Title:
高信頼性ゲートウェイシステム
Document Type and Number:
Japanese Patent JP2004535611
Kind Code:
A
Abstract:
An operating system comprising a kernel 100 incorporating mandatory access controls as a means to counter the effects posed by application compromise. The operating system uses a technique known as "containment" to at least limit the scope of damage when security breaches occur. In a preferred embodiment, each application supported by the operating system, is assigned a tag or label, each tag or label being indicative of a logically protected computing environment or "compartment", and applications having the same tag or label belonging to the same compartment. By default, only applications running in the same compartment can communicate with each other. Access control rules define very narrow tightly-controlled communications paths between compartments.
Inventors:
Cho, Tse Huong
Dalton, Christopher Eye
Norman, Andrew Patrick
Dalton, Christopher Eye
Norman, Andrew Patrick
Application Number:
JP2002562061A
Publication Date:
November 25, 2004
Filing Date:
January 29, 2002
Export Citation:
Assignee:
HEWLETT-PACKARD COMPANY
International Classes:
G06F1/00; G06F9/46; G06F13/00; G06F21/50; G06F21/62; H04L29/06; (IPC1-7): G06F13/00; G06F1/00; G06F15/00
Attorney, Agent or Firm:
Next student Okada
Naoya Fushimi
Yukari Hirano
Naoya Fushimi
Yukari Hirano