The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 31, 2023

Filed:

Mar. 12, 2020
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Matthew Green, Ashmore, AU;

Narayana Aditya Madineni, Southport, AU;

Michael W. Gray, Guanaba, AU;

Leigh S. McLean, Nerang, AU;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 16/23 (2019.01); G06F 3/06 (2006.01); G06F 9/455 (2018.01); G06F 11/30 (2006.01); G06F 21/62 (2013.01); H04L 9/40 (2022.01); H04L 9/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0428 (2013.01); G06F 3/0623 (2013.01); G06F 3/0631 (2013.01); G06F 3/0652 (2013.01); G06F 3/0673 (2013.01); G06F 9/45558 (2013.01); G06F 11/301 (2013.01); G06F 11/3055 (2013.01); G06F 16/2379 (2019.01); G06F 21/6218 (2013.01); H04L 9/0861 (2013.01); G06F 2009/45583 (2013.01); G06F 2009/45587 (2013.01);
Abstract

Provided is a method, a computer program product, and a system for providing perfect forward secrecy in virtual machines. The method includes receiving a secure memory allocation function from an application, including a connection secret to be stored in memory. The method further includes allocating memory for the connection secret according to the memory size parameter and storing an entry relating to the connection secret in a secure database. The memory information includes a memory location and a memory size of the memory. The method also includes monitoring an operation state relating to the virtual machine. The method further includes receiving, from the application, a secure deallocation function relating to the connection secret and retrieving the memory information from the secure database. The method also includes deleting the connection from the memory and sanitizing the memory location logged by the memory information.


Find Patent Forward Citations

Loading…