US 11,748,484 B2
Tri-level secure separation kernel
Arlen Baker, Scottsdale, AZ (US)
Assigned to WIND RIVER SYSTEMS, INC., Alameda, CA (US)
Filed by Wind River Systems, Inc., Alameda, CA (US)
Filed on Jan. 21, 2020, as Appl. No. 16/747,789.
Prior Publication US 2021/0224392 A1, Jul. 22, 2021
Int. Cl. G06F 21/57 (2013.01); G06F 9/455 (2018.01)
CPC G06F 21/575 (2013.01) [G06F 9/45558 (2013.01); G06F 2009/45587 (2013.01); G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A high assurance kernel, comprising:
at a safety certified hypervised system using a separation kernel:
a first level of the separation kernel configured to perform first security features associated with a hypervisor, the first level configured to run on a primary core; and
a second level of the separation kernel configured to augment the first security features with second security features by introducing critical security features that measures the first security features associated with the hypervisor and enforces the security policy associated with the hypervisor, the second level being separate from the hypervisor and implemented on a separate protected component from the primary core, the first level and the second level communicating with one another through a physical separation between the first and second levels.