Secure management of operations on protected virtual machines

US9578017B2 · kind B2 · utility

Assignee

• MICROSOFT TECHNOLOGY LICENSING, LLC · US

Inventors

• Niels T. Ferguson · Redmond, US
• Yevgeniy A. Samsonov · Redmond, US
• Kinshuman Kinshumann · Redmond, US
• Samartha Chandrashekar · Bellevue, US
• John Anthony Messec · Bellevue, US
• Mark F. Novak · Newcastle, US
• Christopher McCarron · Hartford, US
• Amitabh Prakash Tamhane · Redmond, US
• Qiang Wang · Beijing, CN
• David Kruse · Kirkland, US
• Nir Ben-Zvi · Redmond, US
• Anders Vinberg · Kirkland, US

Key dates

• Filing date: Oct 1, 2014
• Grant date: Feb 21, 2017
• Expiry date: Nov 26, 2034

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/062
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Deploying an encrypted entity on a trusted entity is illustrated herein. A method includes, at a trusted entity, wherein the trusted entity is trusted by an authority as a result of providing a verifiable indication of certain characteristics of the trusted entity meeting certain requirements, receiving an encrypted entity from an untrusted entity. The untrusted entity is not trusted by the authority. At the trusted entity, a trust credential from the authority is used to obtain a key from a key distribution service. The key distribution service is trusted by the authority. The key is used to decrypt the encrypted entity to allow the encrypted entity to be deployed at the trusted entity.