Loading patent…
OwnerTse Huong Choo, Christopher I Dalton +1inventors
InventorsTse Huong Choo, Christopher I Dalton, Andrew Patrick Norman
Estimating the term…
An operating system comprising a kernel 100 incorporating mandatory access controls as a means to counter the effects posed by application compromise. The operating system uses a technique known as “containment” to at least limit the scope of damage when security breaches occur. In a preferred embodiment, each application supported by the operating system, is assigned a tag or label, each tag or label being indicative of a logically protected computing environment or “compartment”, and applications having the same tag or label belonging to the same compartment. By default, only applications running in the same compartment can communicate with each other. Access control rules define very narrow tightly-controlled communications paths between compartments.
1) A gateway system having a dual interface connected to both internal and external networks for hosting a plurality of services running processes, the system providing at least some of said running processes with a tag or label indicative of a logically protected computing compartment, said processes having the same tag or label belonging to the same compartment, the system further defining specific communications paths between said compartments and other networks, and permitting communication between a compartment and a host or a said network only in the event that a communication path or interface connection therebetween is defined:
Dependencies are inferred from the claim text.