John E Worley

US Patent:

20020194389, Dec 19, 2002

Filed:

Apr 8, 2002

Appl. No.:

10/118646

Inventors:

William Worley - Centennial CO, US
John Worley - Fort Collins CO, US
Daniel Magenheimer - Fort Collins CO, US
Chris Hyser - Fort Collins CO, US
Tom Christian - Fort Collins CO, US
Bret McKee - Fort Collins CO, US
Robert Gardner - Fort Collins CO, US

International Classification:

G06F009/00
G06F009/54
G06F015/163

US Classification:

709/310000, 709/102000

Abstract:

A combined-hardware-and-software secure-platform interface to which operating systems and customized control programs interface within a computer system. The combined-hardware-and-software secure-platform interface employs a hardware platform that provides at least four privilege levels, non-privileged instructions, non-privileged registers, privileged instructions, privileged registers, and firmware interfaces. The combined-hardware-and-software secure-platform interface conceals all privileged instructions, privileged registers, and firmware interfaces and privileged registers from direct access by operating systems and custom control programs, providing to the operating systems and custom control programs the non-privileged instructions and non-privileged registers provided by the hardware platform as well as a set of callable software services. The callable services provide a set of secure-platform management services for operational control of hardware resources that neither exposes privileged instructions, privileged registers, nor firmware interfaces of the hardware nor simulates privileged instructions and privileged registers. The callable services also provide a set of security-management services that employ internally generated secret data, each compartmentalized security-management service managing internal secret data without exposing the internal secret data to computational entities other than the security-management service itself.