Patent ID: 7225333

Claim:
A method for a secure processor to instantiate and authenticate a secure application thereon by way of a security kernel, the method comprising: powering on into a normal mode; receiving an instruction to instantiate the application after being powered on and while being in the normal mode; after receiving the instruction to instantiate the application, transitioning from the normal mode to a preferred mode upon a non-power-up executed CPU reset, where a security key of the processor is accessible while in the preferred mode; instantiating and running a security kernel while in the preferred mode, the security kernel; accessing the security key; applying the accessed security key to decrypt at least one encrypted key for the application; storing the decrypted key(s) in a location where the application will expect the key(s) to be found; and authenticating the application on the processor; instantiating the application while in the preferred mode and only after the security kernel has authenticated such application; and transitioning from the preferred mode to the normal mode after the security kernel authenticates the application and the application has been instantiated, where the security key is not accessible while in the normal mode, the application as instantiated during the preferred mode being available for use during the transitioned-to normal mode; wherein the security kernel allows the processor to be trusted to keep hidden the security key(s) of the application, and wherein the security kernel employs the accessed security key during the preferred mode to authenticate/verify the application prior to instantiation thereof.