Patent ID: 7765595
Filing Date: 2010-07-27
Classification: G06F

Abstract:
1. A trusted computer system, configured to concurrently run a plurality of processes, the trusted computer system comprising: at least one processor; a plurality of processor domains, each processor domain limited to a corresponding set of processor privileges associated therewith; and a trusted operating system configured to run on the trusted computer system, the trusted operating system comprising a plurality of security policies and a plurality of security domains, the security domains to host the plurality of processes, each process having a security level associated therewith, and the trusted operating system causing the trusted computer system to enforce the security policies in the trusted computer system to prevent a first process from accessing a second process having a different security level, wherein the processes hosted in each security domain are mapped into a processor domain, and the at least one processor enforces the resource privileges of each processor domain to prevent processes mapped into a first processor domain from modifying processes mapped into a second less privileged processor domain, and wherein the security policies comprise a subtype policy, and the subtype policy allows access control differentiation beyond mandatory and discretionary access.