Patent ID: 7562220

Claim:
An isolated computing environment module configured for use in a computer and for maintaining security of data hosted by the isolated computing environment module, the isolated computing environment module comprising: an initial manufactured security state of the data hosted by the isolated computing environment module, wherein the data is stored in volatile memory; a core service module configured to control access to the data hosted by the computer; an interface module configured to receive a message and provide information provided by the message to the core service module, the message comprising at least one of an update code or configuration information; a cryptographic service module, coupled to the core service module, and configured to access a first key and to verify a digital signature of the message using the first key before allowing access to the data; and an update service module configured to update the core service module responsive to the information provided by the message after verification of the digital signature of the message using the first key, and configured to use a second key configured for use in a production of a programmed security state of the data and a later verification by the cryptographic service module, wherein the programmed security state of the data includes kernel data other than the data of the initial manufactured security state.