrator of the hosting system from accessing data of the virtual server, the request being sent by the client device in response to the hosting system being authenticated by the client device;
deploy a preconfigured hypervisor on the hosting system, wherein the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor;
deploy, via the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor;
send an identifier of the virtual server for receipt by the client device
store a memory address range corresponding to the virtual server;
and
in response to a system failure in the virtual server, clear the memory address range prior to storing a memory dump.

5 more elements

Dependencies are inferred from the claim text.

End-to-end protection for shrouded virtual servers

Life of this patent

End-to-end protection for shrouded virtual servers

Life of this patent

Abstract

Claims18