AUTOMATED PROVISIONING OF VIRTUAL MACHINES
    2.
    发明申请
    AUTOMATED PROVISIONING OF VIRTUAL MACHINES 审中-公开
    自动提供虚拟机

    公开(公告)号:US20140019959A1

    公开(公告)日:2014-01-16

    申请号:US13547148

    申请日:2012-07-12

    IPC分类号: G06F9/455

    摘要: Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Virtual machines may be automatically provisioned with configuration information, such as the encryption keys, when the virtual machine is started. The provisioning information may be created based on a template stored on a configuration server.

    摘要翻译: 可以通过使用仅由预期接收者拥有的密钥对虚拟机之间的传输进行加密来隔离网络中的虚拟机。 在网络中,虚拟机可以在逻辑上被组织成许多社区(COI)组。 每个COI可以使用加密密钥来保护COI内的通信,使得仅COI中的其他虚拟机可以解密该消息。 当虚拟机启动时,虚拟机可能会自动配置配置信息,例如加密密钥。 可以基于存储在配置服务器上的模板来创建供应信息。

    VIRTUAL GATEWAYS FOR ISOLATING VIRTUAL MACHINES
    4.
    发明申请
    VIRTUAL GATEWAYS FOR ISOLATING VIRTUAL MACHINES 有权
    用于隔离虚拟机的虚拟网关

    公开(公告)号:US20140019750A1

    公开(公告)日:2014-01-16

    申请号:US13547143

    申请日:2012-07-12

    IPC分类号: H04L29/06

    摘要: Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Virtual machines may further be isolated through a virtual gateway assigned to handle all communications between a virtual machine and a device outside of the virtual machine's COI. The virtual gateway may be a separate virtual machine for handling decrypting and encrypting messages for transmission between virtual machines and other devices.

    摘要翻译: 可以通过使用仅由预期接收者拥有的密钥对虚拟机之间的传输进行加密来隔离网络中的虚拟机。 在网络中,虚拟机可以在逻辑上被组织成许多社区(COI)组。 每个COI可以使用加密密钥来保护COI内的通信,使得仅COI中的其他虚拟机可以解密该消息。 虚拟机可以进一步通过被分配用于处理虚拟机和虚拟机的COI之外的设备之间的所有通信的虚拟网关来隔离。 虚拟网关可以是用于处理解密和加密消息以在虚拟机和其他设备之间传输的单独的虚拟机。

    CRYPTOGRAPHIC ISOLATION OF VIRTUAL MACHINES
    5.
    发明申请
    CRYPTOGRAPHIC ISOLATION OF VIRTUAL MACHINES 审中-公开
    虚拟机的拼接分离

    公开(公告)号:US20140019745A1

    公开(公告)日:2014-01-16

    申请号:US13547138

    申请日:2012-07-12

    IPC分类号: H04L29/06

    摘要: Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Security may be further enhanced by establishing a session key for use during communications between a first and a second virtual machine. The session key may be encrypted with the COI key.

    摘要翻译: 可以通过使用仅由预期接收者拥有的密钥对虚拟机之间的传输进行加密来隔离网络中的虚拟机。 在网络中,虚拟机可以在逻辑上被组织成许多社区(COI)组。 每个COI可以使用加密密钥来保护COI内的通信,使得仅COI中的其他虚拟机可以解密该消息。 可以通过建立在第一和第二虚拟机之间的通信期间使用的会话密钥来进一步增强安全性。 会话密钥可以用COI密钥加密。

    Systems and methods for network communications
    7.
    发明授权
    Systems and methods for network communications 有权
    网络通信的系统和方法

    公开(公告)号:US09215227B2

    公开(公告)日:2015-12-15

    申请号:US13974083

    申请日:2013-08-23

    IPC分类号: H04L29/06

    摘要: Systems and methods enable a method including: providing a first system; generating data to be sent over a network link; determining a transport protocol that will be used to transmit data over the network communication link; negotiating connection services to be performed on data that will transmitted over the network communication link; sending a request to open a network communication link; sending a request to the connectivity services of the second system for credentials of the second system; receiving the credentials from the connectivity services module of the second system; verifying that the credentials match an authenticated computer system; opening a network connection between the first system and the second system when the second system's credentials have been verified by the connectivity services module of the first system; and transmitting the data to the second system according to the determining network protocol and negotiated connection services.

    摘要翻译: 系统和方法实现了一种方法,包括:提供第一系统; 生成要通过网络链路发送的数据; 确定将用于通过网络通信链路传输数据的传输协议; 对将通过网络通信链路传输的数据执行协商连接服务; 发送打开网络通信链路的请求; 向第二系统的连接服务发送对第二系统的凭证的请求; 从第二系统的连接服务模块接收凭证; 验证证书与认证的计算机系统匹配; 当第二系统的凭证已被第一系统的连接服务模块验证时,在第一系统和第二系统之间打开网络连接; 以及根据确定的网络协议和协商的连接服务将数据发送到第二系统。

    CONNECTIVITY SERVICES APPLICATION PROGRAMMING INTERFACE
    8.
    发明申请
    CONNECTIVITY SERVICES APPLICATION PROGRAMMING INTERFACE 有权
    连接服务应用编程接口

    公开(公告)号:US20150058946A1

    公开(公告)日:2015-02-26

    申请号:US13974083

    申请日:2013-08-23

    IPC分类号: H04L29/06

    摘要: Systems and methods are disclosed herein to method comprising: providing a first system; generating data to be sent over a network link; determining a transport protocol that will be used to transmit data over the network communication link; negotiating connection services to be performed on data that will transmitted over the network communication link; sending a request to open a network communication link; sending a request to the connectivity services of the second system for credentials of the second system; receiving the credentials from the connectivity services module of the second system; verifying that the credentials match an authenticated computer system; opening a network connection between the first system and the second system when the second system's credentials have been verified by the connectivity services module of the first system; and transmitting the data to the second system according to the determining network protocol and negotiated connection services.

    摘要翻译: 本文公开了系统和方法,其方法包括:提供第一系统; 生成要通过网络链路发送的数据; 确定将用于通过网络通信链路传输数据的传输协议; 对将通过网络通信链路传输的数据执行协商连接服务; 发送打开网络通信链路的请求; 向第二系统的连接服务发送对第二系统的凭证的请求; 从第二系统的连接服务模块接收凭证; 验证证书与认证的计算机系统匹配; 当第二系统的凭证已被第一系统的连接服务模块验证时,在第一系统和第二系统之间打开网络连接; 以及根据确定的网络协议和协商的连接服务将数据发送到第二系统。