Patent ID: 7640584

Claim:
A method for enhancing security of a computer system having a plurality of microprocessors and a security management processor for managing execution of applications in isolation on said plurality of microprocessors, each of said plurality of microprocessors being communicatively coupled to said security management processor, said method comprising: installing an operating system on one of said plurality of microprocessors; installing at least one application on said one of said plurality of microprocessors; combining said at least one application and said operating system into an OS/application pair; encrypting said OS/application pair; storing said encrypted OS/application pair in a mass storage of said computer system, said mass storage being communicatively coupled to said security management processor; receiving an operator input; layering application graphics for said at least one application by said security management processor; starting an application from said at least one application through a graphic user interface of said security management processor, wherein said application is active, said application is on a top layer of said graphical user interface, and said application is an only application to receive operator input; loading said encrypted OS/application pair to one of said plurality of microprocessors by said graphic user interface; and running said at least one application on said loaded microprocessor.