US 11,734,428 B2
Secure embedded system and method of making secure
Dominique Bolignano, Paris (FR)
Assigned to PROVENRUN, Paris (FR)
Appl. No. 16/637,425
Filed by PROVENRUN, Paris (FR)
PCT Filed Aug. 7, 2018, PCT No. PCT/EP2018/071352
§ 371(c)(1), (2) Date Feb. 7, 2020,
PCT Pub. No. WO2019/030208, PCT Pub. Date Feb. 14, 2019.
Claims priority of application No. 1770839 (FR), filed on Aug. 7, 2017.
Prior Publication US 2020/0226259 A1, Jul. 16, 2020
Int. Cl. G06F 21/57 (2013.01); G06F 9/445 (2018.01); G06F 21/12 (2013.01); G06F 21/62 (2013.01)
CPC G06F 21/572 (2013.01) [G06F 9/44589 (2013.01); G06F 21/126 (2013.01); G06F 21/577 (2013.01); G06F 21/629 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An embedded system comprising:
a processor operated via a kernel executable by the processor, the kernel being formally proven to satisfy at least one security property;
a hardware peripheral;
a memory; and
an application software program recorded in the memory, the application software program being executed via the formally proven kernel, the application software program being not formally proven or not entirely formally proven, and
wherein the formally proven kernel, executes the application software program, and forces the application software program to execute a policy of controlling access to the hardware peripheral, wherein the formally proven kernel verifies that execution of the application software program does not go against, or complies with, the policy for controlling access to the hardware peripheral,
wherein the formally proven kernel imposes on the application software program the policy for controlling access to the hardware peripheral,
wherein the at least one security property is a policy
for security relative to integrity of data and/or instructions transmitted to and/or from the hardware peripheral,
for privacy of data transmitted to and/or from the hardware peripheral,
for controlling access to the hardware peripheral by the application software program and/or by at least one additional application software program, and/or
for direction of circulation of data and/or instructions transmitted to and/or from the hardware peripheral.