Patent ID: 8839004

Claim:
A system for secure application hosting, comprising: a data bus; a memory directly coupled to the data bus; a first processor directly coupled to the data bus; a second processor directly coupled to the data bus; a data storage device coupled to the second processor; and a network interface coupled to the second processor; wherein: the memory and first processor operate in an unencrypted domain, and the data storage device and network interface operate in an encrypted domain; and the second processor operates as an intermediary between the encrypted domain and the unencrypted domain and is configured and arranged to: decrypt encrypted first data received by the network interface and addressed to the first processor, and send the decrypted first data to the first processor; encrypt second data to be sent to the network interface from the first processor, and send the encrypted second data to the network interface; encrypt third data to be written to the data storage device by the first processor, and write the encrypted third data to the data storage device; and decrypt fourth data requested by the first processor to be retrieved from the data storage device, and send the decrypted fourth data to the first processor; wherein in response to a request from a third processor received via the network interface to execute an application, the second processor is configured and arranged to: retrieve from the data storage device, an encrypted boot image that is associated with the third processor; decrypt the encrypted boot image using a decryption key included in the request to execute the application; and boot the first processor using the decrypted boot image.