Patent ID: 7512815
Filing Date: 2009-03-31
Classification: G06F,H04L

Abstract:
1. A virtual security appliance system, consisting of: a recipient Virtual Security Appliance having an I/O controller configured to received commands from a Virtual Machine Monitor; a crypto engine of the recipient virtual security appliance configured to assign a master/slave flag, the crypto engine having a master virtual Trusted Platform Module and a slave virtual Trusted Platform Module, wherein the crypto engine stores, in secure storage, an appliance endorsement key configured to provide an identification and to pair with an additional recipient virtual security appliance in the virtual security appliance system, the additional recipient virtual security appliance including an additional crypto engine having an additional appliance endorsement key; a process residing on the recipient Virtual Security Appliance, the process performing: assigning a master/slave flag to the command to identify a command type; determining the command type in the I/O controller; in response to a random command type: in response to a write command type: in response to a read command type: receiving output from the crypto engine; returning the output to the Virtual Machine Monitor; establishing a pair credential between the recipient virtual security appliance and the additional recipient virtual security appliance; and establishing a secure channel between the recipient virtual security appliance and the additional recipient virtual security appliance through an exchange of the appliance endorsement key and the additional appliance endorsement key through the pair credential.