Patent ID: 9678780
Date: 2017-06-13
CPC Classifications: G06F

Claim:
1. In a computing device executing a hypervisor hosting a secure virtual machine accessible to a network through a network connection and an unsecure virtual machine, a method for redirecting an access request to the unsecure virtual machine, comprising: intercepting, by a control virtual machine hosted by the hypervisor, an access request originating from the secure virtual machine, the secure virtual machine accessible to the network through the network connection; determining, by the control virtual machine, that the access request is for an unsecure resource not provided by the secure virtual machine; creating, by the control virtual machine, the unsecure virtual machine for the access request for the unsecure resource, the unsecure virtual machine having a different level of access than the secure virtual machine; and establishing, by the secure virtual machine, a secure communications channel between the secure virtual machine and the unsecure virtual machine, the communications channel only accessible by the secure virtual machine and the unsecure virtual machine; wherein establishing the secure communications channel comprises: redirecting, by the control virtual machine responsive to the determination, the access request to the unsecure virtual machine executing on the computing device via the secure communications channel between the secure virtual machine and the unsecure virtual machine.