Patent ID: 7103914

Claim:
A computer program product for a trusted operating system, stored on a computer readable storage medium, the trusted operating system comprising: a first set of computer readable code, the first set of computer readable code comprising an application domain, in which trusted and untrusted applications can be executed; a second set of computer readable code, the second set of computer readable code comprising an operating system services layer, wherein the operating system services layer provides interfaces allowing applications written for at least one other operating system to be run in the trusted operating system, whereby the operating system services layer emulates the at least one other operating systems; a third set of computer readable code, the third set of computer readable code comprising a trusted system services layer, and, a fourth set of computer readable code, the fourth set of computer readable code comprising a security kernel, for enforcing system security policy and integrity rules, and for providing basic operating system services, including facilitating user and administrator actions,wherein the system security policy is implemented by a set of security rules designed to protect a first process from unauthorized access by a second process having a security level different than that of said first process, and wherein the integrity rules protect information from unauthorized modification.