Microsoft Technology Licensing, LLC

Deven Robert Desai

Scott Randall Shell

Md Nazmus Sakib

Jeffrey A Sutherland

Jaskaran Singh Khurana

Jessica M Krynitsky

Integrity verification of a containerized application using a block device signature is described. For example, a container deployed to a host system is signed with a single block device signature. The operating system of the host system implements an integrity policy to verify the integrity of the container when the container is loaded into memory and when its program code executes. During such events, the operating system verifies whether the block device signature is valid. If the block device signature is determined to be valid, the operating system enables the program code to successfully execute. Otherwise, the program code is prevented from being executed. By doing so, certain program code or processes that are not properly signed are prevented from executing, thereby protecting the host system from such processes. Moreover, by using a single block device signature for a container, the enforcement of the integrity policy is greatly simplified.

Growing community of inventors

Bellevue, WA, United States of America

Deven Robert Desai