General Dynamics C4 Systems, Inc.

Motorola Corporation

General Dynamics Decision Systems, Inc.

Francis Gregory Sydnor, Jr

Douglas Allan Hardy

Pamela Tam Carmony

Conan Brian Dailey

Keith Michael Hines

Peter Duncan White

Jennifer Lynn Amstutz

Hua Chen

Paul Thomas Kitaj

William K Oh

A method for managing operability of an on-chip debug capability () in a product () configured to execute software () includes storing () a debug public key () and an operational public key () in product memory (). The software () with either a debug signature () or an operational signature () is saved () in the memory (). When enablement indication is received, the debug signature () is validated () using the debug public key (). The debug capability () is enabled upon validation of the signature () and the software () is allowed to execute. When disablement indication is received, the operational signature () is verified () using the operational public key (). The on-chip debug capability () is disabled upon verification of the signature () and the software () is allowed to execute.

Method for managing operability of on-chip debug capability

A computer-implemented system () is provided that supports a high degree of separation between processing elements. The computer-implemented system () comprises a plurality of cells () residing on the computer-implemented system, where each cell () includes a domain of execution () and at least one processing element (); a separation specification () that governs communication between the processing elements (); and a kernel () of an operating system that facilitates execution of the processing elements () and administers the communication between the processing elements () in accordance with the separation specification (), such that one processing element () can influence the operation of another processing element () only as set forth by the separation specification (). In particular, the separation specification provides memory allocation, remote procedure calls and exception handling mechanisms.

Method for allocating memory to tasks without exceeding predefined memory requirements

A computer-implemented system ( ) is provided that supports a high degree of separation between processing elements. The computer-implemented system ( ) comprises a plurality of cells ( ) residing on the computer-implemented system, where each cell ( ) includes a domain of execution ( ) and at least one processing element ( ); a separation specification ( ) that governs communication between the processing elements ( ); and a kernel ( ) of an operating system that facilitates execution of the processing elements ( ) and administers the communication between the processing elements ( ) in accordance with the separation specification ( ), such that one processing element ( ) can influence the operation of another processing element ( ) only as set forth by the separation specification ( ). In particular, the separation specification provides memory allocation, remote procedure calls and exception handling mechanisms.

Separation kernel with memory allocation, remote procedure call and exception handling mechanisms

Controllable functions (210, 220, 230) and controllable connection managers (212, 222, 216, 226) are used to provide a fail-safe security system implemented on a single processor (200). Red subsystems, black subsystems and clear bypass subsystems ensure separation between red data and black data. Connection managers (212, 222, 216, 226) are used to isolate and control red data ports (214), black data ports (224), red crypto ports (218), and black crypto ports (228). Subsystems are configured to control data flow, provide data separation, access control and prevent single failures from compromising security system (200). Each subsystem is managed separately, and each subsystem has unique access protection provided by controller (202). Within security system (200), the subsystems are kept separate. Functional separation of the red data memory and black data memory is maintained to provide fail-safe data isolation.

Failsafe security system and method

Growing community of inventors

Scottsdale, AZ, United States of America

Francis Gregory Sydnor, Jr