Patent ID: 8397306
Filing Date: 2013-03-12
Classification: G06F

Abstract:
1. A computer-implemented method of generating a security domain, the method comprising: defining the security domain representing a bounded area of a Virtual Machine for storing protected objects of the Virtual Machine to provide conditional access to a Trusted Platform Module (TMP) register, the security domain including kernel-space and user-space objects, and having a flag indicating the validity of the security domain; allocating a memory space to a security domain, defining a root of trust area and associating computer resources with the security domain, such that the root of trust is guaranteed to be secure upon initialization of the security domain; initializing the security domain using the root of trust, the security domain utilizing the memory space; loading executable code into the security domain and the memory space; allowing the executable code in the security domain access to the physical resources; giving the executable code in the security domain permission to access the memory space; and upon an attempt of illegal access to the memory space, setting the validity flag to indicate invalidity and invalidating the security domain; wherein the domain invalidation is detectable by a user, and wherein, as long as the validity flag does not indicate invalidity, data stored in the memory space is known to be uncompromised.