Patent ID: 9633206
Date: 2017-04-25
CPC Classifications: G06F

Claim:
1. A method for demonstrating integrity of an operating system compartment in a computing platform having a trusted device, comprising the steps of: (a) providing a host operating system of the computing platform; (b) determining a host operating system status of the host operating system using the trusted device; (c) providing a compartment of the host operating system; and (d) determining, by a processor, whether resources assigned to the compartment have been interfered with by resources from outside the compartment, the resources comprising at least a computer process assigned to the compartment; and (e) defining a compartment status based on the determining in step (d), wherein the step (d) comprises comparing a current state of the compartment against an expected state, providing information about the current state of the compartment, including information about at least one of (i) a section of file space allocated to the compartment, (ii) any processes allocated to the compartment, and (iii) any communication interfaces allocated to the compartment, and at least one of: confirming that the compartment has access only to an expected section of file space; confirming that the allocated section of file space is in an expected condition; confirming that only an expected process or processes are allocated to the compartment; and confirming that only an expected communication interface or communication interfaces are allocated to the compartment.