Commissariat a L'energie Atomique Et Aux Energies Alternatives

Laurent Hubert

Renaud Sirdey

A device and a method for encrypting a virtual machine by on-the-fly encryption and decryption of the memory is described. The device comprises hardware and software elements, including a hardware security module for executing, in response to data read/write requests, on-the-fly encryption and decryption operations of the data stream associated with an encrypted memory image. The device and the method are particularly suited to allowing the secure authentication and execution of programs in the context of the infrastructure as a service layer of the cloud computing model.

Growing community of inventors

Guyancourt, France

Laurent Hubert