US 11,947,688 B2
Secure computing system
Omar Nathaniel Ely, Paris (FR)
Assigned to CUPP Computing AS, Oslo (NO)
Filed by CUPP Computing AS, Oslo (NO)
Filed on Mar. 7, 2023, as Appl. No. 18/118,550.
Application 18/118,550 is a continuation of application No. 17/217,064, filed on Mar. 30, 2021, granted, now 11,599,650.
Application 17/217,064 is a continuation of application No. 16/701,403, filed on Dec. 3, 2019, granted, now 10,963,577, issued on Mar. 30, 2021.
Application 16/701,403 is a continuation of application No. 16/230,508, filed on Dec. 21, 2018, granted, now 10,496,834, issued on Dec. 3, 2019.
Application 16/230,508 is a continuation of application No. 15/707,936, filed on Sep. 18, 2017, granted, now 10,162,975, issued on Dec. 25, 2018.
Application 15/707,936 is a continuation of application No. 13/822,847, granted, now 9,767,297, issued on Sep. 19, 2017, previously published as PCT/NO2011/000303, filed on Oct. 25, 2011.
Prior Publication US 2024/0037253 A1, Feb. 1, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/60 (2013.01); G06F 21/64 (2013.01); G06F 21/78 (2013.01)
CPC G06F 21/606 (2013.01) [G06F 21/64 (2013.01); G06F 21/78 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
a virtual machine engine for generating one or more virtual machines, each virtual machine being generated having a virtual machine confidentiality level, the virtual machine confidentiality level being selected from at least a higher confidentiality level and a lower confidentiality level, a first virtual machine with the higher confidentiality level being configured to require a stronger confidentiality process than a second virtual machine with the lower confidentiality level;
a first program;
a second program;
a first datastore or data set associated with a first data confidentiality level;
a second datastore or data set associated with a second data confidentiality level;
at least one hardware processor configured to:
receive a request to use the first program;
execute a particular virtual machine with a particular virtual machine confidentiality level;
use a particular confidentiality process before or while operating the first program by the particular virtual machine, the particular confidentiality process being associated with the particular virtual machine confidentiality level; and
allow the first program to write to the first datastore or data set, only if the first data confidentiality level is equal to or higher than the particular virtual machine confidentiality level.