Method for executing trusted-path commands

Abstract

A method for executing trusted commands, in which a trusted command is first received from a user at a user terminal and parsed by untrusted code; then passed to a trusted computing base for execution. The trusted computing base displays some indication of what is to be done back to the user for confirmation. Confirmation of the commands prevents unauthorized modification of the commands and increases system confidence. A randomly (or pseudo-randomly) generated process identifier is employed to verify the existence of a trusted path.

1 - 20 . (canceled)  
   
   
       21 . A computing environment configured to process a trusted command, comprising: 
 an untrusted environment to parse a trusted command in order to establish a parsed trusted command, said trusted command only being executable in a trusted environment; and    a trusted environment to receive the parsed trusted command from the untrusted environment and to communicate a representation of the parsed trusted command.    
   
   
       22 . The computing environment of  claim 21 , wherein the trusted environment executes the trusted command if the trusted environment detects confirmation of the trusted command.  
   
   
       23 . The computing environment of  claim 21 , wherein the representation of the trusted command is communicated through a trusted path.  
   
   
       24 . The computing environment of  claim 23 , wherein the trusted path is between a user and the trusted environment.  
   
   
       25 . The computing environment of  claim 21 , further comprising: 
 a user interface to communicate with the untrusted environment and the trusted environment.    
   
   
       26 . A method of processing a trusted command, said trusted command only being executable in a trusted mode, comprising the steps of: 
 parsing a trusted command in an untrusted mode of a system;    then establishing a trusted mode of the system; and    then communicating a representation of the trusted command in the trusted mode.    
   
   
       27 . The method of  claim 26 , further comprising the step of: 
 executing the trusted command in the trusted mode if confirmation of the trusted command is detected.    
   
   
       28 . The method of  claim 26 , wherein the communicating step comprises the step of: 
 displaying a representation of the trusted command.    
   
   
       29 . A method of processing a trusted command, comprising the steps of: 
 interpreting a trusted command in an untrusted mode;    communicating a representation of the trusted command in a trusted mode;    verifying the trusted command in the trusted mode after the communicating step; and    executing the trusted command in the trusted mode after the verifying step.    
   
   
       30 . The method of  claim 29 , wherein the verifying step comprises the step of: 
 requesting confirmation of the trusted command in the trusted mode.    
   
   
       31 . The method of  claim 29 , further comprising the step of: 
 using the trusted command in the untrusted mode.    
   
   
       32 . The method of  claim 29 , further comprising the step of: 
 transitioning from the untrusted mode to the trusted mode.    
   
   
       33 . The method of  claim 29 , further comprising the step of: 
 transitioning from the trusted mode to the untrusted mode.    
   
   
       34 . The method of  claim 33 , further comprising the step of: 
 issuing a message to a user to indicate a transition to the untrusted mode before the transitioning step.    
   
   
       35 . The method of  claim 29 , further comprising the step of: 
 detecting if a command is a trusted command in an untrusted mode.