公开(公告)号：WO2020205514A1

公开(公告)日：2020-10-08

申请号：PCT/US2020/025211

申请日：2020-03-27

Applicant: INTEL CORPORATION ,  GIRISHKUMAR PARIKH, Bhushan ,  TADEPALLI, Hari K. ,  PALERMO, Stephen T. ,  O'DWYER, Thomas Joseph ,  BHARGAV-SPANTZEL, Abhilasha ,  SMITH, Ned M.

Inventor： GIRISHKUMAR PARIKH, Bhushan ,  TADEPALLI, Hari K. ,  PALERMO, Stephen T. ,  O'DWYER, Thomas Joseph ,  BHARGAV-SPANTZEL, Abhilasha ,  SMITH, Ned M.

IPC: G06F21/44 ,  G06F21/45 ,  H04L9/08 ,  H04L9/30 ,  H04L9/06

Abstract: An apparatus operating as a certificate authority (CA) is described. The apparatus can perform operations including receiving, from a plurality of requesting devices, a request to join a group. The request can include identification information for the group and attestation evidence for the plurality of requesting devices. Responsive to receiving the request, the apparatus can provide a group certificate for the group to the plurality of requesting devices.

公开(公告)号：WO2019183980A1

公开(公告)日：2019-10-03

申请号：PCT/CN2018/081485

申请日：2018-03-31

Applicant: INTEL CORPORATION ,  WEI, Changzheng ,  LI, Weigang ,  ZHOU, Danny T. ,  WANG, Junyuan ,  TADEPALLI, Hari K. ,  PATEL, Rashmin N.

Inventor： WEI, Changzheng ,  LI, Weigang ,  ZHOU, Danny T. ,  WANG, Junyuan ,  TADEPALLI, Hari K. ,  PATEL, Rashmin N.

IPC: H04L29/06

Abstract: Technologies for securing a virtualization network function (VNF) image includes a security server to generate a wrapping cryptographic key to wrap a private key of the VNF image and replace the private key with the wrapped private key to secure the private key. During operation, the VNF image may be authenticated by a network function virtualization (NFV) server as needed. Additionally, the signature of the VNF image may be updated each time the VNF image is shutdown to ensure the continued authenticity of the VNF image.

公开(公告)号：WO2017112256A1

公开(公告)日：2017-06-29

申请号：PCT/US2016/063334

申请日：2016-11-22

Applicant: INTEL CORPORATION

Inventor： PALERMO, Stephen T. ,  TADEPALLI, Hari K. ,  PATEL, Rashmin N. ,  HERDRICH, Andrew J. ,  VERPLANKE, Edwin

IPC: G06F9/455

CPC classification number: H04L63/04 ,  G06F21/53 ,  G06F2221/2141 ,  H04L41/0806 ,  H04L41/0893 ,  H04L43/0847 ,  H04L63/102

Abstract: Technologies for enforcing virtual machine network access control include a network computing device that includes a plurality of virtual machines. The network computing device is configured to receive an access request from a virtual function assigned to a requesting virtual machine of the network computing device. The network computing device is additionally configured to determine a first privilege level assigned to the requesting machine and a second privilege level assigned to the destination virtual machine, and determine whether the requesting virtual machine is authorized to access the destination virtual machine based on a comparison of the first and second privilege levels. Upon determining the requesting virtual machine is authorized to access the destination virtual machine, the network computing device is additionally configured to allow the requesting virtual machine access to the destination virtual machine. Other embodiments are described herein.

Abstract translation: 用于实施虚拟机网络访问控制的技术包括包括多个虚拟机的网络计算设备。 网络计算设备被配置为从分配给网络计算设备的请求虚拟机的虚拟功能接收访问请求。 网络计算设备另外被配置为确定分配给请求机器的第一特权级别和分配给目的地虚拟机的第二特权级别，并且基于以下内容的比较来确定请求虚拟机是否被授权访问目的地虚拟机 第一和第二特权级别。 在确定请求虚拟机被授权访问目的地虚拟机之后，网络计算设备另外被配置为允许请求虚拟机访问目的地虚拟机。 这里描述了其他实施例。