Patent ID: 8375448

Claim:
A computer system, comprising: a memory and a processor; a general-purpose kernel running on the processor with a first configurable set of integrity markers and properties; a real-time kernel running on the processor with a second configurable set of integrity markers and properties, the real-time kernel running a first security process, a second security process, and one or more challenge handlers, the first security process having a third configurable set of integrity markers and properties, the second security process having a fourth configurable set of integrity markers and properties; the first security process configured to periodically check the first configurable set of integrity markers and properties; the second security process configured to periodically check the first configurable set of integrity markers and properties and to periodically check the third configurable set of integrity markers and properties; the one or more challenge handlers configured to provide challenge/response functionality when challenges are received from a monitor; and a security module running under the general-purpose kernel configured to periodically check the second configurable set of integrity markers and properties, to periodically check the third configurable set of integrity markers and properties, and periodically check the fourth configurable set of integrity markers.