Virtual machine access control

Patent metadata

Field	Value
Publication number	US-10701080-B2
Application number	US-201715698056-A
Country	US
Kind code	B2
Filing date	Sep 7, 2017
Priority date	May 6, 2015
Publication date	Jun 30, 2020
Grant date	Jun 30, 2020

Abstract

A system is provided and includes a broadcasting device configured to emit a beacon signal over a predefined range and a mobile computing device. The mobile computing device is configured to run a host operating system at any location. The mobile computing device is further configured to run a virtual machine associated with the beacon signal within the host operating system but only when the computing device is in range of the beacon signal of a predefined strength.

First claim

What is claimed is:

1. A method of mobile computing device operation, comprising:
receiving a beacon signal at a computing device only upon the computing device entering within a beacon signal range;
determining that the computing device is in the beacon signal range from a strength thereof being above a predefined strength;
determining that a virtual machine associated with the beacon signal exists in the computing device;
running an instance of the virtual machine on the computing device within a host operating system using a component of the beacon signal while the computing device determinably remains within the beacon signal range from the strength thereof remaining above the predefined strength, wherein the component of the beacon signal comprises a private key by which the virtual machine is decrypted; and
enabling termination of the running of the instance of the virtual machine when the computing device is determinably outside beacon signal range from the strength thereof being below the predefined strength.

2. The method according to claim 1 , wherein the receiving is initiated by a user.

3. The method according to claim 1 , further comprising accessing instructions relating to processing of the virtual machine upon the computing device leaving the beacon signal range.

4. The method according to claim 1 , further comprising:
checking for a provisioning server signal within the beacon signal range;
if the provisioning server signal exists, determining whether a later version of the virtual machine exists from the provisioning server signal; and
if the later version of the virtual machine exists, taking an action with respect to the later version of the virtual machine.

5. The method according to claim 1 , wherein, if the virtual machine associated with the beacon signal does not exist in the firmware of the computing device, the method further includes:
determining whether the computing device is authorized to receive the virtual machine; and
if the computing device is authorized to receive the virtual machine, taking an action in accordance with the determining.

6. The method according to claim 1 , further comprising:
determining whether the computing device is at a beacon signal range periphery from the strength thereof; and
alerting a user of the computing device that the user is at the beacon signal range periphery.

Assignees

• IBM

Inventors

• Dow Eli M
• Rohde Douglas E

Classifications

• H04W12/64 Primary

  using geofenced areas · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W12/08

  Access security · CPC title

• G06F2009/45575

  Starting, stopping, suspending or resuming virtual machine instances · CPC title

• G06F21/88

  Detecting or preventing theft or loss · CPC title