发明名称 INSTALLING VIRTUAL MACHINES WITHIN DIFFERENT COMMUNICATION PATHWAYS TO ACCESS PROTECTED RESOURCES
摘要 A computer-implemented method, system, and/or computer program product controls access to computer resources used by a computer application. One or more processors fractionate a computer application into disparate components. Two or more of the disparate components are assigned to different communication pathways, where the different communication pathways lead to requisite resources needed to execute the disparate components. One or more processors create and install a virtual machine within at least one of the different communication pathways, such that the virtual machine controls access to a particular requisite resource by a particular disparate component. One or more processors then issue a resource retrieval instruction to retrieve the particular requisite resource via the virtual machine and at least one of the different communication pathways.
申请公布号 US2016381033(A1) 申请公布日期 2016.12.29
申请号 US201615204034 申请日期 2016.07.07
申请人 International Business Machines Corporation 发明人 Durniak Timothy;Friedlander Robert R.;Kraemer James R.;Linton Jeb R.
分类号 H04L29/06;G06F9/50;G06F9/455 主分类号 H04L29/06
代理机构 代理人
主权项 1. A computer-implemented method of controlling access to computer resources used by a computer application, the computer-implemented method comprising: fractionating, by one or more processors, a computer application into disparate components; assigning, by one or more processors, two or more of the disparate components to different communication pathways, wherein the different communication pathways lead to requisite resources needed to execute the disparate components; creating, by one or more processors, a virtual machine, wherein the virtual machine controls access to a particular requisite resource by a particular disparate component, and wherein the particular disparate component comprises a command layer instruction; installing, by one or more processors, the virtual machine within at least one of the different communication pathways to control access to the particular requisite resource by the particular disparate component; transmitting, by one or more processors, a resource retrieval instruction to retrieve the particular requisite resource via the virtual machine and the at least one of the different communication pathways; installing, by one or more processors, multiple virtual machines in series within at least one of the different communication pathways, wherein the multiple virtual machines comprise a first virtual machine and a second virtual machine; assigning, by one or more processors, a first address message to the first virtual machine, wherein the first address message identifies only an address of the second virtual machine, and wherein the first address message instructs the first virtual machine to send the resource retrieval instruction to the second virtual machine; assigning, by one or more processors, a second address message to the second virtual machine, wherein the second address message identifies only an address of the particular requisite resource, and wherein the second address message instructs the second virtual machine to send the resource retrieval instruction to the particular requisite resource; fractionating, by one or more processors, the command layer instruction into disparate command layer components; assigning, by one or more processors, a first disparate command layer component from the disparate command layer components to the first virtual machine; executing, by one or more processors, the first disparate command layer component to create a command virtual machine; and controlling, by one or more processors, the first virtual machine via the command virtual machine.
地址 Armonk NY US