VM Workload Attestation Using Firmware Hashes of Kernels and Apps

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing hardware VM attestation implementations, such as SEV-SNP, cannot distinguish between VMs with the same firmware but different OS kernels and applications, limiting their effectiveness in verifying the integrity of entire workloads in public clouds.

Innovation Solution

A VM packaging tool that customizes firmware with hashes of OS kernels and applications, bundling them into a VM package, enabling hardware VM attestation to verify the integrity of the entire workload by producing unique signed hashes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If workloads are migrated to public clouds to improve performance and resiliency, then workload performance and availability are improved, but security risks and vulnerability to attacks increase

Engineering Contradiction:

Improveworkload availabilityVSAvoidsecurity threats

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a remote attestation system as an intermediary layer between the workload and the public cloud infrastructure. This system uses cryptographic proof mechanisms to verify workload integrity and confidentiality without requiring direct trust in the cloud provider, effectively mediating the security trust relationship while enabling cloud migration benefits

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical security measures (firewalls, intrusion detection) with cryptographic and hardware-based security mechanisms. By using hardware attestation features and cryptographic proof, the system achieves more robust security verification that is mathematically provable rather than relying on conventional network security layers

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If hardware-based security features are used to protect workloads, then security verification capability is improved, but device complexity and implementation difficulty increase

Engineering Contradiction:

Improvesecurity verificationVSAvoidattestation system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent leverages universal hardware attestation features that can be used across different public cloud platforms and workload types. By designing a framework that uses general-purpose cryptographic and hardware verification capabilities rather than platform-specific solutions, the system reduces complexity while maintaining broad security verification applicability

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent creates a simplified software representation (attestation client) that interfaces with complex hardware security features. This software layer copies and abstracts the hardware attestation functionality, presenting a simplified API to the workload while the underlying hardware provides the complex security verification capabilities

Inventive Principle:

Principle #26Copying

Data Source

PatentUS12619456B2Remote attestation of workloads running in virtual machines

Publication Date: 2026.05.05 VMWARE INC

AI summary

In one set of embodiments, a computer system executing a virtual machine (VM) packaging tool can receive a reference to a container comprising one or more applications of a workload and a reference to an operating system (OS) kernel to be included in the workload. The computer system can inject an agent into the container that is configured to request execution of a hardware VM attestation function, combine contents of the container and the OS kernel into an image file, and compute a hash of the image file. The computer system can then generate a firmware for the workload that includes the hash.