Patent ID: 8997096
Filing Date: 2015-03-31
Classification: G06F,H04L

Abstract:
1. A method comprising: receiving a storage object operation by an untrusted component contained in a client virtual machine; passing said storage object operation together with a digital signature associated with said client virtual machine through a hypervisor on which said client virtual machine is executing to a trusted component, wherein said trusted component is contained within an access point virtual machine; processing said storage object operation by said trusted component, said processing including obtaining an identifier of said client virtual machine and determining a customer-specific set of backend storage resources associated with said client virtual machine based on said identifier of said client virtual machine, wherein said customer-specific backend storage resources are associated with an address for a backing store access point, and wherein said processing includes authenticating said client virtual machine based at least in part on said digital signature passed to said trusted component with said storage object operation; passing said storage object operation from said trusted component to said address for said backing store access point; and performing said storage object operation on said customer-specific set of backend storage resources.