Arvind Seshadri

US Patent:

20100031360, Feb 4, 2010

Filed:

Jul 31, 2008

Appl. No.:

12/221109

Inventors:

Arvind Seshadri - Pittsburgh PA, US
Ning Qu - Pittsburgh PA, US
Adrian Perrig - Pittsburgh PA, US

International Classification:

G06F 21/00
G06F 12/14
H04L 9/32

US Classification:

726 24, 726 26, 726 28, 711E12091

Abstract:

Systems and methods are provided for preventing unauthorized modification of an operating system. The system includes an operating system comprised of kernel code for controlling access to operation of a processing unit. The system further includes an enforcement agent executing at a higher privilege than the kernel code such that any changes to the kernel code are approved by the enforcement agent prior to execution.

US Patent:

20140108784, Apr 17, 2014

Filed:

Oct 12, 2012

Appl. No.:

13/651380

Inventors:

- Armonk NY, US
Arvind Seshadri - Elmsford NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 9/32
H04L 29/06

US Classification:

713156, 713175

Abstract:

A method to verify a geographic location of a virtual disk image executing at a data center server within a data center. One embodiment includes a cryptoprocessor proximate the data center server, a hypervisor configured to send a disk image hash value of the virtual disk image, a digital certificate issued to the cryptoprocessor, an endorsement key to a data center tenant and a location provider. The method includes sending a disk image hash value of the virtual disk image, an endorsement key unique to a cryptoprocessor proximate the data center server to a data center tenant, and a digital certificate to a data center tenant. Next, the location provider sends the geographic location of the cryptoprocessor matching the endorsement key to the data center tenant.