Patent ID: 9195836
Filing Date: 2015-11-24
Classification: G06F,H04L

Abstract:
1. A method, comprising: modifying, via a processor, an operating system (OS) during a boot of a machine by decreasing original permissions of root resources maintained by the OS, wherein the OS designates the root resources as privileged resources as designated by the OS, and wherein original permissions are access-level rights for the root resources for operating within the OS, and wherein the root resources are programs that run in the OS; preventing, via the processor, the privileged resources from reading and writing to a secure storage based on the decreased permissions during operation of the machine by the modified OS, wherein the original permissions permitted reading and writing to the secure storage before the original permissions were modified during the boot of the machine to establish the decreased permissions; providing, via the processor and through the modified OS, authorized network-based resources access to the secure storage during operation of the machine over a secure network connection; and maintaining, by the processor, trust certificates for secure servers on the secure storage and utilizing the trust certificates when providing access to the secure storage to the authorized network-based resources, wherein the secure servers are the authorized network-based resources.