LynxSecure Multi-display Picture-in-Picture display of multiple guest operating systems

LynxSecure Picture-in-Picture (PiP display) PiP Manager Environments Built from the ground-up to provide the The Picture-in-Picture display mecha- The PiP manager is supported on highest levels of security, LynxSecure is a nism allows multi-OS environments to Windows and environments. Separation Kernel that gives be displayed on a single graphical screen For Windows environments, additional the ability to concurrently run real-time through isolated windows. certification from is required and general purpose operating systems in order for the Windows PiP driver to and bare metal environments on a single There are two components to the PiP be used in production deployments. computing platform. With features display, the PiP manager & the PiP cli- not found in traditional RTOS and ent. The PiP manager is located within Availability Microkernel based hypervisor solution, the OS environment which hosts the The PiP manager and PiP clients are LynxSecure is uniquely engineered to graphical display and controls the graph- available as source code. raise the assurance of secure systems. ics card. The PiP client windows connect The LynxSecure Separation Kernel to individual Guest OS environments to Hypervisor strictly enforces isolation allow interaction with that specific Guest of CPU cores, memory, and narrowly OS environment. defined I/O interfaces by utilizing hardware . Seamless User Interface The PiP manager allows for keyboard Multi-OS execution Environment and mouse focus to be switched from one LynxSecure allows multiple guest PiP client to another, thereby enabling operating systems to execute on the same the user to seamlessly transition between platform. LynxSecure’s multi-OS execu- different OS environments. tion environment allows for dedicated or shared devices such as graphics, network, Isolation of PiP clients disk and USB. Each OS environment No data transfer, such as cut-n-paste are exclusively receives a virtualized instance allowed between PiP clients, ensuring of these physical devices in order to complete isolation of OS environments. utilize them independently from the This allows OS of different sensitivities other operating systems. or classification levels to co-exist on a single graphics display without unin- tended data transfers.

1.800.255.5969 Lynx Software Lynx Software Lynx Software ©2019 Lynx Software Technologies, Inc. Technologies, Inc. Technologies UK Technologies France Lynx Software Technologies and the Lynx Software Technologies logo are trademarks, and 855 Embedded Way 400 Thames Valley Park Drive 38 Avenue Pierre Curie LynxOS and BlueCat are registered San Jose, CA 95138-1018 Thames Valley Park 78210 Saint-Cyr-l’École trademarks of Lynx Software Technologies, Inc. +1 (800) 255-5969 Reading, RG6 1PT France Linux is a registered trademark of Linus Torvalds. +1 (408) 979-3900 United Kingdom +33 (0) 1 30 85 06 00 All other trademarks are the trademarks and registered +1 (408) 9793-920 fax +44 (0) 118 965 3827 +33 (0) 130 85 06 06 fax trademarks of their respective owners. [email protected] +44 (0) 118 965 3840 fax www.lynx.com All rights reserved. Printed in the USA.