Virtualized trusted descriptors
AssigneeFreescale Semiconductor, Inc.
InventorsThomas E. Tkacik, Carlin R. Covey, David H. Hartley, Steven D. Millman
Life of this patent
Estimating the term…
Abstract
Embodiments of information processing systems and associated components can include logic operable to perform operations in a virtualized system including a plurality of guest operating systems using descriptors. The descriptors specify a set of commands defining the operations in a plurality of security domains and specify permission to a plurality of resources selectively for the plurality of guest operating systems.
Claims20
An electronic circuit comprising:
- a module configured to perform operations specified by a descriptor comprising a set of commands that define the operations, a digital signature that verifies validity of the descriptor, and a security domain identifier that specifies access to resources in a plurality of security domains.
An information processing system comprising:
- logic operable to perform operations in a virtualized system including a plurality of guest operating systems using descriptors that specify a set of commands defining the operations in a plurality of security domains and that specify permission to a plurality of resources selectively for the plurality of guest operating systems.
A method for securing an information system comprising:
- performing operations in a system including a plurality of entities;
- controlling the performance of operations using a plurality of descriptors;
- specifying in ones of the plurality of descriptors a set of commands defining the operations in a plurality of security domains;
- and
- specifying in ones of the plurality of descriptors permission to a plurality of resources selectively for the plurality of entities.
Dependencies are inferred from the claim text.