US 11,991,209 B2
System and method for security health monitoring and attestation of virtual machines in cloud computing systems
Ruby B. Lee, Princeton, NJ (US); and Tianwei Zhang, Singapore (SG)
Assigned to CoreSecure Technologies, LLC, Princeton, NJ (US)
Filed by CoreSecure Technologies, LLC, Princeton, NJ (US)
Filed on Sep. 15, 2020, as Appl. No. 17/021,611.
Application 17/021,611 is a division of application No. 15/179,734, filed on Jun. 10, 2016, granted, now 10,778,720, issued on Sep. 15, 2020.
Claims priority of provisional application 62/175,030, filed on Jun. 12, 2015.
Prior Publication US 2021/0084075 A1, Mar. 18, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01); H04L 9/32 (2006.01)
CPC H04L 63/20 (2013.01) [G06F 9/45558 (2013.01); H04L 9/3234 (2013.01); H04L 9/3236 (2013.01); H04L 9/3247 (2013.01); H04L 63/1416 (2013.01); H04L 63/1433 (2013.01); H04L 63/1441 (2013.01); G06F 2009/4557 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45591 (2013.01); G06F 2009/45595 (2013.01); H04L 63/12 (2013.01)] 25 Claims
OG exemplary drawing
 
1. A cloud server for security health monitoring and attestation of virtual machines in cloud computing systems, comprising:
a virtual machine, a hypervisor, a plurality of network interface controllers, a plurality of random access memories, and a plurality of processing units; and
a monitor module for monitoring and gathering security measurement information; and
a trust module for: (i) secure storage of the security measurement information in a trusted memory of the trust module, (ii) generating keys, and (iii) hashing and signing the security measurement information using cryptography operations,
wherein the cloud server transmits hashed and signed security measurement information to an attestation server in communication with the cloud server, the attestation server: (i) processing the hashed and signed security measurement information to determine a security property of the virtual machine executing on the cloud server, and (ii) maintaining hashed and signed security property information corresponding to a plurality of virtual machines executing on different cloud servers.