| CPC G06F 21/44 (2013.01) [G06F 9/4812 (2013.01); G06F 11/3608 (2013.01); G06F 21/602 (2013.01); G06F 2221/2141 (2013.01)] | 31 Claims |

|
1. A cyber-physical system having provable end-to-end guarantees comprising:
two or more heterogeneous interconnected computing platforms, each platform having one or more unverified components and one or more modular provable objects retrofit with the unverified components that contribute to the one or more end-to-end guarantees; and
wherein each computing platform has a prime object acting as a root-of-trust to protect and report on the one or more modular provable objects on the computing platform;
wherein a collection of prime objects across the computing platforms protect and report on the one or more modular provable objects within and across the computing platforms, thereby contributing to end-to-end guarantees at runtime; and
wherein the prime objects verify a memory address space on each of the computing platforms and instantiate the modular provable objects for each platform in a verified memory address space.
|