Patent ID: 8977867
Filing Date: 2015-03-10
Classification: G06F,H04L

Abstract:
1. A system for securely managing one or more virtual machines on one or more physical hosts using one or more encryption keys, the system comprising one or more computer processors and computer storage media having encoded thereon computer executable instructions which, when executed upon the one or more computer processors, performs: creating one or more virtual machines on the one or more physical hosts, wherein each of the one or more virtual machines comprises a unique ID, and is associated with the one or more virtual hard disks; associating an encryption key with one or more of the one or more virtual machine unique IDs; encrypting, using the encryption key, one or more of the one or more virtual hard disks for each of the one or more virtual machines associated with the encryption key; providing the encryption key to one or more hypervisor components that interface between the virtual machines and the associated one or more virtual hard disks, wherein the one or more hypervisor components provide read/write access of the one or more encrypted virtual hard disks to the corresponding virtual machine using the provided encryption key, the one or more hypervisor components maintain a separate scope and execution environment for each of the one or more virtual machines such that each virtual machine has a separate identity and operates as though it has complete access to all available resources but has visibility only to what is assigned to it by the hypervisor.