Patent ID: 8612755

Claim:
A system comprising a trusted computing platform including: at least one first logically protected computing compartment associated with initialization of said system, and at least one second logically protected computing compartment, each second logically protected computing compartment being associated with at least one service or process supported by said system, wherein the system is arranged to load onto said trusted computing platform a predetermined security policy including at least one security rule for controlling the operation of each of said logically protected computing compartments; wherein the security rule relating to the at least one first logically protected computing compartment is arranged to be loaded onto said trusted computing platform when the system is initialized, wherein the at least one security rule relating to the at least one second logically protected computing compartment is only arranged to be loaded onto said trusted computing platform if one or more services or processes associated therewith are enabled, wherein one or more common variable is defined for each compartment, and wherein a relevant security rule is only arranged to be added if the variable associated with a particular compartment is enabled.