PATENT CLAIM ANALYSIS

Application Number: 16362887
Application Type: Utility
Filing Date: 2019-03
Publication Date: 2019-07
Patent Classification: ["713", "189000"]

Abstract:
According to one embodiment, a method comprises executing an untrusted host virtual machine monitor (VMM) to manage execution of at least one guest virtual machine (VM). The VMM receives an encrypted key domain key, an encrypted guest code image, and an encrypted guest control structure. The VM also issues a create command. In response, a processor creates a first key domain comprising a region of memory to be encrypted by a key domain key. The encrypted key domain key is decrypted to produce the key domain key, which is inaccessible to the VMM. The VMM issues a launch command. In response, a first guest VM is launched within the first key domain. In response to a second launch command, a second guest VM is launched within the first key domain. The second guest VM provides an agent to act on behalf of the VMM. Other embodiments are described and claimed.

Claim (Index 31):
A method comprising:\n executing an untrusted host virtual machine monitor (VMM) to manage execution of at least one guest virtual machine (VM); receiving, by the untrusted host VMM, an encrypted key domain key, an encrypted guest code image encrypted by a key domain key, and an encrypted guest control structure encrypted by the key domain key; issuing a create command from the untrusted host VMM to a processor; in response to the create command, creating, by the processor, a first key domain, the first key domain comprising a region of a memory to be encrypted by the key domain key; decrypting the encrypted key domain key to produce the key domain key, with the key domain key inaccessible to the untrusted host VMM; issuing a launch command from the untrusted host VMM to the processor to launch a first guest VM within the first key domain; in response to the launch command, launching a first guest VM within the first key domain, wherein launching the first guest VM comprises:\n switching to the first key domain, \n decrypting an encrypted guest control structure received from the untrusted host VMM to produce a guest control structure containing guest processor state information, \n decrypting an encrypted guest code image received from the untrusted host VMM to produce a guest code image, and \n executing the guest code image within the first key domain using the guest processor state information; and \n in response to receiving a second launch command to launch a second guest VM within the first key domain, the second guest VM to provide an agent to act on behalf of the untrusted host VMM within the first key domain:\n switching to the first key domain, \n decrypting the encrypted guest code image to produce an agent code image, \n decrypt the encrypted guest control structure to produce an agent control structure containing agent processor state information, and \n executing the agent code image within the first key domain using the agent processor state information.

Metadata:
- Claim Count in Document: 63.0
- Percentile: 99.0
- Lexical Diversity: 2.44286
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15444771', '15808986', '16108395', '13799134', '13006614']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3637302043129702
- 35 USC 102 Novelty (BERT): 0.6432626874135683
- Combined Prediction Score: 0.39168345262303
- Mean Citation Score: 353.825102
- Max Citation Score: 611.8247700000003
- Similarity Product: 565.5706543632498

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test