Patent ID: 9361089
Filing Date: 2016-06-07
CPC Classification: G06F

Claim Text:
1. A virtualization data processing system comprising: a hypervisor executing in a host computing platform; and a plurality of different virtual machine (VM) images managed by the hypervisor; wherein the hypervisor is configured to monitor each of the VM images in order to determine whether or not any of the VM images requires patch updating, upon detecting that a VM image requires patch updating, retrieve a patch to an instance of the VM image from a remote secure site executing on a computer separate and different from the host computing platform of the hypervisor, block other network access to the VM image during patch retrieval of the VM image comprising restricting network access to exclusive communication via a computer communications network between only the hypervisor executing in the host computing platform and the remote secure site executing on the computer and while other network access is blocked, apply the patch within the host computing platform to the instance of the VM image and subsequently unblock all network access to the VM image after the patch has been applied within the host computing platform to the instance of the VM image.