Patent ID: 8646052
Filing Date: 2014-02-04
Classification: G06F

Abstract:
1. A system for securing data, comprising: a platform having virtualization technology (VT) capabilities; a virtual machine monitor configured to control operation of virtual machines on the platform and separate and distinct from any virtual machines under its control; a capability operating system (COS) to be run in a first virtual machine on the platform, the first virtual machine under control of the virtual machine monitor, an application running under the COS to request data from a source; a service operating system (SOS) to be run in a second virtual machine on the platform, the second virtual machine under control of the virtual machine monitor, the SOS configured to retrieve the requested data from the source and to encrypt the data before storing the encrypted data in a first memory store, the first memory store being accessible to the COS; and a graphics engine having decryption capabilities and having access to the first memory store and a protected second memory store, the second memory store to store decrypted data, and the second memory store being inaccessible to the first and second virtual machines.