Patent Application

App. No. 15/026,223

Abstract

Claims (63)

1 - 25 . (canceled)

26 . A computer readable medium comprising computer executable instructions stored thereon that when executed cause some of the one or more processing units to:

intercept a boot process of a virtual machine;

calculate identifying information about an operating system of the virtual machine;

verify the identifying information; and

allow completion of the boot process of the virtual machine upon verification of the identifying information.

27 . The computer readable medium of claim 26 , wherein the instructions to calculate the identifying information further comprise instructions to compare the identifying information to a whitelist.

28 . The computer readable medium of claim 26 , further comprising computer executable instructions stored thereon that when executed cause the one or more processing units to:

transmit the identifying information to a remote computer.

29 . The computer readable medium of claim 26 , wherein the instructions to calculate the identifying information further comprise instructions to generate a hash of at least a portion of the boot process.

30 . The computer readable medium of claim 29 , wherein the instructions to calculate the identifying information further comprise instructions to compare the hash with a whitelist.

31 . A system comprising:

one or more processors;

a memory, coupled to the one or more processors, on which are stored instructions, comprising instructions that when executed cause some of the one or more processors to:

create and run a virtual machine;

intercept a boot process of an operating system of the virtual machine;

calculate identifying information about the operating system; and

transmit the identifying information to a remotely located server to verify whether the operating system is trusted based on the identifying information;

receive a response from the server indicating whether the operating system is trusted; and

determine completion of the boot process based upon the response.

32 . The system of claim 31 , wherein the instructions to calculate the identifying information further comprise instructions to generate a hash of at least a selected portion of the boot process.

33 . The system of claim 32 , wherein the instructions to calculate the identifying information further comprise instructions to compare the hash with a whitelist to verify the hash.

34 . The system of claim 31 , wherein the whitelist is determined by a version of the operating system.

35 . The system of claim 31 , wherein the instructions to determine the completion of the boot process further comprise instructions to allow the boot process to complete if the response indicates the operating system is trusted, and terminate the boot process if the response indicates the operating system is not trusted.

36 . A system comprising:

a server including one or more processors and a memory adapted to store computer executable instructions, the computer executable instructions stored thereon that when executed cause some of the one or more processors to:

receive identifying information corresponding to an operating system from a virtual machine;

verify whether the operating system is trusted based on the identifying information; and

transmit a response to the virtual machine indicating whether the operating system is trusted.

37 . The system of claim 36 , wherein the identifying information comprises a hash of at least a selected portion of the boot process of the virtual machine.

38 . The system of claim 37 , wherein the instructions to verify whether the operating system is trusted further comprise instructions to compare the hash with a whitelist.

39 . The system of claim 38 , wherein the whitelist is stored in a database on the server.

40 . The system of claim 39 , wherein the whitelist is selected from a plurality of whitelists stored in the database.

41 . The system of claim 40 , wherein the whitelist is determined by a version of the operating system.

42 . The system of claim 36 , wherein the instructions to transmit a response to the virtual machine further comprise instructions to transmit a response to allow the boot process to complete if the operating system is trusted, and to transmit a response to terminate the boot process if the operating system is not trusted.

43 . A method of intercepting a virtual machine boot process comprising:

intercepting a boot process of a virtual machine;

calculating identifying information;

verifying the identifying information; and

allowing completion of the boot process based upon verification of the identifying information.

44 . The method of claim 43 , further comprising:

generating a hash of at least a selected portion of the boot process; and

comparing the hash with a whitelist to verify the hash.

45 . The method of claim 43 , further comprising:

determining if the identifying information is verified; and

if the identifying information is verified, then allowing the boot process to complete, and

if the identifying information not verified, then terminating the boot process.

46 . A system comprising:

computing means to intercept a boot process of an operating system of a virtual machine;

computing means to calculate identifying information about the operating system;

transmitting means to transmit the identifying information to a remote server;

receiving means to receive a response at the virtual machine from the remote server; and

computing means to allow completion of the boot process of the virtual machine based upon the response.

47 . The system of claim 46 , wherein the computing means to calculate the identifying information further comprises computing means to generate a hash of at least a selected portion of the boot process.

48 . The system of claim 46 , wherein the computing means to allow the completion of the boot process further comprises:

computing means to allow the boot process to complete if the response indicates that the identifying information is verified and to terminate the boot process if the response indicates that identifying information is not verified.

49 . An apparatus comprising:

receiving means to receive identifying information from a virtual machine;

computing means to verify the identifying information; and

transmitting means to transmit a response to the virtual machine for determining completion of a boot process of the virtual machine.

50 . The apparatus of claim 49 , further comprising:

wherein the identifying information comprises a hash of at least a selected portion of the boot process of the virtual machine; and

wherein the computing means to verify the identifying information further comprises computing means to compare the hash with a whitelist.

Assignments (8)