Patent ID: 8997205
Filing Date: 2015-03-31
Classification: G06F

Abstract:
1. A method for providing secure domain name services to a host computer comprising: launching, on a host computer, a hypervisor, wherein the hypervisor is configured to support a user domain and a secure domain, wherein the user domain is configured to execute various guest applications using functional layers and an unmodified host operating system that interacts with the hypervisor and secure domain, wherein the hypervisor is a type-1 hypervisor, wherein the unmodified host operating system functions as a guest operating system, and wherein the secure domain comprises backend and native drivers that interact with the hypervisor; launching, on the host computer, an isolated execution environment using the hypervisor, wherein the backend and native drivers that interact with the hypervisor provide a secure session for launching the isolated execution environment without reliance on a host operating system or host applications to prevent being compromised by any local malicious software residing within the host operating system or host applications; launching, in response to the launch of the isolated execution environment, a secure application within the isolated execution environment; requesting domain name services from within the isolated execution environment, wherein the domain name services are provided by a secure domain name services server whose address is hard-coded into the isolated execution environment; contacting the domain name services server in the event domain name services are required; and providing the address to the secure application within the isolated execution environment to establish a secure connection.