Patent ID: 8458463

Claim:
A method for safe operation, comprising: loading, by a computer, a compressed kernel of a safe operating system to a memory of the computer, decompressing a driver of a security device to the memory of the computer; initializing, by the computer, parameters of the safe operating system; creating, by the computer, a security master process and running the safe operating system; inquiring, by the computer, the security device by the security master process and determining whether the security device is found and is legitimate; if the security device is not found or is illegitimate, prompting an error message and exiting the safe operating system; if the security device is legitimate, the safe operating system reading encrypted kernel parameters from the security device, decrypting the encrypted kernel parameters with a key inside the security device and loading the decrypted kernel parameters to the memory of the computer, wherein the decrypted kernel parameters are information necessary for creating a security sub-process, the security sub-process is used for exchanging security information with the security device; and the safe operating system creating the security sub-process with the decrypted kernel parameters by inheriting the security master process, verifying legitimacy of a user by performing information interaction between the security sub-process and the security device, if the user is legitimate, permitting the safe operating system to run properly; otherwise, performing exception handling.