Method and system achieving individualized protected space in an operating system

Abstract

Aspects for achieving individualized protected space in an operating system are provided. The aspects include performing on demand hardware instantiation via an ACE (an adaptive computing engine), and utilizing the hardware for monitoring predetermined software programming to protect an operating system.

1 . A method for achieving individualized protected space in an operating system, the method comprising the steps of:
 (a) instantiating hardware on demand via an an adaptive computing engine (ACE); and   (b) utilizing the hardware for monitoring predetermined software programming to protect an operating system.   
     
     
         2 . The method of  claim 1  wherein the utilizing step (b) further comprises the step of (b1), utilizing the hardware to perform memory address range checking. 
     
     
         3 . The method of  claim 1  wherein the utilizing step (b) further comprises the step of (b1) utilizing the hardware to perform resource restriction checking. 
     
     
         4 . The method of  claim 3  wherein the resource restriction further comprises a time duration restriction. 
     
     
         5 . The method of  claim 1  wherein the utilizing step (b) further comprises the step of (b1) monitoring protocol processing programming. 
     
     
         6 . The method of  claim 1  wherein the utilizing step (b) further comprises the step of (b1) monitoring device driver programming. 
     
     
         7 . The method of  claim 1  wherein the utilizing step (b) further comprises the step of (b1) monitoring hardware abstraction layer programming. 
     
     
         8 . The method of  claim 1  wherein step (b) further comprises the step of (b1), utilizing the hardware to monitor only of the portions of the software programming that is used from run to run. 
     
     
         9 . A system for achieving individualized protected space in an operating system, the system comprising:
 memory for storing trusted operating system programming; and   an adaptive computing engine (ACE) for providing on demand hardware instantiation to individually monitor predetermined software programming interacting with the trusted operating system programming.   
     
     
         10 . The system of  claim 9  wherein the trusted operating system programming further comprises a kernel level of programming. 
     
     
         11 . The system of  claim 9  wherein the predetermined software programming further comprises device drivers. 
     
     
         12 . The system of  claim 9  wherein the predetermined software programming further comprises abstraction layers. 
     
     
         13 . The system of  claim 9  wherein the predetermined software programming further comprises communication protocol stacks. 
     
     
         14 . The system of  claim 9  wherein the on-demand hardware instantiation performs memory address range checking. 
     
     
         15 . The system of  claim 9  wherein the on-demand hardware instantiation performs resource restriction checking. 
     
     
         16 . The system of  claim 15  wherein the resource restriction further comprises a time duration restriction. 
     
     
         17 . A system for achieving individualized protected space in an operating system, the system comprising:
 memory for storing trusted operating system programming, wherein the trusted operating system programming further comprises a kernel level of programming and a plurality of device drivers; and   an adaptive computing engine (ACE) for providing on demand hardware instantiation to individually monitor predetermined software programming interacting with the trusted operating system programming, wherein the predetermined software programming further comprises abstraction layers and communication protocol stacks wherein the on-demand hardware instantiation performs memory address range checking and resource restriction checking; and wherein the resource restriction further comprises a time duration restriction.