Patent ID: 8650567

Claim:
A computer comprising: at least one physical operation device comprising a hardware resource; and a virtual machine monitoring system established on the at least one physical operation device, the virtual machine monitoring system comprising: a hypervisor; a plurality of virtual machines for performing access to the hardware resource of the at least one physical operation device through the hypervisor, wherein the virtual machines comprise a central control virtual machine used for controlling the virtual machines; a security module; and a hypercall intercept module established in the hypervisor for retrieving central control virtual machine ID information in the hypervisor and retrieving a hypercall transmitted from one of the virtual machines to the hypervisor, wherein the hypercall is used for establishing a channel between a source virtual machine and a target virtual machine; wherein the hypercall intercept module further determines a type of the channel established by the hypercall by determining whether source virtual machine ID information and target virtual machine ID information comprise the central control virtual machine ID information, such that when the source virtual machine ID information and the target virtual machine ID information do not include the central control virtual machine ID information, the hypercall intercept module determines that the type of the channel is a private channel, and the security module is used to monitor the channel.