Abstract: The emergence of general security hardware provides operating system and electronic equipment with a hardware-based security protection,but there were few studies about using the hardware to provide system-level security protection directly.A multi-kernel structure SmartMK was proposed to support applications of different security levels and different types;based on the trusted platform module(TPM) and the new CPU security technology,the strong separation and secure communications mechanisms between multi-kernel were realized and the security of the operating system operating environment was achieved by the hardware and software together.A mandatory access control model was offered to the SmartMK reduce the complexity of access control.Performance testing and application of SmartMK showed that it can effectively strengthen the system security while guaranteeing the system's efficiency.