Execution environment and gatekeeper arrangement
US11526613B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jul 3, 2019 |
| Grant date | Dec 13, 2022 |
| Priority date | — |
| Expiry date | Feb 20, 2041 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/033
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A computer system has a separation mechanism which enforces separation between at least two execution environments such that one execution environment is a gatekeeper which interposes on all communications of the other execution environment. The computer system has an attestation mechanism which enables the gatekeeper to attest to properties of the at least two execution environments. A first one of the execution environments runs application specific code which may contain security vulnerabilities. The gatekeeper is configured to enforce an input output policy on the first execution environment by interposing on all communication to and from the first execution environment by forwarding, modifying or dropping individual ones of the communications according to the policy. The gatekeeper provides evidence of attestation both for the application specific code and the policy.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.