Ultravisor Secure Partition for Cloud Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud computing security techniques fail to adequately protect client data and application code from unauthorized access, particularly in public cloud environments, where clients lack visibility into who has access to their sensitive data and programs, and existing solutions do not prevent code from intentionally or inadvertently revealing customer data.
Innovation Solution
A method involving a secure virtual machine architecture with an ultravisor that controls access to shared memory, ensuring only authorized entities can access client data and application code, using a token system to restrict access and encrypting data in transit and storage, thereby preventing unauthorized access and data leaks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If cloud computing uses shared infrastructure with multiple users, then resource utilization and productivity improve, but security and confidentiality of client data deteriorate
Solution Approach 1:
The system segments the cloud infrastructure into isolated virtual machine environments, where each client's data and applications run in separate, sandboxed VMs. This segmentation allows multiple users to share physical resources while maintaining strict security boundaries that prevent unauthorized access between tenants, thus resolving the contradiction between resource utilization and security.
Solution Approach 2:
The patent implements nested virtualization where virtual machines are nested within a secure container environment managed by the ultravisor. Each VM is further nested within encryption layers and access control mechanisms. This multi-layered nesting structure enables shared resource access while maintaining hierarchical security controls that protect client data confidentiality.
2Reliability
If cloud providers implement comprehensive security measures, then data protection improves, but system complexity increases
Solution Approach 1:
The ultravisor implements self-service security mechanisms that automatically enforce access controls, encryption, and isolation policies without requiring manual configuration or human intervention. The system self-manages security credentials, automatically provisions secure environments, and dynamically adjusts access permissions based on predefined policies, thereby maintaining high data protection while minimizing operational complexity.
Solution Approach 2:
The patent employs universal security components that perform multiple functions simultaneously. The ultravisor, for example, provides virtualization management, security enforcement, encryption key management, and access control all through a single unified layer. This multi-functionality reduces overall system complexity by consolidating security mechanisms rather than implementing separate systems for each security function.
3Reliability
If access control mechanisms are strengthened, then unauthorized access prevention improves, but ease of operation deteriorates
Solution Approach 1:
The patent introduces an intermediary authentication layer that mediates between users and the secure virtual machine environment. This intermediary handles complex security protocols, credential verification, and access token management automatically, presenting a simplified interface to users while enforcing strict security controls in the background. This resolves the contradiction by hiding complexity from users while maintaining strong access control.
Solution Approach 2:
The system dynamically changes security parameters such as access tokens, encryption keys, and permission levels based on user identity, context, and required operations. Rather than using static, complex access control lists, the system adjusts security parameters in real-time based on predefined policies, making access control more intuitive and easier to operate while maintaining strong security enforcement.
Data Source
AI summary
A secure cloud computing environment protects the confidentiality of application code from a customer while simultaneously protecting the confidentiality of a customer's data from intentional or inadvertent leaks by the application code. This result is accomplished without the need to trust the application code and without requiring human surveillance or intervention. A client secure virtual machine (SVM) is accessible by a client who supplies commands, operand data and application data. An appliance SVM has the application code loaded therein and includes an application program interface that accesses a memory area shared by both SVMs. All access to the appliance SVM is initially revoked by an ultravisor, except for the shared memory. The appliance SVM processes the commands without ever saving any persistent state of the application data. The ultravisor manages an SVM by maintaining exclusive control over a device tree used by the operating system of the SVM.