Microsoft patents secure virtual machines that hide storage details
Microsoft describes a system for creating secure virtual computers that separates operating system files from user data into two distinct storage areas. The system uses a mathematical check to verify the integrity of both areas before combining them into a single, hidden storage view for the virtual machine.
In the filing’s own words
Examples of the present disclosure describe systems and methods for implementing a confidential virtual machine generation system. In examples, read-only and read-write volumes are generated to store operating system binaries and user-generated content, respectively, on filesystems indexed using hash trees. The hash values of the roots of the two hash trees are stored in a location accessed as part of loading an operating system. The example system accesses the roots of the two hash trees to access the current state of read-only and read-write volumes and verify the states using a checksum. The verified states are merged to generate an operating system image associated image with the confidential virtual machine. Additionally, the system merges the namespaces of filesystems of read-only and read-write volumes into a single filesystem namespace concealing multiple volumes.
What exactly they claim (claim 1)
1.- 20. (canceled)
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- CONFIDENTIAL VIRTUAL MACHINE USING STATE-SEPERATED STORAGE ARCHITECTURE
- Publication number
- US20260291763A1
- Application number
- 19465838
- Filed
- Jan 30, 2026
- Published
- Sep 24, 2026
- Inventors
- 9
- Claims
- 21
Classified under
H04L 9/50 Electricity & electronicsG06F 9/4401 Physics & computingMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.