COMPUTING DEVICE INCLUDING A PORT AND A GUEST DOMAIN

• US 20140223543A1
• Filed: 07/12/2011
• Published: 08/07/2014
• Est. Priority Date: 07/12/2011
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Jeansonne, Jeff, Ali, Vali, Mann, James M.
• Granted Patent: US 9,213,829 B2
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 2009/45579 I/O management, e.g. providing access to device drivers or storage
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors

Abstract

A first guest domain and an isolated peripheral related task. A peripheral related task to communicate with the peripheral and prevent the first guest domain from communicating with the peripheral.

Claims

1. A computing device comprising:

a first guest domain;

a peripheral related task isolated from the first guest domain;

a port to connect a peripheral device; and

a privileged domain to cause the peripheral related task to be executed to identify the peripheral device, wherein the peripheral related task prevents the first guest domain from communicating with the peripheral if it is determined malicious.

2. The device of claim 1, wherein the privileged domain generates a virtual appliance to execute the peripheral related task.

3. The device of claim 1, wherein the port is a wired or a wireless port.

4. The device of claim 1, further comprising logic in the first guest domain to receive a text list of the contents of the peripheral device.

5. The device of claim 1, further comprising logic to determine if an auto run file is on the peripheral device wherein the peripheral related task prevents the first guest domain from accessing the auto run file.

6. The device of claim 1, further comprising a blacklist of the peripheral device to prevent the first guest domain from accessing the peripheral device.

7. The device of claim 1, further comprising a scanner to scan the contents of the peripheral device for malicious code prior to allowing access to the peripheral device by the first guest domain.

8. The device of claim 1, further comprising an interface to select the level of access the first guest domain has to communicate with the peripheral device.

10. The method of claim 1, scanning of the contents of the peripheral device for malicious code prior to allowing access to the peripheral device by the first guest domain.

11. The method of claim 1, selecting the level of access the first guest domain has to communicate with the peripheral device.

12. The method of claim 1, determining if an auto run file is on the peripheral device wherein the virtual appliance prevents the first guest domain from accessing the auto run file.

9. A method of communicating with a peripheral connected to a computing device comprising:

isolating a peripheral related task from a first guest domain;

generating a virtual appliance to execute the peripheral related task;

receiving, by the virtual appliance from the peripheral, the type of peripheral;

validating, by the virtual appliance, the type of peripheral; and

preventing communication with the peripheral by the first guest domain until the type of peripheral is validated.

13. A non-transitory computer readable medium comprising a privileged domain that if executed by a processor causes a computing device to:

isolate a peripheral related task from a first guest domain;

generate a virtual appliance to execute the peripheral related task;

receive, by the virtual appliance from the peripheral, the type of peripheral;

validate, by the virtual appliance, the type of peripheral; and

prevent communication with the peripheral by the first guest domain until the type of peripheral is validated.

14. The computer readable medium of claim 13 further comprising periphery related task that if executed causes a computing device to:

scan the contents of the peripheral device for malicious code prior to allowing access to the peripheral device by the first guest domain.

15. The computer readable medium of claim 13 further comprising a peripheral related task that it executed causes a computing device to:

select, through an interface, the level of access the first guest domain has to communicate with the peripheral device.