# How Virtual Machines Keep Their Data Separate on Shared Storage > A method for virtual machines to store data in isolated, non-mixed logical storage units to improve security and management efficiency within a shared physical storage pool. - **Patent:** US 9760393 - **Original title:** Storage architecture for virtual machines - **Owner:** VMware LLC - **Granted:** 2017 - **Status:** Active - **Times cited:** 12 - **Field:** software, telecommunications, ai_ml ## What it does This patent describes a way to organize how virtual machines (VMs) talk to physical hard drives. Instead of letting multiple VMs dump their data into the same shared storage bucket, the system creates 'logical units'—essentially private lanes for each VM's virtual disk. A specialized 'virtualized disk I/O handler' sits between the VM and the storage. When a VM wants to read or write data, this handler intercepts the request, checks if it has permission, and maps the request specifically to the correct, isolated logical unit. This prevents data from different VMs from being commingled, which makes it easier to take snapshots or move individual VMs without affecting others. ## What it does NOT cover - Does not cover storage architectures where data from multiple virtual machines is intentionally stored on the same logical unit. - Does not cover physical storage management that lacks a virtualized disk I/O handler for request interception. - Does not cover non-virtualized computing environments where direct hardware access is not mediated by a hypervisor. - Does not cover storage systems that do not utilize a storage pool abstraction layer. ## The clever bit The innovation is the 'virtualized disk I/O handler' that dynamically modifies disk access requests to map them to specific logical units, effectively acting as a gatekeeper that ensures strict physical isolation for virtual assets. ## Real-world examples 1. VMware vSphere storage environments 2. Enterprise cloud data centers 3. Virtualized server clusters using iSCSI protocols ## Why it matters In data centers, managing storage for thousands of VMs is a massive performance and security challenge. By ensuring that one VM's data cannot be mixed with another's at the logical unit level, this architecture simplifies administrative tasks like backing up specific VMs or moving them between servers. It provides a blueprint for 'clean' storage isolation that is critical for enterprise-grade cloud infrastructure. ## Frequently asked questions ### What does How Virtual Machines Keep Their Data Separate on Shared Storage cover? A method for virtual machines to store data in isolated, non-mixed logical storage units to improve security and management efficiency within a shared physical storage pool. ### Who owns patent US 9760393? VMware LLC owns this patent, granted in 2017. ### When does this patent expire? This patent is expected to expire on September 12, 2037, when the invention enters the public domain. ### What is patent US 9760393 cited by? This patent has been cited by 12 later patents that build on its ideas. ### What problem does this patent solve? In data centers, managing storage for thousands of VMs is a massive performance and security challenge. By ensuring that one VM's data cannot be mixed with another's at the logical unit level, this architecture simplifies administrative tasks like backing up specific VMs or moving them between servers. It provides a blueprint for 'clean' storage isolation that is critical for enterprise-grade cloud infrastructure. ### What does this patent NOT cover? Does not cover storage architectures where data from multiple virtual machines is intentionally stored on the same logical unit. **Full plain-English explainer:** https://patentbrief.org/patent/us/9760393/azure-machine-learning **Original patent:** https://patents.google.com/patent/US9760393 --- _Source: PatentBrief — https://patentbrief.org. Patent facts are from public records; the plain-English explanation is PatentBrief's._ ## Related patents Semantically similar inventions in the PatentBrief corpus: - [Managing External Network Hardware as if It Were Inside the Switch](https://patentbrief.org/patent/us/9661085/facebook-audience-network) — A method for managing external network service hardware by treating it as part of the main switch's internal system using a virtual connection. - [How IBM's Storage Controllers Keep Data Backups in the Right Order](https://patentbrief.org/patent/us/5682513/cache-queue-entry-linking-for-dasd-record-updates) — A method for storage controllers to track and sequence data updates in a specific order, ensuring that remote backups remain consistent with the original data during a system failure. - [How to Split Computer Tasks Between Different Types of Processors](https://patentbrief.org/patent/us/9477524/aws-cloudformation) — A system that uses a physical backplane to connect two different types of computer processors—one for general tasks and one for real-time tasks—to improve efficiency. - [Securing Data Storage Commands with Passcodes](https://patentbrief.org/patent/us/10102356/macos-dark-mode) — This patent describes a system for securely executing commands on data storage systems by requiring a generated passcode, which is based on user authentication and specific storage entity attributes. - [How to Keep Backup Data in the Correct Order](https://patentbrief.org/patent/us/9811430/aws-codepipeline) — A method for ensuring that backup data arrives at a secondary storage location in the exact same sequence it was created at the primary location to prevent data corruption.