Patent ID: 9698988
Date: 2017-07-04
CPC Classifications: G06F,H04L

Claim:
1. A management control method for a virtual machine, comprising: receiving, by a security control platform, a virtual machine starting request message that is from user equipment and forwarded by a management platform, wherein the virtual machine starting request message comprises an identifier of a virtual machine that needs to be enabled and user information; invoking a third-party trusted platform to determine that the virtual machine starting request message is initiated by the user equipment according to an instruction of an authorized user; performing authentication on the user information; and invoking, based on successful authentication, the third-party trusted platform to decapsulate the virtual machine that needs to be enabled, and, wherein invoking the third-party trusted platform to determine that the virtual machine starting request message is initiated by the user equipment according to the instruction of the authorized user comprises: invoking, by the security control platform, the third-party trusted platform to generate data encrypted using a key of the third-party trusted platform; sending the encrypted data to the user equipment using the management platform so that the user equipment decrypts the encrypted data using a private key provided by the third-party trusted platform for the authorized user, and returns decrypted data to the security control platform; and determining that the virtual machine starting request message is initiated by the user equipment according to the instruction of the authorized user when the decrypted data is the same as the data before the encryption.