Patent ID: 9667606
Date: 2017-05-30
CPC Classifications: G06F,H04L

Claim:
1. A method of computer security executed on one or more servers of a cloud or data center provider, comprising: receiving a network identifier for a plurality of functions from a cloud or data center manager; requesting a network key for each function from key server(s) or from a local key generator based on one or multiple secrets; allocating a plurality of isolated network interfaces based on a cloud or data center provider's and/or a customer's requirements; requesting a virtual network interface controller allocation per function per virtual machine; requesting from the key server a network key for each cloud or data center function; receiving a storage identifier for a plurality of functions from a cloud or data center manager; requesting a storage key for each function from key server(s) or from a local key generator based on one or multiple secrets; allocating a plurality of isolated virtual storage disks based on cloud or data center provider and/or customer requirements; requesting a storage controller allocation per function per virtual machine; requesting from the key server a storage key(s) for each cloud or data center function; and encrypting each function with either the network key or the storage key.