System for providing secure and trusted computing environments through a secure computing module

A secure system, comprising:

• a secure computing module, the secure computing module including:
• a first subsystem including authenticated applications, data and code associated with said authenticated applications and authenticated operating systems, and
• a second subsystem for controlling each I/O path of said secure computing module, said second subsystem including:
• a trusted processor, the trusted processor configured for maintaining secure partitions for memory and I/O resources;
• a plurality of I/O channels;
• a cryptographic engine;
• and
• a local storage;
• a host interface module communicatively coupled to the secure computing module via said second subsystem of said secure computing module, said host interface module configured for interfacing between an untrusted host environment and a trusted environment;
• and
• a secure wireless module, said processor of said second subsystem providing a secured wireless interface through said cryptographic engine and said secure wireless module, said host interface module residing on said untrusted environment and said first subsystem and said second subsystem residing on a trusted environment, said first subsystem being cleansed and stored on the local storage.

A secure system, comprising:

• means for providing an authenticated subsystem, said authenticated subsystem including applications, data and code associated with said applications, and embedded operating systems;
• means for controlling each I/O path of said secure system, said controlling means including:
• means for maintaining secure partitions for memory and I/O resources;
• means for encrypting and decrypting information;
• and means for storing said authenticated subsystem and said encrypted information;
• means for creating a secure I/O path for untrusted host input and output devices;
• means for interfacing between an untrusted host platform and said secured system, wherein said means for creating a secure I/O path is located on said untrusted host platform,
• wherein said authenticated subsystem is cleansed and then stored on said storing means.