Patent ID: 8875271

Claim:
A system for executing unsigned content and securing access in a closed system, comprising: a closed computing device, said closed computing device configured to execute signed software content components that are authorized by signing authorities to operate on any one of a plurality of closed computing devices; and at least one unsigned software content component, said at least one unsigned content component configured to execute on said closed computing device by having said closed computing device virtualize one or more hardware interfaces associated with one or more respective hardware resources of the closed computing device in order to prevent direct access to the one or more respective hardware resources while allowing indirect access to the one or more respective hardware resources for said at least one unsigned software content component, wherein the one or more virtualized hardware interfaces are managed by an access layer comprising a first buffer maintained in a user mode into which commands issued by said at least one unsigned software content component are stored, and a second buffer maintained in a supervisor mode into which the commands stored in the first buffer are copied, wherein the access layer validates the copied commands in the second buffer prior to allowing the commands to execute and access the one or more respective hardware resources.