Method for managing an architecture and associated architecture

• US 10,481,888 B2
• Filed: 11/25/2015
• Issued: 11/19/2019
• Est. Priority Date: 11/27/2014
• Status: Expired due to Fees

• Current Assignee: Thales SA
• Original Assignee: Thales SA
• Inventors: Saliba, Eric, Gureghian, Emmanuel, Nortier, Cedric
• Primary Examiner(s): Dao, Thuy
• Application Number:
  US14/951,963
• Publication Number:
  US 20160154640A1
• Time in Patent Office: 1,455 Days
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455

Abstract

The invention relates to a method for managing an architecture, wherein the architecture comprises a main platform including a plurality of partitions for executing software, and at least one secondary platform. The method further comprises at least one step of associating each partition of the main platform with at least one processing member by installing, for each partition and each processing member, a driver specific to the relevant partition, the driver ensuring a secured link between the relevant partition and the operating member(s) with which the partition is associated.

Claims

1. A method for managing an architecture, the architecture comprising:

a main platform comprising a plurality of partitions executing software, wherein the main platform is a programmable microprocessor, and

at least one secondary platform each secondary platform comprising a plurality of processing members, said at least one secondary platform being a programmable microprocessor, and each processing member being able to apply secured processing operations for the account of at least one partition and each processing member being physically partitioned relatively to the other processing members, wherein the main platform and said at least one secondary platform at least share a communication interface able to ensure exchange of data in cut-off between the main platform and said at least one secondary platform,

wherein each partition comprises a first transceiver element and each processing member comprises a second transceiver element,

the method comprising at least;

associating each partition of the main platform with at least one processing member by installing, for each partition and each processing member, a driver specific to the relevant partition, the driver ensuring a secured link between the relevant partition and the processing member with which the partition is associated, and

providing encrypted communication between the first transceiver element and the second transceiver element over each installed secured link.

2. The method according to claim 1, wherein the method further comprises:

partitioning of the main platform into a plurality of partitions under the control of a hypervisor.

3. The method according to claim 1, wherein the method further comprises:

partitioning of the secondary platform into a plurality of processing members.

4. The method according to claim 1, wherein each partition is associated with one or several processing members, said processing members not being associated with other partitions.

5. The method according to claim 1, wherein the main platform is a programmable microprocessor.

6. The method according to claim 1, wherein the secondary platform is a programmable logic circuit.

7. A secure system comprising:

a main platform, wherein the main platform is a programmable microprocessor, the main platform including;

a plurality of partitions for executing software; and

a plurality of first transceiver elements, each first transceiver element being associated with one of the partitions;

at least one secondary platform, said at least one secondary platform being a programmable microprocessor, wherein the main platform and said at least one secondary platform at least share a communication interface able to ensure exchange of data in cut-off between the main platform and said at least one secondary platform, and wherein each secondary platform comprises;

a plurality of processing members; and

a plurality of second transceiver elements, each second transceiver element being associated with one of the processing members, and

a specific driver disposed on each partition,

wherein each processing member applies processing operations secured for the account of at least one partition,

wherein each processing member being physically partitioned relatively to the other processing members,

wherein each driver ensuring a secured link between the partition and at least one processing member with which the partition is associated, and

wherein the secured link provides encrypted communication between the first transceiver element associated with the partition and the second transceiver element associated with the at least one processing member.

8. The system according to claim 7, wherein each partition is able to apply a man-machine interface allowing a user to access a service.

9. A method for managing an architecture, the architecture comprising:

a main platform comprising a plurality of partitions executing software, wherein the main platform is a programmable microprocessor, and

at least one secondary platform, said at least one secondary platform being a programmable logic circuit, and each secondary platform comprising a plurality of processing members, each processing member being able to apply secured processing operations for the account of at least one partition and each processing member being physically partitioned relatively to the other processing members, wherein the main platform and said at least one secondary platform at least share a communication interface able to ensure exchange of data in cut-off between the main platform and said at least one secondary platform,

wherein each partition comprises a first transceiver element and each processing member comprises a second transceiver element, and

wherein each partition is associated with one or several processing members, said processing members not being associated with other partitions, the method comprising at least;

associating each partition of the main platform with at least one processing member by installing, for each partition and each processing member, a driver specific to the relevant partition, the driver ensuring a secured link between the relevant partition and the processing member with which the partition is associated, and

providing encrypted communication between the first transceiver element and the second transceiver element over each installed secured link.