公开(公告)号：GB2595428B

公开(公告)日：2022-04-13

申请号：GB202113915

申请日：2020-02-27

Applicant: IBM

Inventor： FADI BUSABA ,  LISA HELLER ,  JONATHAN BRADBURY ,  CHRISTIAN BORNTRAEGER ,  CLAUDIO IMBRENDA

IPC: G06F9/455 ,  G06F21/62

Abstract: According to one or more embodiments of the present invention, a computer implemented method includes executing, by a virtual machine that is executing on a host server, a stream of instructions, wherein an instruction from the stream of instructions is to be intercepted to a hypervisor. The method further includes, based on a determination that the virtual machine is a secure virtual machine, preventing the hypervisor from directly accessing any data of the secure virtual machine. The method further includes performing by a secure interface control of the host server, based on a determination that the instruction is not interpretable by the secure interface control itself, extracting one or more parameter data associated with the instruction from the secure virtual machine, and storing the parameter data into a buffer that is accessible by the hypervisor. The instruction is subsequently intercepted into the hypervisor.

公开(公告)号：GB2595428A

公开(公告)日：2021-11-24

申请号：GB202113915

申请日：2020-02-27

Applicant: IBM

Inventor： FADI BUSABA ,  LISA HELLER ,  JONATHAN BRADBURY ,  CHRISTIAN BORNTRAEGER ,  CLAUDIO IMBRENDA

IPC: G06F9/455 ,  G06F21/62

Abstract: A computer implemented method is disclosed. The method includes executing, by a virtual machine that is executing on a host server, a stream of instructions, wherein an instruction from the stream of instructions is to be intercepted to a hypervisor. The method further includes, based on a determination that the virtual machine is a secure virtual machine, preventing the hypervisor from directly accessing any data of the secure virtual machine. The method further includes performing by a secure interface control of the host server, based on a determination that the instruction is not interpretable by the secure interface control itself, extracting one or more parameter data associated with the instruction from the secure virtual machine, and storing the parameter data into a buffer that is accessible by the hypervisor. The instruction is subsequently intercepted into the hypervisor.