Patent ID: 8800008
Filing Date: 2014-08-05
Classification: G06F,H04L

Abstract:
1. A computing apparatus, comprising: one or more first processors and one or more first memory devices; a trusted operating system, executed by the one or more first processors, configured to store protected data in an unprotected form only on the first memory devices and further configured to cause the one or more first processors to execute an access control module, wherein the access control module is configured to control access to the protected data in accordance with one or more rules specified in a ticket, and further configured to prevent unauthorized use of the ticket by storing a log, the log identifying either a user and data the user has gained access to, or identifying which tickets have been used, and wherein the access control module is a component of the trusted operating system; one or more instances of operating systems different from the trusted operating system configured to run one or more software applications usable to access the protected data in the unprotected form on the first memory devices; and a mechanism external to the trusted operating system and configured to protect against attempts to copy the unprotected form of the protected data onto memory devices other than the one or more first memory devices.