Multi-Layer Kernel with Varied Privilege

Organization Name

Microsoft Technology Licensing, LLC

Inventor(s)

Gangadhara Swamy Shivaganga Nagaraju of Kirkland WA (US)

Pushkar Vijay Chitnis of Bothell WA (US)

Weidong Cui of Redmond WA (US)

Ziqiao Zhou of Bellevue WA (US)

Multi-Layer Kernel with Varied Privilege - A simplified explanation of the abstract

This abstract first appeared for US patent application 17970858 titled 'Multi-Layer Kernel with Varied Privilege

Simplified Explanation

The abstract describes a computer implemented method where two kernel layers with different privilege levels are loaded onto a hosting environment, with the first kernel layer isolated from the second. Access to the hosting environment memory protection table is controlled via the first kernel layer.

Two kernel layers with different privilege levels are loaded onto a hosting environment.
The first kernel layer is isolated from the second kernel layer.
Access to the hosting environment memory protection table is controlled by the first kernel layer.

Potential Applications

This technology could be applied in:

Secure operating systems
Virtualization environments
Cloud computing platforms

Problems Solved

This technology helps in:

Enhancing security by isolating different privilege levels
Controlling access to memory protection tables
Improving system stability and reliability

Benefits

The benefits of this technology include:

Enhanced system security
Better control over memory protection
Increased system stability and reliability

Potential Commercial Applications

Potential commercial applications of this technology could include:

Secure cloud computing services
Virtualization software for enterprises
Operating systems for critical infrastructure

Possible Prior Art

One possible prior art for this technology could be:

Hypervisor technology in virtualization environments

Unanswered Questions

How does this technology impact system performance?

The abstract does not mention the performance implications of implementing two kernel layers with different privilege levels. Further research or testing may be needed to understand the performance overhead.

Are there any compatibility issues with existing software?

It is not clear from the abstract whether this technology may have compatibility issues with existing software or applications. Compatibility testing may be necessary to address this concern.

Original Abstract Submitted

A computer implemented method includes loading a first kernel layer having a first privilege level onto a hosting environment. A second kernel layer having a second privilege level different from the first privilege level is also loaded onto the hosting environment. The first kernel layer is isolated from the second kernel layer and access to a hosting environment memory protection table is controlled via the first kernel layer.

17970858. Multi-Layer Kernel with Varied Privilege simplified abstract (Microsoft Technology Licensing, LLC)