Patent ID: 8140655

Claim:
A dynamic enclave computing system, comprising: a physical layer switch; a plurality of computing subsystem resources connected to the physical layer switch; and a configuration policy manager and controller connected to the physical layer switch that manages and controls the physical layer switch, wherein the plurality of computing subsystem resources includes at least one type of computing subsystem resource selected from the following: a network switch type computing subsystem resource, a storage device type computing subsystem resource, a display type computing subsystem resource and a guard type computing subsystem resource, and wherein the configuration policy manager and controller is configured and arranged to be able to allocate the at least one type of computing subsystem resource to a requesting computing enclave via the physical layer switch, and configured to monitor the enclave with the computing subsystem resource and instructing the physical layer switch to take control of the computing subsystem resource when the enclave no longer requires the computing subsystem resource via a release module of the configuration policy manager and controller computer device; and configured to accept the computing subsystem resource from the release module, sanitizing the computing subsystem resource, and instructing the physical layer switch to return the computing subsystem resource to the resource pool via a sanitizer module of the configuration policy manager and controller computer device.