Back to results
US 12,711,254 B2Granted
Secure computing system
AssigneeCUPP Computing AS
InventorOmar Nathaniel Ely
Life of this patent
Estimating the term…
Abstract
A computer system with multiple security levels, the system comprising a high-power processing device (130), a low-power processing device (110), and an interface unit (120) comprising functions for moving classified information between the high-power device (130) and the low-power device (110) according to formal rules for confidentiality and/or integrity. Additional security aspects, e.g. availability, may readily be accommodated. A method for implementing multiple levels of security along a number of independent security axes on the system is also disclosed.
Claims20
A system comprising:
- a virtual machine engine for generating one or more virtual machines, each virtual machine being generated having a virtual machine confidentiality level, the virtual machine confidentiality level being selected from at least a higher confidentiality level and a lower confidentiality level, a first virtual machine with the higher confidentiality level being configured to require a stronger confidentiality process than a second virtual machine with the lower confidentiality level;
- a first program;
- a second program;
- a first datastore or data set associated with a first data confidentiality level;
- a second datastore or data set associated with a second data confidentiality level;
- at least one hardware processor configured to:
- receive a request to use the first program;
- execute a particular virtual machine with a particular virtual machine confidentiality level;
- use a particular confidentiality process before or while operating the first program by the particular virtual machine, the particular confidentiality process being associated with the particular virtual machine confidentiality level;
- and
- allow the first program to read from the first data set or from the first datastore, only if the first data confidentiality level of the first data set or the first datastore is equal to or lower than the particular virtual machine confidentiality level.
8 more elements
A method comprising:
- receiving a request to use a first program;
- generating and executing a particular virtual machine with a particular virtual machine confidentiality level, the particular virtual machine confidentiality level being selected from at least a higher confidentiality level and a lower confidentiality level, a first virtual machine with the higher confidentiality level requiring a stronger confidentiality process than a second virtual machine with the lower confidentiality level;
- using a particular confidentiality process before or while operating the first program by the particular virtual machine, the particular confidentiality process being associated with the particular virtual machine confidentiality level;
- and
- allowing the first program to read from a first data set or from a first datastore, the first datastore or data set being associated with a first data confidentiality level, only if the first data confidentiality level is equal to or lower than the particular virtual machine confidentiality level.
2 more elements
Dependencies are inferred from the claim text.