Security attributes in trusted computing systems
AssigneeHewlett-Packard Development Company, L.P.
InventorMichael John Wray
Life of this patent
Estimating the term…
Abstract
A system comprising a trusted computing platform including one or more logically protected computing environments, each of which is associated with at least one service or process supported by said system, the system being arranged to load onto said trusted computing platform a predetermined security policy including one or more security rules for controlling the operation of each of said logically protected computing environments, the security rules for at least one of said logically protected computing environments including an execution control rule which defines the security attributes to be applied to a service or process associated with said logically protected computing environment when said service or process is started.
Claims15
A system comprising a trusted computing platform and one or more logically protected computing environments, each logically protected computing environment being an operating system compartment associated with at least one service or process supported by said system, the system being arranged to load an operating system into said trusted computing platform and thereafter to load onto said trusted computing platform data defining a predetermined security policy defining security attributes to be applied to one or more of the at least one service or process when said service or process is started.
A method of applying a security policy in a system including a trusted computing platform and one or more logically protected computing environments, each logically protected computing environment being an operating system compartment associated with at least one service or process supported by said system, the method including the steps of loading an operating system into said trusted computing platform;
- after loading the operating system, starting a service or process associated with at least one of the logically protected computing environments;
- and controlling the operation of the at least one logically protected environment by applying, upon starting of the service or process, security attributes to the service or process.
Dependencies are inferred from the claim text.