Security policy in trusted computing systems

摘要

A system comprising a trusted computing platform including one or more first logically protected computer environments (or "compartments") associated with boot up of the system, and one or more second logically protected computing environments (or "compartments"), the or each said second compartment being associated with at least one service or process supported by the said system, and a method of loading onto the trusted computing platform a predetermined security policy including one or more security rules for controlling the operation of each of the compartments, such that said security rules relating to the or each first compartment is loaded onto the trusted computing platform when the system is initialised, and the one or more security rules relating to the or at least one of the second compartments are only loaded onto the trusted computing platform if one or more services or processes associated therewith are enabled.