Patent ID: 9710400
Date: 2017-07-18
CPC Classifications: G06F

Claim:
1. A machine-readable medium that is not a transitory propagating signal, the machine-readable medium including instructions that, when executed by a machine, cause the machine to perform operations comprising: granting access by a single hypervisor to an operating system (OS) associated with an associated virtual machine (VM), to a designated number of the encrypted memory locations, without transmitting a configuration of the encrypted memory locations to the associated VM; copying, by the hypervisor, associated VM memory to a file in response to an instruction to snapshot virtual machine memory, clone the associate VM, pause the associated VM, or suspend the associated VM, the associated VM memory including encrypted memory locations, a designated number of the encrypted memory locations assigned to a single application executing in the OS of the associated VM, the encrypted memory locations specified by memory addresses, the encrypted memory locations accessible to the single application via a secure memory access request to the OS using the memory addresses, the copying including encrypting data from the encrypted memory locations prior to storage in the file; restoring an operational state of application data for the associated VM, using encrypted information of the application data stored in the encrypted memory locations, the information to be encrypted and decrypted using the single hypervisor; and permitting, in response to a request by the single application executed in the OS of the associated VM, access to the designated number of the encrypted memory locations only to the single application executed by the associated VM subject to the hypervisor, wherein the access is denied to any other application executed by the associated VM, or any other VM.