Patent ID: 11907361
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. A method comprising:
assigning a secure object an ID (identity);
labeling memory pages owned by a secure object with the ID of the secure object;
maintaining an Access Control Monitor (ACM) table for the memory pages on the system;
controlling access to memory pages by monitoring load and store instructions and comparing information in the ACM table with the ID of the software that is executing these instructions;
using Secure Objects on a computer system to protect Virtual Machines in a system that supports the concurrent execution of multiple Virtual Machines so that the information in a Virtual Machine is protected so that other software on the computer system cannot access or undetectably tamper with said information, thereby protecting both a confidentiality and an integrity of the Virtual Machine while making the information in the Virtual Machine available to the Virtual Machine itself during execution of the Virtual Machine;
constructing a Secure Object from a Virtual Machine image; and
executing the Secure Object on a system that supports the execution of Secure Objects.