# US 2014/0208442 A1 · Systems and Methods of Secure Domain Isolation Involving Separation Kernel Features

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0208442 A1
- Document ID: US20140208442A1
- Status: Published application
- Kind: A1
- Application number: 13/576,155
- Filed: 2012-06-13
- Published: 2014-07-24
- Earliest claimed: 2011-06-13
- Assignees: LynuxWorks, Inc.
- Inventors: Edward T. Mooring
- Web page: https://patentgrep.com/patent/US20140208442A1

## CPC

- G06F 9/45558: {Hypervisor-specific management and integration aspects}
- G06F 3/023: Arrangements for converting discrete items of information into a coded form, e.g. arrangements for interpreting keyboard generated codes as alphanumeric codes, operand codes or instruction codes
- G06F 3/14: Digital output to display device {; Cooperation and interconnection of the display device with other functional units}
- G06F 9/4405: {Initialisation of multiprocessor systems}
- G06F 9/45533: {Hypervisors; Virtual machine monitors}
- G06F 9/45545: {Guest-host, i.e. hypervisor is an application program itself, e.g. VirtualBox}
- G06F 9/545: {where tasks reside in different layers, e.g. user- and kernel-space}
- G06F 13/1673: {using buffers}
- G06F 13/385: {for adaptation of a particular data processing system to different peripheral devices}
- G06F 13/4282: {on a serial bus, e.g. I2C bus, SPI bus (on daisy chain buses G06F13/4247)}
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/606: {by securing the transmission between two devices or processes}
- G06F 2009/45579: {I/O management, e.g. providing access to device drivers or storage}
- G06F 2009/45583: {Memory management, e.g. access or allocation}
- G06F 2009/45587: {Isolation or security of virtual machine instances}
- G09G 5/39: Control of the bit-mapped memory
- G09G 2370/24: Keyboard-Video-Mouse [KVM] switch
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G09G: ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION (arrangements for transferring data between digital computers and displays G06F3/14; static indicating arrangements comprising an association of a number of separate sources or light control cells G09F9/00; static indicating arrangements comprising integral associations of a number of light sources H01J, H01K, H10H, H05B33/12; scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission, details thereof H04N1/00)

## Abstract

Systems and methods are disclosed for providing secure information processing. In one exemplary implementation, there is provided a method of secure domain isolation. Moreover, the method may include configuring a computing component with data/programming associated with address swapping and/or establishing isolation between domains or virtual machines, processing information such as instructions from an input device while keeping the domains or virtual machines separate, and/or performing navigating and/or other processing among the domains or virtual machines as a function of the data/programming and/or information, wherein secure isolation between the domains or virtual machines is maintained.

## Claims

### Claim 1

A method of secure information processing, the method comprising:
configuring a computing component with data/programming associated with address swapping and/or establishing isolation between domains or virtual machines;
processing information associated with input devices while keeping the domains or virtual machines separate;
performing navigating and/or other processing among the domains or virtual machines as a function of the data/programming and/or information;
wherein secure isolation between the domains or virtual machines is maintained.

### Claim 2 (depends on 1)

The method of claim 1 wherein the configuration of the computing component involves utilizing address swapping functionality, which was originally provided for a different use, to implement secure isolation features.

### Claim 3 (depends on 1)

The method of claim 1 wherein the address swapping functionality is existing address swapping functionality originally provided/configured for use in software-driven animation and/or stereoscopic display.

### Claim 4 (depends on 1)

The method of claim 1 wherein the address swapping functionality is utilized to implemented secure isolation of video display data.

### Claim 5 (depends on 1)

The method of claim 1 herein wherein the address swapping functionality is utilized to implemented secure isolation of video display data, belonging to multiple protection domains.

### Claim 6 (depends on 1)

The method of claim 1 wherein the computing component is configured to change the start address of a frame buffer the graphics hardware is currently displaying.

### Claim 7 (depends on 1)

The method of claim 1 wherein the processing is performed in conjunction with a separation kernel to provide secure separation of display data between different protection domains.

### Claim 8

One or more computer readable media containing computer executable instructions for performing a method of secure information processing, the computer executable instructions including instructions for causing one or more processing components to perform the steps of:
configuring one or more computing components with data/programming associated with address swapping and/or establishing isolation between domains or virtual machines;
processing information associated with input devices while keeping the domains or virtual machines separate;
performing navigating and/or other processing among the domains or virtual machines as a function of the data/programming and/or information;
wherein secure isolation between the domains or virtual machines is maintained.

### Claim 9 (depends on 8)

The computer readable media of claim 8 wherein the configuration of the computing component involves utilizing address swapping functionality, which was originally provided for a different use, to implement secure isolation features.

### Claim 10 (depends on 8)

The computer readable media of claim 8 wherein the address swapping functionality is existing address swapping functionality originally provided/configured for use in software-driven animation and/or stereoscopic display.

### Claim 11 (depends on 8)

The computer readable media of claim 8 wherein the address swapping functionality is utilized to implemented secure isolation of video display data.

### Claim 12 (depends on 8)

The computer readable media of claim 8 wherein the address swapping functionality is utilized to implemented secure isolation of video display data, belonging to multiple protection domains.

### Claim 13 (depends on 8)

The computer readable media of claim 8 wherein the computing component is configured to change the start address of a frame buffer the graphics hardware is currently displaying.

### Claim 14 (depends on 8)

The computer readable media of claim 8 wherein the processing is performed in conjunction with a separation kernel to provide secure separation of display data between different protection domains.

### Claim 15 (depends on 8)

The computer readable media of claim 8 wherein the processing is performed in conjunction with protection(s) provided by the computing component (PC) hardware to provide secure separation of display data between different protection domains.

### Claim 16 (depends on 8)

The computer readable media of claim 8 wherein only code running within the Protection Domain to which that frame buffer is assigned can access the data.

### Claim 17 (depends on 8)

The computer readable media of claim 8 further comprising initializing, such as via a KVM component/server in a Virtual Device components/server, a graphics controller using VESA BIOS extensions.

### Claim 18 (depends on 8)

The computer readable media of claim 8 further comprising setting a graphics controller's frame buffer to point to an initial guest virtual machine's frame buffer memory region, and/or opening, via a KVM component/server, keyboard and/or mouse devices and, optionally, initializing them.

### Claim 19 (depends on 8)

The computer readable media of claim 8 further comprising presenting a virtualization layer associated with one or more guest virtual machine that is/are sharing the display with a virtual mouse device, a virtual keyboard device, and/or a virtual graphics controller.

### Claim at position 20

20-29. (canceled)

### Claim 30 (depends on 1)

The method of claim 1 further comprising:
presenting a physical frame buffer to each respective operating system with a memory area in a physical graphics device frame buffer to display data on a physical graphics device;
processing information via a Keyboard Video Mouse (KVM) component included within the Virtual Device Server, wherein the KVM component has access to input from the physical input devices.

### Claim at position 22

31-49. (canceled)