Container independent secure file system for security application containers
View Patent ↗Embodiments include method, systems and computer program products for a container independent secure file system for security application containers. In some embodiments, a request for a virtualized application container may be received. A passphrase may be obtained from a user. A key may be obtained. A files system of the virtualized application container may be prepared for a specified mount point using the passphrase and key. The file system may be initiated in response to the request.
1. A computer-implemented method comprising:
receiving a request for a virtualized application container;
obtaining, via a user device, a passphrase from a user;
obtaining a key from a key management server using a universal unique identifier (UUID), wherein the UUID corresponds to the passphrase from the user;
preparing a file system of the virtualized application container for a specified mount point determined based on the passphrase and the key, wherein the specified mount point determines which applications and plugins are available in the virtualized application container; and
initiating the file system in response to the request.
2. The computer-implemented method of claim 1 , wherein the file system of the virtualized application container is associated with an encrypted virtual disk image.
3. The computer-implemented method of claim 1 , wherein the file system of the virtualized application container is associated with an encrypted directory.
4. The computer-implemented method of claim 1 , wherein preparing the file system further comprises applying a two-factor encryption to the file system using the passphrase and the key.
5. The computer-implemented method of claim 1 , wherein the key is stored on a secure element of a host device which is separate from a central processing unit of the host device.
6. A computer program product comprising a non-transitory storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
receiving a request for a virtualized application container;
obtaining, via a user device, a passphrase from a user;
obtaining a key from a key management server using a universal unique identifier (UUID), wherein the UUID corresponds to the passphrase from the user;
preparing a file system of the virtualized application container for a specified mount point determined based on the passphrase and the key, wherein the specified mount point determines which applications and plugins are available in the virtualized application container; and
initiating the file system in response to the request.
7. The computer program product of claim 6 , wherein the file system of the virtualized application container is associated with an encrypted virtual disk image.
8. The computer program product of claim 6 , wherein the file system of the virtualized application container is associated with an encrypted directory.
9. The computer program product of claim 6 , wherein preparing the file system further comprises applying a two-factor encryption to the file system using the passphrase and the key.
10. The computer program product of claim 6 , wherein the key is stored on a secure element of a host device which is separate from a central processing unit of the host device.
11. A system, comprising:
a hardware processor in communication with one or more types of memory, the processor configured to:
receive a request for a virtualized application container;
obtain, via a user device, a passphrase from a user;
obtain a key from a key management server using a universal unique identifier (UUID), wherein the UUID corresponds to the passphrase from the user;
prepare a file system of the virtualized application container for a specified mount point determined based on the passphrase and the key, wherein the specified mount point determines which applications and plugins are available in the virtualized application container; and
initiate the file system in response to the request.
12. The system of claim 11 , wherein the file system of the virtualized application container is associated with an encrypted virtual disk image.
13. The system of claim 11 , wherein the file system of the virtualized application container is associated with an encrypted directory.
14. The system of claim 11 , wherein, to prepare the file system, the processor is further configured to apply a two-factor encryption to the file system using the passphrase and the key.
15. The system of claim 11 , wherein the key is stored on a secure element of a host device which is separate from a central processing unit of the host device.