Trusted Configuration Verification for Virtual Machines

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Data centers face challenges in verifying the integrity and configuration of virtual machine instances, particularly in ensuring that software and data configurations have not been tampered with, which is crucial for trust and security in cloud-based services.

Innovation Solution

A configuration verification service is implemented within the data center, interacting with the boot and load processes to generate and provide cryptographic checksums of loaded files, allowing authorized parties to verify the integrity of the boot configuration without relying on their own verification methods, and acting as a trusted third party to confirm the known configuration of virtual machines.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a configuration verification service is implemented to verify virtual machine configurations, then security and trust are enhanced, but device complexity increases

Engineering Contradiction:
Improveconfiguration integrityVSAvoidverification system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A configuration verification service is introduced as an intermediary component between the virtual machine boot process and authorized parties. This service intercepts boot configuration data, generates cryptographic checksums, and provides verification information to authorized entities, thereby enabling configuration verification without requiring complex verification logic in each client system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The verification system performs self-verification by automatically generating cryptographic checksums of boot configuration files and maintaining verification records. The configuration verification service autonomously monitors configuration integrity and provides verification information without requiring external intervention, reducing the complexity burden on external systems.

Inventive Principle:
Principle #25Self-service

2Measurement precision

If cryptographic checksums are generated for all loaded files, then measurement precision of configuration integrity is improved, but use of energy increases

Engineering Contradiction:
Improveconfiguration verification accuracyVSAvoidverification process energy
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent extracts only the essential verification elements - cryptographic checksums of critical boot configuration files - rather than verifying every single file. The configuration verification service focuses on generating checksums for key configuration components that determine system integrity, thereby achieving high measurement precision while minimizing the energy required for verification operations.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If a trusted third party verification service is provided, then reliability of configuration confirmation is improved, but device complexity and operational overhead increase

Engineering Contradiction:
Improvetrusted verificationVSAvoidverification process simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The configuration verification service acts as a trusted intermediary that simplifies the verification process for authorized parties. Instead of requiring clients to implement complex verification logic, the service provides pre-computed cryptographic checksums and verification records that clients can easily use to confirm configuration integrity, thereby maintaining high reliability while improving ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2965192B1Configuration and verification by trusted provider
Publication Date: 2020.05.06 AMAZON TECH INC
  • EP2965192B1 patent drawingFigure 1
  • EP2965192B1 patent drawingFigure 2
  • EP2965192B1 patent drawingFigure 3

AI summary

A computing resource is loaded with the code or data, and an audited record of the loaded code or data is generated. Furthermore, a configuration Integrity is generated based on the record of the loaded code or data. The configuration integrity verifier is sent to a requestor for verification of the code or data, the configuration integrity verifier being usable as a trusted verification of the loaded code or data.