利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

3 条记录 (耗时 0.011 秒)

    ENCRYPTION ARCHITECTURE
    2.
    发明公开
    ENCRYPTION ARCHITECTURE 审中-公开
    加密架构

    公开(公告)号：EP3161718A1

    公开(公告)日：2017-05-03

    申请号：EP14896895.1

    申请日：2014-12-30

    申请人： Nicira Inc.

    发明人： THOTA, Kiran, Kumar ,  FEROZ, Azeem ,  WIESE, James, C.

    IPC分类号： G06F21/60 ,  H04L9/08

    CPC分类号： G06F21/602 ,  G06F9/45558 ,  G06F9/542 ,  G06F21/56 ,  G06F21/568 ,  G06F21/6236 ,  G06F2009/45587 ,  G06F2221/034 ,  G09C1/00 ,  H04L9/14 ,  H04L63/0428 ,  H04L63/123 ,  H04L63/1408 ,  H04L63/1441 ,  H04L2209/24

    摘要： For a host that executes one or more guest virtual machines (GVMs), some embodiments provide a novel encryption method for encrypting the data messages sent by the GVMs. The method initially receives a data message to send for a GVM executing on the host. The method then determines whether it should encrypt the data message based on a set of one or more encryption rules. When the process determines that it should encrypt the received data message, it encrypts the data message and forwards the encrypted data message to its destination; otherwise, the method just forwards the received data message unencrypted to its destination. In some embodiments, the host encrypts differently the data messages for different GVMs that execute on the host. When two different GVMs are part of two different logical overlay networks that are implemented on common network fabric, the method in some embodiments encrypts the data messages exchanged between the GVMs of one logical network differently than the data messages exchanged between the GVMs of another logical network. In some embodiments, the method can also encrypt different types of data messages from the same GVM differently. Also, in some embodiments, the method can dynamically enforce encryption rules in response to dynamically detected events, such as malware infections.

    摘要翻译： 对于执行一个或多个访客虚拟机（GVM）的主机，一些实施例提供了用于加密由GVM发送的数据消息的新型加密方法。 该方法最初接收要发送给在主机上执行的GVM的数据消息。 然后该方法基于一组一个或多个加密规则确定它是否应该加密数据消息。 当进程确定它应该加密接收到的数据消息时，它加密数据消息并将加密的数据消息转发到其目的地; 否则，该方法只是将未加密的接收到的数据消息转发到其目的地。 在一些实施例中，主机不同地加密在主机上执行的不同GVM的数据消息。 当两个不同的GVM是在公共网络结构上实现的两个不同逻辑覆盖网络的一部分时，该方法在一个实施例中加密在一个逻辑网络的GVM之间交换的数据消息，而不是在另一个逻辑网络的GVM之间交换的数据消息 。 在一些实施例中，该方法还可以不同地加密来自相同GVM的不同类型的数据消息。 而且，在一些实施例中，该方法可以响应于动态检测到的事件（诸如恶意软件感染）而动态地实施加密规则。

    ENCRYPTION ARCHITECTURE
    3.
    发明公开
    ENCRYPTION ARCHITECTURE 审中-公开

    公开(公告)号：EP3531332A1

    公开(公告)日：2019-08-28

    申请号：EP19169431.4

    申请日：2014-12-30

    申请人： Nicira Inc.

    发明人： THOTA, Kiran, Kumar ,  FEROZ, Azeem ,  WIESE, James

    IPC分类号： G06F21/60 ,  H04L9/08 ,  H04L29/06 ,  G06F9/455

    摘要： A method for encrypting messages sent by guest virtual machines (GVMs) on a host. The method initially receives a data message to send for a GVM executing on the host. The method then determines whether it should encrypt the data message based on a set of one or more encryption rules. If yes, it encrypts the data message and forwards the encrypted data message to its destination; otherwise, the method just forwards the received data message unencrypted to its destination. In some embodiments, the host encrypts differently the data messages for different GVMs that execute on the host. When two different GVMs are part of two different logical overlay networks that are implemented on common network fabric, the method in some embodiments encrypts the data messages exchanged between the GVMs of one logical network differently than the data messages exchanged between the GVMs of another logical network. In some embodiments, the method can also encrypt different types of data messages from the same GVM differently. Also, in some embodiments, the method can dynamically enforce encryption rules in response to dynamically detected events, such as malware infections.