Trusted computing

A trusted computing device comprising:

• a secure interface for connecting to a trusted source;
• a host interface for connecting to an untrusted host device, the host interface is separate from the secure interface;
• a file system partition comprising a write file and a read file;
• and an isolated environment comprising;
• secure storage;
• an isolated hardware processor interfaced with the secure storage and configured to:
• receive, from the trusted source via the secure interface, a set of restricted information,
• cause the secure storage to store the set of restricted information
• receive, from the untrusted host device via the host interface, a write-file entry comprising an executable command for the write file of the file system partition,
• identify at least a portion of the set of restricted information that is responsive to the write-file entry comprising the executable command from the untrusted host device,
• generate a secure output based on at least the portion of the set of restricted information, and
• cause the read file of the file system partition to store the secure output, wherein the untrusted host device accesses the secure output from the read file via the host interface and completes any host-side processing of the secure output.

A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for secure host interaction within a trusted computing device, the method comprising:

• receiving, from a trusted source via a secure interface of the trusted computing device, a set of restricted information;
• storing the set of restricted information in secure storage within an isolated environment of the trusted computing device;
• receiving, from an untrusted host via a host interface of the trusted computing device, a write file write-file entry comprising an executable command for a write file of the trusted computing device, wherein the host interface of the trusted computing device is separate from the secure interface of the trusted computing device;
• identifying at least a portion of the set of restricted information that is responsive to the write-file entry comprising the executable command from the untrusted host device;
• generating a secure output based on at least the portion of the set of restricted information;
• and
• availing the secure output in a read file of the trusted computing device, wherein the untrusted host device accesses the secure output from the read file via the host interface and completes any host-side processing of the secure output.