Patent ID: 9473472
Filing Date: 2016-10-18
CPC Classification: G06F,H04L

Claim Text:
1. A method for securely communicating, comprising: receiving, at a first virtual machine, a request to perform a function requiring the use of a first resource associated with said first virtual machine, wherein said first resource is shared with a second virtual machine; downloading configuration information from a configuration server to said first virtual machine and establishing a first encrypted VPN channel between said first virtual machine and a security virtual machine using said configuration information; modifying a routing table in said first virtual machine using said configuration information, wherein said routing table is modified to contains an entry for said security virtual machine associated with said first resource; redirecting traffic from said first virtual machine, including said request to perform said function requiring the use of said first resource, to said security virtual machine, wherein said redirected traffic is encrypted on said first encrypted channel in order to send said redirected traffic to said security virtual machine, wherein said first encrypted channel uses a different encryption key than a second encrypted channel used to send traffic between said second virtual machine and said security virtual machine such that said first virtual machine cannot directly communicate with said second, virtual machine by virtue of said differently encrypted, first and second channels, and wherein redirecting all communications intended for said first virtual machine to said security virtual machine by virtue of said routing table.