Trust Authority for Secure Workload Attestation in Virtualized Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized computing systems, there is a need to securely store workload attestation reports and manage identity certificates to protect sensitive data from hypervisor access, ensuring the integrity and authenticity of workloads and container image disks, while existing solutions lack effective mechanisms for secure attestation and encryption.
Innovation Solution
The implementation of hardware-based secure attestation using a trusted platform module (TPM) and Secure Encrypted Virtualization (SEV) to create a secure channel for workload validation, certificate distribution, and integrity key management, ensuring that workloads and container image disks are not tampered with and maintaining their authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud vendors use traditional virtualization without encryption, then system complexity and operational ease are maintained, but security is compromised as the hypervisor can access guest memory containing sensitive data
Solution Approach 1:
The patent introduces a Trust Authority as an intermediary component that mediates between the hypervisor and VMs. The Trust Authority validates attestation reports from VMs and manages encryption keys, creating a trusted mediation layer that enables secure encryption without requiring changes to the existing hypervisor architecture. This resolves the contradiction by adding security functionality through a dedicated intermediary rather than complicating the core virtualization system.
Solution Approach 2:
The patent segments security functions into separate components: the Trusted Platform Module (TPM) in each VM generates attestation reports, the Trust Authority validates these reports and manages keys, and the encryption/decryption operations are performed separately from the hypervisor's main processing. This segmentation allows security to be added as a modular layer without increasing overall system complexity.
2Reliability
If cloud vendors implement encryption to protect VM memory from hypervisor access, then security improves, but verification of workload authenticity becomes more difficult
Solution Approach 1:
The patent implements preliminary attestation where VMs generate attestation reports containing cryptographic measurements of their workload authenticity before encryption takes place. The Trust Authority validates these reports in advance and establishes trusted communication channels. This preliminary verification action resolves the contradiction by proving workload authenticity before encryption obscures the data, making verification easier rather than more difficult.
Solution Approach 2:
The patent creates a feedback loop where VMs continuously generate attestation reports that are validated by the Trust Authority. This ongoing feedback mechanism provides continuous verification of workload authenticity while maintaining encryption, resolving the contradiction by making verification an integrated part of the encrypted operation rather than a separate difficult process.
3Ease of operation
If cloud customers store sensitive data in VMs, then data availability and operational ease are maintained, but security risk increases as the hypervisor can access the data
Solution Approach 1:
The patent changes the encryption state parameter of VM data dynamically. Data is encrypted when stored in VM memory and decrypted only when needed for legitimate access, with the encryption/decryption controlled by Trust Authority-validated attestation. This parameter change resolves the contradiction by making data inaccessible to unauthorized parties (including the hypervisor) while maintaining accessibility for authorized operations.
4Productivity
If cloud vendors deploy traditional virtualization systems, then productivity and ease of operation are maintained, but compliance with regulatory laws becomes difficult
Solution Approach 1:
The patent implements self-service security where VMs automatically generate attestation reports using their TPM modules, and the Trust Authority automatically validates these reports and manages encryption keys without requiring manual security configuration. This automation maintains deployment productivity while ensuring compliance, as the security functions serve themselves without adding operational burden.
Data Source
AI summary
An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes storing, in a trust authority, a pre-defined attestation report for a workload executing in a virtual machine (VM) managed by the virtualization layer, the pre-defined attestation report including a hash of at least a portion of an image of the VM; receiving, at the trust authority from a security module of a host in which the VM executes, an attestation report generated by measuring memory of the VM; comparing the attestation report with the pre-defined attestation report; and generating an indication of validity for the workload based on a result of the comparison.