Sean P Allen

US Patent:

20220413883, Dec 29, 2022

Filed:

Jun 25, 2021

Appl. No.:

17/357999

Inventors:

- Redmond WA, US
Stavros VOLOS - Cambridge, GB
Sean ALLEN - New York City NY, US
Antonio Nino DIAZ - Cambridge, GB
John STARKS - Seattle WA, US
Ken GORDON - London, GB
Manuel COSTA - Cambridge, GB

International Classification:

G06F 9/455
G06F 9/445
H04L 9/08
H04L 9/32

Abstract:

A system comprising a hosting service configured to perform: providing, to a trusted entity on a central processing unit, a command for a launch of a virtual machine (VM); assigning, to the VM, at least a portion of memory for the guest operating system; submitting, to the trusted entity, a request to measure an address space of the VM to provide a measurement digest of the address space of the guest operating system; including, in a configuration object, a policy provided by the user for the service logic, wherein the policy defines one or more rules for the service logic, wherein the one or more rules include at least one rule for which containers may run in the guest operating system; hashing the policy to provide a hash digest of the policy; submitting, to the trusted entity, the hash digest of the policy; and completing the launch of the VM.