Virtual machine migration

Patent metadata

Field	Value
Publication number	US-9251349-B2
Application number	US-201313781581-A
Country	US
Kind code	B2
Filing date	Feb 28, 2013
Priority date	Dec 15, 2010
Publication date	Feb 2, 2016
Grant date	Feb 2, 2016

Abstract

Attesting a virtual machine that is migrating from a first environment to a second environment includes in response to initiation of migration of the virtual machine from the first environment to the second environment, accessing one or more stored trust values generated during the trusted boot of the virtual machine in the first environment, determining if the accessed trust values define a security setting sufficient for the second environment, and if the accessed trust values do not define a security setting sufficient for the second environment, performing a predetermined action in relation to the migration of the virtual machine to the second environment.

First claim

The invention claimed is:

1. A method of attesting a virtual machine migrating from a first environment to a second environment comprising:
in response to initiation of a migration of the virtual machine from the first environment to the second environment, a trusted management unit of the second environment:
accessing one or more stored trust values of the virtual machine, wherein the one or more stored trust values are generated during a trusted boot of the virtual machine in the first environment, and wherein the one or more trust values comprise a first plurality of security settings that define a first security level that the virtual machine operates in at the first environment;
determining a second security level associated with the second environment, wherein the second security level is defined by a second plurality of security settings for the second environment, and wherein the second security level defines a security requirement for virtual machines operating in the second environment;
comparing the first security level to the second security level; and
in response to comparing the first security level to the second security level, determining whether the first security level is at least equivalent to or higher than the second security level; and

in response to determining that the first security level is not equivalent to or higher than the second security level, the trusted management unit of the second environment:
completing the migration of the virtual machine to the second environment; and

restricting of the virtual machine in the second environment by placing one or more limits on the operation of the virtual machine in the second environment, wherein the restricting further comprises confining the virtual machine to a particular separate virtual local area network (vLAN) until a subsequent security check is performed that verifies that the security setting of the virtual machine is equivalent to or better than the security setting defined by the second security policy for the second environment.

2. The method of claim 1 , wherein restricting operation of the virtual machine in the second environment further comprises halting the migration of the virtual machine to the second environment.

3. The method of claim 1 , wherein a director unit of the first environment transfers the one or more trust values to the trusted management unit prior to initiation of the migration of the virtual machine.

4. The method of claim 1 , wherein the one or more stored trust values are bound to the virtual machine and are always transferred whenever the virtual machine is migrated to a new environment.

5. The method of claim 1 , wherein the second security level is more stringent than the first security level.

6. The method of claim 1 , wherein the one or more stored trust values are recorded in a platform configuration register (PCR) during a boot process of the trusted boot.

7. The method of claim 1 , wherein the one or more trust values further comprise information on any updates applied to the virtual machine and a nature of the operating system of the virtual machine.

8. The method of claim 7 , wherein the second plurality of security settings further define at least one specific update that is required to be applied to any virtual machine operating in the second environment.

9. The method of claim 1 , further comprising in response to determining that the second security level is at least equivalent to or higher than the second security level, the trusted management unit of the second environment allowing the migration of the virtual machine to the second environment.

10. The method of claim 1 , wherein the one or more limits further comprises limits on operations that the virtual machine can execute in the second environment.

11. The method of claim 1 , wherein the one or more limits further comprises limits on communication channels that the virtual machine can utilize in the second environment.

Assignees

• IBM

Inventors

• Haikney David
• Mullen Shawn P
• Walker James W

Classifications

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F9/4856

  resumption being on a different machine, e.g. task migration, virtual machine migration (G06F9/5088 takes precedence) · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title