PATENT CLAIM ANALYSIS

Application Number: 16362887
Application Type: Utility
Filing Date: 2019-03
Publication Date: 2019-07
Patent Classification: ["713", "189000"]

Abstract:
According to one embodiment, a method comprises executing an untrusted host virtual machine monitor (VMM) to manage execution of at least one guest virtual machine (VM). The VMM receives an encrypted key domain key, an encrypted guest code image, and an encrypted guest control structure. The VM also issues a create command. In response, a processor creates a first key domain comprising a region of memory to be encrypted by a key domain key. The encrypted key domain key is decrypted to produce the key domain key, which is inaccessible to the VMM. The VMM issues a launch command. In response, a first guest VM is launched within the first key domain. In response to a second launch command, a second guest VM is launched within the first key domain. The second guest VM provides an agent to act on behalf of the VMM. Other embodiments are described and claimed.

Claim (Index 1):
An apparatus comprising:\n a processor; and a memory coupled to the processor; wherein the processor is to execute an untrusted host virtual machine monitor (VMM) to manage execution by the processor of at least one guest virtual machine (VM); the untrusted host VMM is to receive an encrypted key domain key, an encrypted guest code image encrypted by a key domain key, and an encrypted guest control structure encrypted by the key domain key, the key domain key inaccessible to the untrusted host VMM, wherein the encrypted guest code image comprises an agent code image and the encrypted guest control structure comprises an agent control structure; the untrusted host VMM is to issue a create command to the processor to create a first key domain, the first key domain comprising a region of the memory to be encrypted by the key domain key; in response to receiving the create command, the processor is to create the first key domain and decrypt the encrypted key domain key to produce the key domain key; the untrusted host VMM is to issue a launch command to the processor to launch a first guest VM within the first key domain; and in response to receiving the launch command, the processor is to switch to the first key domain, decrypt the encrypted guest control structure to produce a guest control structure containing guest processor state information, decrypt the encrypted guest code image to produce a guest code image, and execute the guest code image within the first key domain using the guest processor state information; the untrusted host VMM is to issue a second launch command to the processor to launch a second guest VM within the first key domain, the second guest VM to provide an agent to act on behalf of the untrusted host VMM within the first key domain; and in response to receiving the second launch command, the processor is to switch to the first key domain, decrypt the encrypted guest code image to produce the agent code image, decrypt the encrypted guest control structure to produce the agent control structure containing agent processor state information, and execute the agent code image within the first key domain using the agent processor state information.

Metadata:
- Claim Count in Document: 63.0
- Percentile: 99.0
- Lexical Diversity: 2.44286
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15444771', '15808986', '16108395', '13799134', '13006614']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3671703380052553
- 35 USC 102 Novelty (BERT): 0.6341892749983334
- Combined Prediction Score: 0.3938722317045631
- Mean Citation Score: 353.825102
- Max Citation Score: 611.8247700000003
- Similarity Product: 533.3018990580208

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test