Patent ID: 11907361
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. A method, comprising:
using Secure Objects on a computer system to protect code and data that runs in a software container from other software on the computer system including the other software that runs on the same operating system as the container by assigning an ID to each of the Secure Objects,
wherein the protecting of the code and the data includes protecting memory pages owned by one of the Secure Objects,
wherein a page is decrypted after it is brought into memory;
constructing the secure object from a Virtual Machine image,
wherein the labeling of the memory pages owned by the secure object from among the plurality of secure objects with the ID of the secure object that is different from other identifications of the plurality of secure objects;
after decryption of a page, measuring the page to ensure the page has not been modified,
wherein measuring comprises at least one of computation of a checksum of the page or computation of a hash value for the page;
constructing a Secure Object from the Virtual Machine image; and
executing the Secure Object on a system that supports the execution of Secure Objects.