The product of claim 3, wherein the communication management operations comprise: determining the pre-established value for the first remote node from a software port number assigned to the software port.ĥ.
The product of claim 2, wherein the monitoring comprises: a) detecting a nonpublic first identification code sent from the virtual device to a software port on the first remote node via a pre-established communication pathway followed by b) further detecting a nonpublic second identification code sent from the remote node and c) comparing the nonpublic second identification code with a pre-established value for the first remote node.Ĥ. The product of claim 1, wherein the communication management operations further comprise: i) detecting negotiation of a secure communication pathway between a first remote node and the virtual device, the negotiation comprising a series of network packet communications between the first remote node and the virtual device ii) aligning a series of cryptographic keys utilized in the hypervisor with a series of cryptographic keys utilized in the virtual device iii) monitoring the series of network packet communications and iv) confirming success of the negotiation prior to the passing the authorized first network packet.ģ. A product for authorizing network communications in a hypervisor, the product comprising a non-transitory computer-readable storage medium having computer-readable program code embodied therein, the computer-readable program code executable in a hypervisor to perform communication management operations, the communication management operations comprising: i) intercepting a first network packet in the hypervisor, the first network packet comprising a first higher-than-OSI layer three portion ii) decrypting, with a single-use cryptographic key, at least a portion of the first higher-than-OSI layer three portion to obtain one or more first packet parameters iii) authorizing the first network packet in the hypervisor, comprising: comparing the one or more first packet parameters with one or more first expected values and iv) passing the authorized first network packet to a virtual device.Ģ.
0 kommentar(er)
