公开(公告)号：US06922774B2

公开(公告)日：2005-07-26

申请号：US09854818

申请日：2001-05-14

申请人： Robert V. Meushaw ,  Mark S. Schneider ,  Donald N. Simard ,  Grant M. Wagner

发明人： Robert V. Meushaw ,  Mark S. Schneider ,  Donald N. Simard ,  Grant M. Wagner

IPC分类号： G06F9/455 ,  G06F21/00 ,  H04L9/00 ,  G06F15/173 ,  H04K1/00

CPC分类号： G06F21/6236 ,  G06F9/45558 ,  G06F2009/45587 ,  G06F2009/45595

摘要： A device for and method of secure computing that includes a computer system having a processor; an operating-system software program loaded onto the processor; a type-II virtual machine monitor software program loaded onto the operating-system software program; a user-definable number of non-sensitive virtual-machines; a user-definable number of sensitive virtual-machines, where each sensitive virtual-machine has a user-definable sensitivity level; a user-definable number of encryption virtual-machines, where each encryption virtual-machine is connected to one of said user-definable number of sensitive virtual-machines, and where each encryption virtual-machine includes at least one encryption algorithm capable of encrypting information from the corresponding sensitive virtual-machine according to the corresponding sensitivity level; and a router virtual-machine connected to each non-sensitive virtual-machine and each encryption virtual-machine.

摘要翻译： 一种用于安全计算的装置和方法，包括具有处理器的计算机系统; 加载到处理器上的操作系统软件程序; 加载到操作系统软件程序的II型虚拟机监视软件程序; 用户可定义的非敏感虚拟机数量; 用户可定义数量的敏感虚拟机，其中每个敏感虚拟机具有用户可定义的灵敏度级别; 用户可定义数量的加密虚拟机，其中每个加密虚拟机连接到所述用户可定义数量的敏感虚拟机之一，并且其中每个加密虚拟机包括能够加密信息的至少一个加密算法 从对应的敏感虚拟机根据相应的灵敏度级别; 以及连接到每个非敏感虚拟机和每个加密虚拟机的路由器虚拟机。