Data security verification for data transfers between security levels in trusted operating system
View Patent ↗A trusted computer system that offers Linux® compatibility and supports contemporary hardware speeds. It is designed to require no porting of common applications which run on Linux, to be easy to develop for, and to allow the use of a wide variety of modern development tools. The system is further designed to meet or exceed the Common Criteria EAL-5 or higher rating through incorporation of required security features, as well as a very high level of assurance for handling data at a wide range of sensitivity (e.g., classification) levels in a wide range of operational environments. This is achieved through the implementation of a well-layered operating system which has been designed from the ground up to enforce security, but which also supports Linux operating system functions and methods.
1. A security policy enforcement system, comprising:
at least one processor, at least one of the at least one processors having a multi-domain architecture used to physically isolate domains in the processor, each domain having a privilege level associated therewith;
at least one Random Access Memory unit;
a secure operating system, the secure operating system comprising at least two different security classification levels, with data existing in each of the security classification levels; and,
at least one data security verification process, the data security verification process performing security checks on the content of data to determine whether to allow the data to be transferred by the secure operating system from one classification level to another, the data security verification process and the data each occupying a separate physically isolated domain, the domain occupied by the data security verification process having a higher privilege level than the domain occupied by the data.
2. The security policy enforcement system of claim 1 , the secure operating system utilizing the physically isolated multi-domain architecture of the at least one processor to ensure process isolation.
3. The security policy enforcement system of claim 1 , the secure operating system providing interfaces that allow applications written for at least one other operating system to be run within the secure operating system.
4. The security policy enforcement system of claim 1 , the security checks performed by the at least one data security verification means being performed in the at least one Random Access Memory unit.
5. The security policy enforcement system of claim 1 , wherein the security policy enforcement system enforces the at least one data security verification process on a single host.
6. The security policy enforcement system of claim 1 , further comprising at least one network interface.
7. The security policy enforcement system of claim 6 , the at least one network interface connecting the security policy enforcement system to at least one network using Transmission Control Protocol and Internet Protocol.
8. The security policy enforcement system of claim 1 , further comprising at least two network interfaces, the at least two network interfaces connecting the security policy enforcement system to at least two networks.
9. The security policy enforcement system of claim 8 , each of the at least two networks operating at different classification levels.
10. The security policy enforcement system of claim 9 , the at least two networks utilizing Transmission Control Protocol and Internet Protocol.
11. A security policy enforcement system, comprising:
at least one Random Access Memory unit;
a multi-domain architecture used to physically isolate domains in at least one processor, each domain having a privilege level associated therewith;
a secure operating system, the secure operating system comprising at least two different security classification levels, with data existing in each of the security classification levels; and,
at least one data security verification process, the data security verification process performing security checks on the content of data to determine if the data can be transferred by the secure operating system from one classification level to another, the data security verification process and the data each occupying a separate physically isolated domain, the domain occupied by the data security verification process having a higher privilege than the domain occupied by the data.