The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 26, 2025

Filed:

May. 27, 2022
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Jin Lin, Redmond, WA (US);

Michael Bishop Ebersol, Redmond, WA (US);

David Kimler Altobelli, Redmond, WA (US);

Jingbo Wu, Medina, WA (US);

Qiang Wang, Bellevue, WA (US);

Assignee:
Attorneys:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/50 (2006.01); G06F 21/54 (2013.01); G06F 21/55 (2013.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/5077 (2013.01); G06F 21/54 (2013.01); G06F 21/554 (2013.01); G06F 21/577 (2013.01);
Abstract

The techniques disclosed herein enable a system to configure a confidential virtual resource unit by provisioning a security component to a tenant's virtual resource unit. The system creates multiple different virtual trust layers within the confidential virtual resource unit. This creation effectively defines security boundaries between the virtual trust layers. The virtual trust layers are associated with different privileges, such that a higher privileged virtual trust layer is provided with more privileges compared to a lower privileged virtual trust layer. In one example, a lower privileged virtual trust layer may include basic virtual resource components (e.g., drivers, applications, processes, functions, workloads executing within a guest operating system) and a higher privileged virtual trust layer is the location to which a virtual security component is provisioned by the system.


Find Patent Forward Citations

Loading…