Patent ID: 7945786
Filing Date: 2011-05-17
Classification: G06F

Abstract:
1. A method, comprising: in response to detecting, at a virtual machine (VM) of a processing system, that the processing system is to enter a sleep mode during which random access memory (RAM) is to stay powered and a processor is not to stay powered, using at least one key “Kn” to encrypt a portion of data belonging to the VM, but not all data belonging to the VM; using a storage root key (SRK) from a trusted platform module (TPM) in the processing system to seal Kn; using at least one key “Kv” to encrypt a portion of data belonging to a virtual machine monitor (VMM) of the processing system; using the SRK to seal Kv; using Kv to generate a key “Ko”; computing a measurement “M” of a pre-sleep state of the VMM and the VM; using Ko to encrypt M into an encrypted measurement “EM”; after generating EM, entering the sleep mode; during a resume process for resuming from the sleep mode, measuring and verifying a VMM loader; using the VMM loader to unseal Kv and to authenticate Kv; using Kv to regenerate Ko; using Ko to decrypt EM into M; computing a new measurement M comparing M preventing the processing system from successfully completing the resume process if M