System and method for multi-layered sensitive data protection in a virtual computing environment

Abstract

Systems and methods for providing sensitive data protection in a virtual computing environment. The systems and methods utilize a sensitive data control monitor on a virtual appliance machine administering guest virtual machines in a virtual computing environment, wherein each of the guest virtual machines may include a local sensitive data control agent. The sensitive data control monitor generates encryption keys for each guest virtual machine which are sent to the local sensitive data control agents and used to encrypt data locally on a protected guest virtual machine. In this manner the data itself on the virtual (or physical) disc associated with the guest virtual machine is encrypted while access attempts are gated by a combination of the local agent and the environment-based monitor, providing for secure yet administrable sensitive data protection.

Description

BACKGROUND[0001]When users in virtual computing environments obtain guest virtual machines for their use, protection of sensitive data equal to or above that provided in a traditional computing environment is beneficial. However, because the user's data on the guest virtual machine exists in the cloud environment, certain security risks for sensitive data may be heightened. Data security policies internal to a cloud provider apply to the virtual machine environment only. Accordingly, an intruder may copy the guest virtual machine's virtual disc, mount it on a separate machine and attempt to access the data. Accordingly, the intruder is able to bypass the file protection rules that apply inside the running virtual machine.BRIEF SUMMARY[0002]Provided herein are systems and methods for providing sensitive data protection in a virtual computing environment. The systems and methods utilize a sensitive data control monitor on a virtual appliance machine administering to guest virtual mach...

AI Technical Summary

Benefits of technology

The patent describes a system and method for protecting sensitive data in a virtual computing environment. It uses a control monitor on a virtual machine to generate encryption keys for other virtual machines, which are then used to encrypt data locally on the protected virtual machine. This provides secure and manageable protection for sensitive data while also controlling access to it.

Problems solved by technology

However, because the user's data on the guest virtual machine exists in the cloud environment, certain security risks for sensitive data may be heightened.

Images