Abstract: A multicore processor system and a method of operating the system defines a processor partition (which may include one or more processor cores) as a network offload engine for a network connected to the processor system. Network operations requests from other cores or partitions of the processor system are forwarded to the network offload engine by a cross-platform inter-partition communications component including a relay task in the network offload engine for receiving network operations requests from network proxies in the other partitions. The network offload engine then controls access to network resources by the other cores or partitions and applications running thereon. A second or additional core or partition of the processor system may be similarly defined as a network offload engine for a second or additional network, receiving network operations requests from the other partitions through a similar system of relay task and network proxies.

Abstract: A method including initializing the processing platform, wherein initializing the processing platform includes performing a power on self-test (POST) configured to determine an operational state of one or more hardware sub-components of the processing platform, the POST further configured to determine an error detection state of one or more monitoring functions of the processing platform, initializing a safety monitoring function of the processing platform, analyzing one or more results of the POST utilizing the safety monitoring function of the processing platform in order to determine compliance of the processing platform with operational requirements, configuring the safety monitoring function of the processing platform utilizing one or more sets of safety monitoring configuration data, initializing and configuring a security monitoring function of the processing platform, and initializing and configuring one or more security functions.

Abstract: Multilevel secure communication systems and methods for providing multilevel security to such communication systems are disclosed. More specifically, communication systems and methods configured in accordance with the inventive concepts disclosed herein may be utilized to provide support for N levels of secure communications using processors (may also be referred to as nodes) that may only have (N?M) levels of security separation (where N and M are integers and M is strictly less than N). In other words, processors that have less than N levels of security separation may be configured to form a communication system that is capable of supporting N levels of secure communication.

Abstract: A Secure Deterministic Fabric (SDF) switch architecture and design may provide a cost effective reconfigurable Multiple Single Levels (MSL) of Security implementation that is low risk to certify and may not require recertification after an initial certification evaluation. The SDF switch enables assignment of processing resources and attached payloads to a specific security level fabric for use by an operational system. The assignment of defined security levels is commanded by a SDF control and status module without changing certification, aircraft wiring, or revising hardware. The processing resources are statically assigned during power up on a per mission basis or dynamically reassigned between security levels during a mission as processing requirements may change as a result of mission stage. The SDF switch supports mission defined security configurations for individual security level operational payload processing.

Abstract: A multi-core processor system and a method of operating the system allocates fault queues in a shared system memory for each virtual machine of a partitioned guest operating system running on a core or partition of the processor system. Health monitors of the partitioned guest operating system log faults in the fault queue corresponding to the appropriate virtual machine. The health monitors may take additional action in response to warning-level or virtual machine-level faults. A health monitor of the multi-core processor resource then polls each fault queue, as well as the partition-level and module-level event logs maintained by the module operating system, for available faults and logs all faults in a single nonvolatile event log of the multi-core processor resource.

Abstract: Systems and methods for providing safety and security functions are disclosed. The system includes a computing device that provides at least a first partition and a second partition. The computing device implements time and space partitioning to isolate resources available to the first partition and the second partition. The system also includes a safety module that operates in the first partition for providing safety functions for the system. The system further includes a security module that operates in the second partition for providing security functions for the system. A predefined communication interface is utilized to facilitate communications between the safety module and the security module. The communication interface defines a set of communications allowable between the safety module and the security module, wherein information sharing between the safety module and the security module is restricted to only the set of communications allowed through the communication interface.

Abstract: A present novel and non-trivial system and method for controlling the display of classified information with unclassified information are disclosed. Layer property(ies) of the super layer are turned on. Layer property(ies) of at least one unclassified layer is turned on, making it a changed unclassified layer. Unclassified layer data of each changed unclassified layer is sent to a user application, and responsive first first-tier widget data is received. Pixel data set is generated based upon the unclassified layer data, the first first-tier widget data, and a known display configuration format. Additionally, layer property(ies) of at least one classified layer is turned on, making it a changed classified layer. Classified layer data of each changed classified layer is sent to a user application, and responsive second first-tier widget data is received. The second widget data is included in the basis for generating the pixel data set.

Abstract: The present invention is directed to a secure gateway/router system and method for allowing a MLS network which simultaneously contains data of multiple security levels to interface with one of several MSLS networks which is configured to maintain data with a single security level. When the data is within the secure gateway/router system, the separation of the data by security levels, as it was received from the MLS network, is maintained by routing the data to a designated security level network. Secure gateway/router system includes several network interface units. Each network interface unit is configured to interface within a single MSLS network. Each MSLS software partition has a single and simple function to perform in maintaining separation of security levels and provide the data to the network interface unit configured to interface within the designated security level network.

Abstract: A method of communicating information in a system having multi-level security requirements includes receiving a packet having unencrypted data, routing the packet to a host, and processing the packet at the host such that data from the packet is maintained in the protected address space associated with the host. The host includes a number of virtual hosts, each having a unique internet protocol (IP) address, a protected address space, and a protocol stack.