Patent ID: 11922211
Assignee: VMWARE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A computer-implemented method for managing migration of trusted execution environments (TEEs) based on migration policies, the method comprising:
receiving a request to migrate a source TEE in a source host computer to another host computer at the source host computer, the source TEE including migration policy data and memory pages of user code and user data;
in response to the request, transmitting the migration policy data of the source TEE to a destination migration agent in a destination host computer from a source migration agent in the source host computer, wherein the migration policy data includes a bitmap that specifies a plurality of allowed hardware TEE backends to which to migrate the source TEE;
determining whether the destination host computer satisfies migration policies specified in the migration policy data at the destination migration agent in the destination host computer;
creating a destination TEE with new migration policy data in the destination host computer in response to a determination that the destination host computer satisfies the migration policies specified in the migration policy data;
transmitting the memory pages of the user code and the user data of the source TEE to the destination TEE with the new migration policy data in the destination host computer; and
restoring the memory pages of the user code and the user data at the destination TEE for execution.