Virtual Machine Migration Security via Centralized Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a virtual machine migration decision-making solution that ensures the security of virtual machine migration in a virtual trusted platform, as existing methods do not adequately address the security concerns during migration.
Innovation Solution
A communication system and method that involves a Migration Authority (MA) to perform security checks on both the source and target host platforms, as well as the virtual machine, to determine if migration is permitted, based on evaluation results from these platforms and the virtual machine itself, ensuring the security of both the virtual machine and the target platform post-migration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual machine migration is implemented to improve load balance and system efficiency, then productivity is improved, but security risks increase due to potential threats during migration
Solution Approach 1:
The patent performs security checks on the source host platform, target host platform, and virtual machine before migration occurs. The Migration Authority evaluates security attributes of all components in advance and issues a migration decision only when security requirements are satisfied, preventing security risks before they can affect the system.
Solution Approach 2:
The patent introduces a Migration Authority as an intermediary component that mediates between the source host platform and target host platform. This authority independently evaluates security attributes of the virtual machine and host platforms, making informed migration decisions that balance productivity improvements with security risk mitigation.
2Reliability
If security checks are performed on source and target platforms to ensure migration security, then security is improved, but device complexity increases due to additional evaluation mechanisms
Solution Approach 1:
The Migration Authority performs multiple functions including security evaluation of source platforms, security evaluation of target platforms, and issuance of migration decisions. By consolidating these functions into a single multi-functional component, the patent reduces overall system complexity while maintaining comprehensive security checks.
3Reliability
If comprehensive security evaluation is conducted on virtual machine and host platforms, then reliability is improved, but loss of time increases due to additional evaluation steps
Solution Approach 1:
The patent implements a feedback mechanism where the Migration Authority receives security attribute information from both source and target platforms, evaluates this information against predefined security requirements, and issues migration decisions based on this feedback. This structured feedback process ensures comprehensive evaluation while maintaining efficient decision-making through clear evaluation criteria.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method, an apparatus, and a system for making a decision about virtual machine migration are provided. The system includes a source host platform of a virtual machine to be migrated, configured to send a migration request to a Migration Authority (MA), and migrate the virtual machine to be migrated to a target host platform according to a received migration decision-making result; the MA, configured to perform security checks on the source host platform and the target host platform according to the migration request, to obtain a first evaluation result of the source host platform and a second evaluation result of the target host platform, acquire a third evaluation result of the virtual machine to be migrated, and return a corresponding migration decision-making result to the source host platform according to the first evaluation result, the second evaluation result, and the third evaluation result; and the target host platform of the virtual machine to be migrated, configured to accept the virtual machine to be migrated. Therefore, not only the security of the virtual machine after migration to the target platform, but also the security of the target platform after accepting the virtual machine is ensured.