Security-Enhanced Computer Systems and Methods
AssigneeJanus Technologies, Inc.
InventorsChen-Hua Wang, Sofin Raskin, Leonid Rozenboim
Life of this patent
Estimating the term…
Abstract
In general, the invention provides a computer architecture designed for enhanced data security. In embodiments, the architecture comprises two sub-systems, each with their own processing units and memories, and a defined set of interfaces that interconnect the two sub-systems and the external world. One sub-system is designed to provide a familiar environment for running computer applications. The other sub-system is designed to provide a secure bridge between the first sub-system and users via input and output devices.
Claims20
A computer system, comprising:
- a first subsystem including a first processor configured to run applications;
- a second subsystem including a second separate processor configured to run security firmware;
- and
- peripherals connected to the second subsystem, wherein access to the peripherals by the applications is controlled by the security firmware running on the second processor which emulates corresponding peripheral connections of the first subsystem.
A method of securing a computer system, comprising:
- configuring a first subsystem of the computer system including a first processor to run applications;
- configuring a second subsystem of the computer system including a second separate processor to run security firmware;
- connecting peripherals to the second subsystem;
- and
- controlling access to the peripherals by the applications using the security firmware running on the second processor which emulates corresponding peripheral connections of the first subsystem.
A system comprising:
- a stand-alone computer system including:
- a first subsystem including a first processor configured to run applications, and
- a second subsystem including a second separate processor configured to run security firmware;
- and
- a secure intranet hosted by an organization that controls the stand-alone computer system, wherein access to the secure intranet by the applications is controlled by the security firmware running on the second processor which emulates a corresponding physical network connection of the first subsystem.
Dependencies are inferred from the claim text.