Methods and systems for achieving high assurance computing using low assurance operating systems and processes

Abstract

A device for providing a blended protection scheme for a high assurance communication device includes a reconfigurable firewall and packet inspection device for enforcing isolation and separation between a communication device's CPUs, memory, and the communication device, where the reconfigurable firewall is implemented on an integrated chip or motherboard chipset. The device further includes a protected CPU that is adapted to manage security functions and to reconfigure the reconfigurable firewall. In embodiments, the device is a firewall and virus infection inspection system. In other embodiments the device is a virtual private network for network based communications.

1 . A device for providing a blended protection scheme for a high assurance communication device comprising:
 a reconfigurable firewall and packet inspection device for enforcing isolation and separation between a communication device's CPUs, memory, and the communication device, where the reconfigurable firewall is implemented on an integrated chip or motherboard chipset; and   a protected CPU adapted to mange security functions and to reconfigure the reconfigurable firewall.   
     
     
         2 . The device of  claim 1 , said device comprising a firewall and virus infection inspection system. 
     
     
         3 . The device of  claim 1 , said device comprising a virtual private network for network based communications.