Patent ID: 7966458
Filing Date: 2011-06-21
Classification: G06F

Abstract:
1. An apparatus comprising: At least one machine configured to execute a primary user operating system; a random access memory (RAM); a first portion of memory configured to be used by the primary user operating system, the first portion of memory being a section of the RAM; at least one appliance operating system that is independent from the primary user operating system; a second portion of memory configured to be sequestered from the primary user operating system, the second portion of memory being a reserved section of the RAM; and an access violation monitor configured to restrict access from the at least one appliance operating system to the second portion of memory, by maintaining second layer of page tables configured to virtualize the RAM and assigning RAM interrupts to the at least one appliance operating system; wherein the access violation monitor is configured to run only when the at least one appliance operating system is invoked; and wherein the at least one appliance operating system is configured to be invoked only after the primary user operating system has been suspended to a standby state by storing a context of the primary operating system in the first memory, the context enabling the resumption of the primary operating system.