Patent ID: 9648045
Date: 2017-05-09
CPC Classifications: G06F,H04L

Claim:
1. A method for processing information securely, the method comprising: partitioning hardware platform resources via a separation kernel hypervisor into a plurality of guest operating system virtual machine protection domains; isolating the domains in time and space from each other; providing a list of memory locations of an authorized guest to another guest; associating each of a plurality of physical memory locations with a respective specification of execution context information upon access to the each of the plurality of physical memory locations; providing a message of the specification to the another guest; providing the execution context information to the another guest; providing a virtualization assistance layer (VAL) including a virtual representation of the hardware platform in each of the guest operating system virtual machine protection domains such that the VAL is not directly accessible by the authorized guest, wherein the virtual representation comprises a virtual machine including a virtual motherboard having a virtual CPU and memory; hosting a mechanism to map physical memory pages as non-executable; processing exceptions to non-executable page execution attempts by the associated virtual machine; hosting another mechanism to determine whether the physical memory locations are accessed; replacing the context information in the virtual machine; pausing or resuming execution of the virtual machine; and sending a notification of memory access and the specification to a requesting guest.