公开(公告)号：GB2594225A

公开(公告)日：2021-10-20

申请号：GB202112113

申请日：2020-01-31

Applicant: IBM

Inventor： UTZ BACHER ,  REINHARD BUENDGEN ,  PETER MORJAN ,  JANOSCH FRANK

IPC: G06F9/455 ,  G06F21/53

Abstract: A computer-implemented method for creating a secure software container may be provided. The method comprises providing a first layered software container image,transforming all files, except corresponding metadata, of each layer of the first layered software container image into a volume, the volume comprises a set of blocks, wherein each layer comprises an incremental difference to a next lower layer, encrypting each block of the set of blocks of a portion of the layers, and storing each encrypted set of the blocks as a layer of an encrypted container image along with unencrypted metadata for rebuilding an order of the set of blocks equal to an order of the first layered software container image, so that a secure encrypted software container is created.

公开(公告)号：GB2594225B

公开(公告)日：2022-03-02

申请号：GB202112113

申请日：2020-01-31

Applicant: IBM

Inventor： UTZ BACHER ,  REINHARD BUENDGEN ,  PETER MORJAN ,  JANOSCH FRANK

IPC: G06F9/455 ,  G06F21/53

Abstract: A computer-implemented method for creating a secure software container. The method comprises providing a first layered software container image, transforming all files, except corresponding metadata, of each layer of the first layered software container image into a volume, the volume comprises a set of blocks, wherein each layer comprises an incremental difference to a next lower layer, encrypting each block of the set of blocks of a portion of the layers, and storing each encrypted set of the blocks as a layer of an encrypted container image along with unencrypted metadata for rebuilding an order of the set of blocks equal to an order of the first layered software container image, so that a secure encrypted software container is created.