Method and apparatus for secure execution of untrusted software

Details Method and apparatus for secure execution of untrusted software Method and apparatus for secure execution of untrusted software

1989-02-03

1990-05-15

Buczinski, Stephen C.

Cryptography

Cryptanalysis

364200, 380 49, 380 50, H04L 900, H04L 902

Patent

active

049264761

ABSTRACT:
A CPU architecture guarantees that untrusted software will handle multi-level classified data in a secure manner. A single copy of untrusted software is granted simultaneous read and write access to multiple levels of classified data, with assurance that both the Bell-LaPadula simple security property and the *-property will be correctly enforced. This enforcement is accomplished without the severe constraints normally imposed by computers that do not incorporate this invention. The technique may also be used to enforce integrity policy constraints alone or in conjunction with security policy constraints (classifications). This method relies upon hardware comparison of sensitivity level tags (and/or integrity level tags) associated with data storage blocks. Software need not be examined before it is permitted to handle multi-level secure data because any attempted violation of a security policy (or an integrity policy) will cause a trap to the trusted operating system. Internal label registers are dynamically updated for permitted accesses by the untrusted software.

REFERENCES:
patent: 3245045 (1966-04-01), Randlev
patent: 3657699 (1972-04-01), Rocher et al.
patent: 4120030 (1978-10-01), Johnstone
patent: 4278837 (1981-07-01), Best
patent: 4319079 (1982-03-01), Best
patent: 4685056 (1987-08-01), Barnsdale et al.
patent: 4807288 (1989-02-01), Ugon et al.
D. E. Denning, Communications of the ACM, May 1976, vol. 19, No. 5, p. 236.
B. W. Lampson, Communications of the ACM, Oct., 1973, vol. 16, No. 10, p. 613.

Affiliated with

Also associated with

Rating

Method and apparatus for secure execution of untrusted software does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and apparatus for secure execution of untrusted software, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for secure execution of untrusted software will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-628163