The Caernarvon secure embedded operating system

The Caernarvon operating system was developed to demonstrate that a high assurance system for smart cards was technically feasible and commercially viable. The entire system has been designed to be evaluated under the Common Criteria at EAL7, the highest defined level of assurance. Historically, smart card processors have not supported the hardware protection features necessary to separate the OS from the applications, and one application from another. The Caernarvon OS has taken advantage of the first smart card processors with such features to be the first smart card OS to provide this kind of protection. Even when compared with conventional systems where the hardware protection is routine, the Caernarvon OS is noteworthy, because of the EAL7 assurance. This approach facilitated implementation of a formally specified, mandatory security policy providing multi

• Type: Journal
• Year: 2008
• Where: SIGOPS
• Authors: David C. Toll, Paul A. Karger, Elaine R. Palmer, Suzanne McIntosh, Sam Weber
• Keywords: Caernarvon OS, Mandatory Security Policy, SIGOPS 2008, Smart Cards