Local secure service partitions for operating system security
AssigneeMicrosoft Corporation
InventorsThekkthalackal Varugis Kurien, Paul England, Ravindra Nath Pandya, Niels Ferguson
Life of this patent
Estimating the term…
Loading patent…
AssigneeMicrosoft Corporation
InventorsThekkthalackal Varugis Kurien, Paul England, Ravindra Nath Pandya, Niels Ferguson
Estimating the term…
Systems and methods provide multiple partitions hosted on an isolation technology such as a hypervisor where at least one of the partitions, a local secure service partition (LSSP), provides security services to other partitions. The service partitions (LSSPs) host those high assurance services that require strict security isolation, where the service can be shared across partitions and accessed even when the user is not connected to a network. The LSSP also can certify the results of any computation using a key signed by a TPM attestation identity key (AIK), or other key held securely by the hypervisor or a service partition. The LSSPs may be configured to provide trusted audit logs, trusted security scans, trusted cryptographic services, trusted compilation and testing, trusted logon services, and the like.
A method of providing a security service in a virtualized computer system, comprising:
A virtual machine system comprising:
A computer readable disc or device comprising:
Dependencies are inferred from the claim text.