Single-Chip Virtualizing and Obfuscating Storage System for Portable Computing Devices

摘要

In certain embodiments, an information obfuscation service may be incorporated directly into the main applications processor of a portable computing device such that the applications processor and its relevant storage peripherals may be securely shared via a virtualization firmware module, avoiding the use of specialized hardware or major modifications of the operating system. The virtualizing and obfuscating storage firmware module may enable a much higher level of assurance in information-at-rest protection while using only the memory protection and privilege mode facilities inherent in common portable device applications microprocessors. The virtualizing and obfuscating storage firmware may interpose storage accesses originating from the operating system. This interposition may be performed seamlessly, without explicit knowledge of the operating system.

主权项

1. A portable computing device, comprising:
at least one operating system; at least one virtualized storage device configured to be accessed by the operating system; at least one physical storage device configured not to be directly accessible by the operating system; and at least one virtualizing and obfuscating storage firmware module configured for executing concurrently with the operating system on a processor.