Patent ID: 7865683

Claim:
An apparatus comprising: one or more computer processors; a first memory coupled to the one or more computer processors; a second memory coupled to the one or more computer processors; a code location component, of a first execution environment, configured, responsive to execution by the one or more computer processors, to locate a first group of memory locations in a first memory having first content corresponding to a first component of a second execution environment securely partitioned from the first execution environment; and a memory manager, of the first execution environment, coupled to the code location component and configured, responsive to execution by the one or more computer processors, to: associate a first identifier with the first group of memory locations in the first memory to regulate access to the content from the second execution environment; and store the first identifier in a second memory such that the first identifier is accessible from the second execution environment as read-only; wherein the second execution environment is under the control of an operating system that does not control the first execution environment.