Virtual Machine Image Migration via Key Management Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing environments pose challenges in securing the transmission and provisioning of virtual machine images due to the storage of sensitive data outside enterprise control, limiting protection of confidential information.
Innovation Solution
A system utilizing a key management server and cryptographic key pairs to securely transmit and provision virtual machine images, where the customer computing device encrypts the images with a symmetric key, which is then encrypted using a customer public key, and the key management server manages and re-encrypts keys for secure provisioning on a host computing device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual machine images are stored in an object store of the cloud service provider outside enterprise control, then cloud computing deployment efficiency is improved, but data security and confidentiality protection deteriorate
Solution Approach 1:
The system segments the encryption key management from the virtual machine image storage. The enterprise retains control of encryption keys through a key management server, while VM images are stored in the cloud provider's object store. This segmentation allows efficient cloud deployment while maintaining enterprise control over security credentials.
Solution Approach 2:
The key management server acts as an intermediary between the enterprise and the cloud service provider. It manages cryptographic keys and controls access to encrypted VM images, enabling the enterprise to deploy efficiently in the cloud while maintaining security control through this intermediary component.
2Reliability
If cryptographic key management is implemented for secure VM image transmission, then data protection is improved, but system complexity increases
Solution Approach 1:
The key management server automatically performs key generation, encryption, decryption, and key rotation operations without manual intervention. The system self-manages the cryptographic infrastructure, reducing operational complexity while maintaining strong security protections for VM images.
Solution Approach 2:
The key management server provides multiple security functions including key generation, encryption, decryption, key rotation, and access control within a single unified system. This multi-functionality consolidates what could be multiple separate security components into one system, reducing overall complexity.
Data Source
AI summary
A method, device, and system for securely migrating and provisioning a virtual machine image to a host device of a cloud service provider environment (CSPE) is disclosed. A customer device encrypts a virtual machine image (VMI) and stores the VMI in the CSPE. The host device retrieves the encrypted VMI from the object store and sends host trust data (including a symmetric key extracted from the encrypted VMI, the symmetric key being encrypted with the customer public key) to a key management server for trust attestation. If the key management server successfully attests the host device, the key management server decrypts the encrypted symmetric key using the customer private key and re-encrypts the symmetric key using the host public key. The host device receives the re-encrypted symmetric key from the key management server, decrypts it using the host private key, and decrypts the encrypted VMI using the symmetric key.