System and method for supporting secure subsystems in a client hosted virtualization system

摘要

An client hosted virtualization system includes an authentication device, a processor and non-volatile memory with BIOS code and virtualization manager code. The virtualization manager initializes the client hosted virtualization system authenticates a virtual machine image, launches a portion of the virtual machine that initiates an authentication session with the authentication device, receives an authentication object from the authentication device, sends the authentication object to the portion of the virtual machine, and launches another portion of the virtual machine. The client hosted virtualization system is configurable to execute the BIOS or the virtualization manager.

主权项

1. A client hosted virtualization system (CHVS) comprising:
an authentication device; a processor operable to execute code; and a non-volatile memory including first code to implement a basic input/output system to initialize the CHVS and second code to implement a virtualization manager operable to:
authenticate a first virtual machine image associated with a first virtual machine;launch a first portion of the first virtual machine on the CHVS based on the first virtual machine image, wherein the first portion of the first virtual machine is operable to initiate a first authentication session with the authentication device;receive an authentication object from the authentication device in response to the first portion of the first virtual machine initiating the first authentication session;send the authentication object to the first portion of the first virtual machine; andlaunch a second portion of the first virtual machine; wherein the CHVS is configurable in a first configuration to execute the first code and not the second code, and is configurable in a second configuration to execute the second code and not the first code.