Integration of high-assurance features into an application...

Details Integration of high-assurance features into an application... Integration of high-assurance features into an application...

2003-10-24

2010-06-01

Orgad, Edan (Department: 2439)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Particular communication authentication technique

C713S310000, C713S189000, C713S190000, C713S191000, C713S192000, C713S193000, C713S194000, C713S176000, C713S177000, C726S009000, C726S020000, C726S022000, C717S107000, C717S108000, C717S120000

Reexamination Certificate

active

07730318

ABSTRACT:
Application factoring or partitioning is used to integrate secure features into a conventional application. An application's functionality is partitioned into two sets according to whether a given action does, or does not, involve the handling of sensitive data. Separate software objects (processors) are created to perform these two sets of actions. A trusted processor handles secure data and runs in a high-assurance environment. When another processor encounters secure data, that data is sent to the trusted processor. The data is wrapped in such a way that allows it to be routed to the trusted processor, and prevents the data from being deciphered by any entity other than the trusted processor. An infrastructure is provided that wraps objects, routes them to the correct processor, and allows their integrity to be attested through a chain of trust leading back to base component that is known to be trustworthy.

REFERENCES:
patent: 5859966 (1999-01-01), Hayman et al.
patent: 5892900 (1999-04-01), Ginter et al.
patent: 6006332 (1999-12-01), Rabne et al.
patent: 6397242 (2002-05-01), Devine et al.
patent: 6490720 (2002-12-01), Carlsen et al.
patent: 6496823 (2002-12-01), Blank et al.
patent: 6496847 (2002-12-01), Bugnion et al.
patent: 7039801 (2006-05-01), Narin
patent: 7043616 (2006-05-01), McGrath
patent: 7082507 (2006-07-01), Christie et al.
patent: 7130951 (2006-10-01), Christie et al.
patent: 7130977 (2006-10-01), Christie et al.
patent: 7146477 (2006-12-01), Strongin et al.
patent: 7165135 (2007-01-01), Christie et al.
patent: 7228426 (2007-06-01), Sinha et al.
patent: 7313687 (2007-12-01), Kaler et al.
patent: 2002/0184520 (2002-12-01), Bush et al.
patent: 2003/0041255 (2003-02-01), Chen et al.
patent: 2003/0101322 (2003-05-01), Gardner
patent: 2003/0200402 (2003-10-01), Willman et al.
patent: 2004/0064718 (2004-04-01), Harrington et al.
patent: 2004/0210764 (2004-10-01), McGrath et al.
patent: 2004/0230794 (2004-11-01), England et al.
patent: 2004/0250036 (2004-12-01), Willman et al.
patent: 2005/0033980 (2005-02-01), Willman et al.
patent: 2005/0044169 (2005-02-01), Arbeitman et al.
Garfinkel, T. “Terra: A Virtual Machine-Based Platform for Trusted Computing”, ACM SOSP. Proceedings of the ACM Symposium on Operating Systems Principles, Oct. 19-22, 2003, 193-206, XP-002340992.
England, P. et al., “A Trusted Open Platform”, Computer, Jul. 2003, 55-62, XP-002375734.
Di Penta, M. et al., “Knowledge-Based Library Re-Factoring for an Open Source Project”, Proceedings of the 9th Working Conference on Reserve Engineering, 2002, 319-328.
Christian Jensen and Daniel Hagimont, “Protection Wrappers A Simple and Portable Sandbox for Untrusted Applications”, ACM SIGOPS European Workshop, pp. 104-110, 1998.
Paul England and Marcus Peinado, “Authenticated Operaton of Open Computing Devices”, Springer Berlin / Heidelberg, pp. 346-361, Jan. 1, 2002.
Tal Garfinkel and Mendel Rosenblum, “A Virtual Machine Introspection Based Architecture for Instrusion Detection”, pp. 1-16, Feb. 2003.
Tal Garfinkel , Mendel Rosenblum, and Dan Boneh, “Flexible OS Support and Application for Trusted Computing”, pp. 1-6, May 18-21, 2003.
England, P. et al., “A Trusted Open Platform”,Computer, Jul. 2003, 55-62, XP-002375734.
Garfinkel, T., “Terra: A Virtual Machine-Based Platform for Trusted Computing”,ACM SOSP. Proceedings of the ACM Symposium on Operating Systems Principles, Oct. 19-22, 2003, 193-206, XP-002340992.
Bugnion, E. et al., “Disco: Running Commodity Operating Systems on Scalable Multiprocessors”,Proceedings of the 16thSymposium on Operating Systems Principles(SOSP), Oct. 1997, 1-14.
Coffing, C.L., “An x86 Protected Mode Virtual Machine Monitor for the MIT Exokernel”,Submitted to the Department of Electrical Engineering and Computer Science, Massachusetts Institute of Technology, May 1999, 1-109.
Di Penta, M. et al. , “Knowledge-Based Library Re-Factoring for an Open Source Project”,Proceedings of the 9thWorking Conference on Reverse Engineering, 2002, 319-328.
Goldberg, R.P., “Survey of Virtual Machine Research”,Computer, 34-45.
Popek, G.J. et al., “Formal Requirements for Virtualizable Third Generation Architectures”,Communications of the ACM, Jul. 1974, 17(7), 412-421.
Smith, J.E., “An Overview of Virtual Machine Architectures”, Oct. 27, 2001, 1-20.
Waldspurger, C.A., “Memory Resource Managament in VMware ESX Server”,Proceedings of the 5thSymposium on Operating Systems Design and Implementation, Dec. 9-11, 2002, 15 pages.
Wavrik, J. “Code Size, Abstraction, & Factoring”,Forth Dimensions, Jul. 1995, 25-27.

Affiliated with

Also associated with

Rating

Integration of high-assurance features into an application... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Integration of high-assurance features into an application..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Integration of high-assurance features into an application... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4235043