Back to results
US 11,599,650 B2Granted
Secure computing system
AssigneeCUPP Computing AS
InventorOmar Nathaniel Ely
Life of this patent
Estimating the term…
Abstract
A computer system with multiple security levels, the system comprising a high-power processing device (130), a low-power processing device (110), and an interface unit (120) comprising functions for moving classified information between the high-power device (130) and the low-power device (110) according to formal rules for confidentiality and/or integrity. Additional security aspects, e.g. availability, may readily be accommodated. A method for implementing multiple levels of security along a number of independent security axes on the system is also disclosed.
Claims20
A system comprising:
- a virtual machine engine for generating one or more virtual machines, each virtual machine being generated having a virtual machine integrity level, the virtual machine integrity level being selected from at least a higher integrity level and a lower integrity level, a first virtual machine with the higher integrity level being configured to require a stronger integrity process than a second virtual machine with the lower integrity level;
- a first program;
- a second program;
- a first datastore or data set associated with a first data integrity level;
- a second datastore or data set associated with a second data integrity level;
- at least one hardware processor configured to:
- receive a request to use the first program;
- execute a particular virtual machine with a particular virtual machine integrity level;
- use a particular integrity process before or while operating the first program by the particular virtual machine, the particular integrity process being associated with the particular virtual machine integrity level;
- and
- allow the first program to write to the first datastore or data set, only if the first data integrity level is equal to or lower than the particular virtual machine integrity level.
8 more elements
A method comprising:
- receiving a request to use a first program;
- generating and executing a particular virtual machine with a particular virtual machine integrity level, the particular virtual machine integrity level being selected from at least a higher integrity level and a lower integrity level, a first virtual machine with the higher integrity level requiring a stronger integrity process than a second virtual machine with the lower integrity level;
- using a particular integrity process before or while operating the first program by the particular virtual machine, the particular integrity process being associated with the particular virtual machine integrity level;
- and
- allowing the first program to write to the first datastore or data set, only if the first data integrity level is equal to or lower than the particular virtual machine integrity level.
2 more elements
Dependencies are inferred from the claim text.