The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 03, 2019

Filed:

Oct. 26, 2017
Applicant:

Space Sciences Corporation, Lemitar, NM (US);

Inventors:

Lawrence J. Dickson, National City, CA (US);

Robert M. Fryer, Solana Beach, CA (US);

Lindsay O. Quarrie, Socorro, NM (US);

Assignee:

Space Sciences Corporation, Lemitar, NM (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 9/50 (2006.01); G06F 9/455 (2018.01); G06F 9/48 (2006.01); G06F 21/62 (2013.01);
U.S. Cl.
CPC ...
G06F 9/50 (2013.01); G06F 9/455 (2013.01); G06F 9/45533 (2013.01); G06F 9/45541 (2013.01); G06F 9/45558 (2013.01); G06F 9/4881 (2013.01); G06F 9/505 (2013.01); G06F 9/5027 (2013.01); G06F 9/5061 (2013.01); G06F 9/5066 (2013.01); G06F 9/5077 (2013.01); G06F 21/629 (2013.01); G06F 2009/45579 (2013.01); G06F 2009/45583 (2013.01); G06F 2009/45595 (2013.01);
Abstract

A method and apparatus for 'ring fencing' an operating system, with any apps or programs running on that operating system, in such a way that all operations of the apps, programs, and operating system use real resources only with the permission or through the intermediation of a resource allocator programmed to allow only secure access to a known finite set of resources. The list of kinds of resources is short, and the list of resources is under the explicit control of the resource allocator, which is programmed with Communicating Sequential Processes techniques so as to give formally verifiable assurance of predefined security requirements. At the same time, the full features of the operating system are supported with minimal changes in its kernel and no changes in app or program binary code that accesses real resources via calls or bytecode that drives dynamic system libraries or a runtime environment.


Find Patent Forward Citations

Loading…