A method for enhancing security of a computer system is provided. The
computer system may include a plurality of microprocessors and a security
management processor for managing execution of applications in isolation
on the plurality of microprocessors. Each of the plurality of
microprocessors is communicatively coupled to the security management
processor. An operating system is installed on one of the plurality of
microprocessors. An application is installed on the same microprocessors.
The application and the operating system are combined into an
OS/application pair (or pair). The pair is encrypted. The encrypted pair
is then stored in a mass storage of the computer system. The mass storage
is communicatively coupled to the security management processor. A
graphic user interface of the security management processor may be used
to launch the application on any of the plurality of microprocessors by
loading the stored pair to that microprocessor. Data produced by the
application may be encrypted and stored in the mass storage when saved.
The stored data produced by the application may be not accessible by
other applications without authorization.