Patent ID: 8613090

Claim:
A method, comprising: providing a plurality of secure data entities, said step of providing said secure data entities comprising: instantiating a communication monitor on a processor, said communication monitor comprising secure executable instructions; defining a permitted instruction record; instantiating a first prohibitor on said processor, said first prohibitor comprising said secure executable instructions; defining a prohibited instruction record; instantiating a second prohibitor on said processor, said second prohibitor comprising said secure executable instructions; providing at least one non-secure data entity, said step of providing said at least one non-secure data entity comprising instantiating a non-secure program on said processor, said non-secure program comprising non-secure executable instructions; said communication monitor detecting a communication among any of said secure data entities and said at least one non-secure data entity; said first prohibitor prohibiting execution of said non-secure executable instructions on said secure data entities unless said non-secure executable instructions are recorded in said permitted instruction record; said second prohibitor prohibiting execution of said non-secure executable instructions if said non-secure executable instructions are recorded in said prohibited instruction record.