Back to results
US 2025/0165414 A1Published application
System and method for on-demand separated i/o channels
AssigneeCarnegie Mellon University
InventorsMiao Yu, Virgil Gilgor
Life of this patent
Estimating the term…
Abstract
Disclosed herein is a system and method to provide secured I/O channels for multiple types of I/O devices to isolated applications, on-demand. The invention enables composition of different I/O kernels and, as such, eliminates developer effort required to re-implement and re-verify new I/O kernels to protect multiple types of I/O devices.
Claims30
A system for providing on-demand, secured I/O channels between multiple types of I/O devices and one or more isolated applications comprising:
- one or more processors;
- one or more input/output devices in communication with at least one of the processors;
- memory, connected to the one or more processors;
- and
- computer-readable instructions, which when executed by the one or more processors cause the creation of an environment executing on the processor, comprising:
- one or more operating systems;
- an execution environment isolation component;
- an I/O composition kernel component;
- one or more I/O separation modules;
- and
- one or more of the isolated applications;
- wherein the environment creates the secured I/O channels.
9 more elements
A method comprising:
- loading an I/O composition kernel component image;
- registering the I/O composition kernel component image with a micro-hypervisor;
- creating a secure domain;
- switching operation of the micro-hypervisor to the secure domain;
- executing the I/O composition kernel component image in the secure domain;
- and
- initializing the execution of I/O composition kernel component.
4 more elements
Dependencies are inferred from the claim text.