Patent ID: 9292666
Filing Date: 2016-03-22
CPC Classification: G06F

Claim Text:
1. A method for detecting an unauthorized use of a virtual machine, the method comprising: storing a virtual machine on a physical machine at a first time, the virtual machine including a boot pointer, the boot pointer pointing to a locator code at the first time; and starting a boot process of booting the virtual machine at a second time after the first time, the boot process including at least one of: responsive to the virtual machine being in an authorized environment, which exists when the physical machine and the virtual machine are both registered with a management system and associated with each other by the management system, which manages at least one physical machine and at least one virtual machine, bypassing the locator code, at a third time after the second time, by adjusting the boot pointer, from pointing to the locator code, to pointing to a boot code of the virtual machine, and responsive to the virtual machine being in an unauthorized environment, which exists when the virtual machine is not in an authorized environment, executing the locator code, at a fourth time after the second time, wherein the locator code gathers information indicative of a location of the unauthorized environment, and transmits a message including the information indicative of the location.