SECURE DATA HANDLING BY A VIRTUAL MACHINE

摘要

A system for executing a virtual machine instance is provided. An executing environment (11) is arranged for creating a virtual machine instance (10). The virtual machine instance (10) comprises an instance authorization unit (1) for receiving an instance authorization credential, wherein the instance authorization credential is uniquely associated with the virtual machine instance (10). A data key unit (2) is arranged for generating a request for a data key, based on the instance authorization credential associated with the virtual machine instance (10). A decryption unit (3) is arranged for decrypting a data item (7) based on the data key. A key server system (6) is arranged for issuing keys to a virtual machine instance (10). An instance authorization providing unit (22) is arranged for providing the instance authorization credential to the virtual machine instance (10).

主权项

1. A system for executing a virtual machine instance, comprising
an executing environment for creating a virtual machine instance, wherein the virtual machine instance comprises: an instance authorization unit for receiving an instance authorization credential created externally of the virtual machine instance, wherein the instance authorization credential is uniquely associated with the virtual machine instance; a data key unit for generating a request for a data key, based on the instance authorization credential associated with the virtual machine instance; and a decryption unit for decrypting a data item based on the data key.