公开(公告)号：US08806576B1

公开(公告)日：2014-08-12

申请号：US13744283

申请日：2013-01-17

Applicant: Amazon Technologies, Inc.

Inventor： Matthew T. Corddry ,  Michael Eavid Marr ,  James R. Hamilton ,  Peter N. De Santis

IPC: G06F7/04 ,  G06F17/30 ,  G06F15/16 ,  H04L29/06

CPC classification number: H04L63/10 ,  G06F9/4401 ,  H04L67/125 ,  H04L67/22

Abstract: In an environment such as a cloud computing environment where various guests can be provisioned on a host machine or other hardware device, it can be desirable to prevent those users from rebooting or otherwise restarting the machine or other resources using unauthorized information or images that can be obtained from across the network. A cloud manager can cause one or more network switches or other routing or communication processing components to deny communication access between user-accessible ports on a machine or device and the provisioning systems, or other specific network resources, such that the user cannot cause the host machine to pull information from those resources upon a restart or reboot of the machine. Further, various actions can be taken upon a reboot or attempted reboot, such as to isolate the host machine or even power off the specific machine.

Abstract translation: 在诸如云计算环境的环境中，可以在主机或其他硬件设备上配置各种客户端，可能希望防止这些用户重新启动或以其他方式重新启动机器或其他资源，使用未经授权的信息或图像可以 从网络获得。 云管理器可以使一个或多个网络交换机或其他路由或通信处理组件拒绝机器或设备上的用户可访问端口与供应系统或其他特定网络资源之间的通信接入，使得用户不能使主机 机器在重新启动或重新启动机器时从这些资源中提取信息。 此外，可以在重新启动或尝试重新启动时执行各种操作，例如隔离主机或甚至断开特定机器的电源。