Verschlüsselter und Integritätsgeschützter Speicher für eine Virtuelle Maschine

Details

Veröffentlichungs-Nr.

EP4818941

Anmeldetag

9. März 2026

Veröffentlichung

7. Oktober 2026

Rechtsraum

EP

Abstract

Various embodiments relate to a method implemented in a computer system with a processor system, involving loading a container image as a first read-only filesystem volume for a virtual machine's guest operating system (OS). This includes obtaining a root integrity hash, validating a first hash tree within the container image, and ensuring data integrity. A virtual disk image is loaded as a second read-write filesystem volume, utilizing an ephemeral encryption key stored in the VM's memory. A filesystem is created with encryption and integrity protection features, enabling data encryption and hash-based validation. A third filesystem volume is created as a union of the first and second volumes, directing writes to the second volume. This third volume is exposed as a system volume for the guest OS, ensuring secure and validated data handling within the virtual environment.

Anmelder

Firma

Microsoft Technology Licensing, LLC

Land

🇺🇸 USA