EP0300516A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Digital data processing system
Assignee: EMC Corp
•
Filing: 1982-05-21
•
Granted: —
•
Expires: 2002-05-21
Abstract
Abstract The system has memory storing data and instructions and processing means. Memory is organized into objects identified by unique identifiers (UIDs) comprising a logical allocation unit identifier (LAUID) and an object serial number (OSN) provided by an architectural clock, associated with an offset (0) and length (L) enabling logical addresses to be derived. Instructions (SIN's) are in an intermediate level language - (SOP's = S - language operations). Associated names (NAME A, NAME B) point to name tables which identify subjects to which the processor may respond in relation to the instruction in question. Protection is afforded by restricting access to memory operations to a subject pertaining to the set of subjects pertaining to the object in question.
Inventors
- 👤 Richard Glenn Bratt
- 👤 Gerald F. Clancy
- 👤 Edward S. Gavrin
- 👤 Ronald Hans Gruner
- 👤 Craig James Mundie
- 👤 Stephen I. Schleimer
- 👤 Steven J. Wallach
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-01 07:34
CPC Classifications
G; G06; G06F; G06F11/00; G06F11/07; G06F11/0703; G06F11/0793; G01; G01R; G01R31/00; G01R31/28; G01R31/317; G01R31/3181; G01R31/3185; G01R31/318505; G06F11/0706; G06F11/0721; G06F11/073; G06F12/00; G06F12/02; G06F12/08; G06F12/0802; G06F12/0875; G06F12/14; G06F12/1458; G06F12/1483; G06F7/00; G06F7/38; G06F7/48; G06F7/483; G06F9/00; G06F9/06; G06F9/22; G06F9/223; G06F9/226; G06F9/26; G06F9/262; G06F9/268; G06F9/30; G06F9/34; G06F9/35; G06F9/44; G06F9/448; G06F9/4488; G06F9/46; G06F9/468; G06F9/48; G06F9/4806; G06F9/4843; G06F9/54; G06F7/499; G06F7/49905; G06F7/4991; G06F7/49926
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
582 words
In a digital computer system including processor means for performing operations on operands, memory means for storing at least instructions for controlling said processor means, bus means for conducting at least said instructions between said memory means and said processor means, and 1/0 means for conducting at least said operands between said processor means and devices external to said digital computer system, said operands and instructions being structured into objects for containing said operands and instructions, said digital computer system comprising: means for uniquely indentifying said objects comprising processor means responsive to first certain of said instructions for structuring said information into said objects, and means for generating unique identifier codes, each one of said unique identifier codes being permanently associated with a corresponding one of said objects generated by said processor means, said unique identifier code generating means comprising means for generating first unique identifier code fields for uniquely identifying at least said digitial computer system, means for generating second unique identifier code fields for uniquely identifying each one of said objects generated by said processor means, and means responsive to second certain of said instructions for combining one of said first unique identifier code fields and one of said second unique identifier code fields and providing to said processor means a said one of said unique identifier codes to be permanently associated with a said corresponding one of said objects generated by said processor means, and protection means for preventing a first user currently using said digital computer system to execute a program comprising at least one said procedure object from obtaining unauthorized access to objects of a second user, including subject number memory means responsive to operation of said processor means for storing a currently .. active subject number of plurality of subject numbers, each said subject number corresponding to a subject of a plurality of subjects wherein each said subject is comprised of the combination of (1) a user of said digital computer system, (2) a process of said digital computer system for executing a said procedure of said user, and (3) the type of operation to be performed by said digital computer system in response to a said instruction of said at least one said procedure of said first user's program, and said currently active subject number identifies said first user currently utilizing said digital computer system, (2) a said process currently executing said at least one procedure of said first user's program, and (3) said type of operation to be performed by said digital computer system in response to a present one of said instructions of said at least one procedure of said first user's program, protection memory means for storing at least one access control list, each said access control list corresponding to each of said objects and comprising at least one access control entry, each said access control entry corresponding to a said subject having access rights to said corresponding object and containing said access rights of said a said subject to said corresponding object, and access right confirmation means responsive to a said currently active subject number and to operation of said processor means for indexing said protection means in response to a said current instruction of said at least one procedure of said first user's program when said a said current instruction request access to a said one of said objects and for comparing said access rights of a said corresponding currently active subject to said a said one of said objects.
Claim 2
Dependent Claim
582 words
In a digital computer system including processor means for performing operations on operands, memory means for storing at least instructions for controlling said processor means, bus means for conducting at least said instructions between said memory means and said processor means, and 1/0 means for conducting at least said operands between said processor means and devices external to said digital computer system, said operands and instructions being structured into objects for containing said operands and instructions, said digital computer system comprising: means for uniquely indentifying said objects comprising processor means responsive to first certain of said instructions for structuring said information into said objects, and means for generating unique identifier codes, each one of said unique identifier codes being permanently associated with a corresponding one of said objects generated by said processor means, said unique identifier code generating means comprising means for generating first unique identifier code fields for uniquely identifying at least said digitial computer system, means for generating second unique identifier code fields for uniquely identifying each one of said objects generated by said processor means, and means responsive to second certain of said instructions for combining one of said first unique identifier code fields and one of said second unique identifier code fields and providing to said processor means a said one of said unique identifier codes to be permanently associated with a said corresponding one of said objects generated by said processor means, and protection means for preventing a first user currently using said digital computer system to execute a program comprising at least one said procedure object from obtaining unauthorized access to objects of a second user, including subject number memory means responsive to operation of said processor means for storing a currently .. active subject number of plurality of subject numbers, each said subject number corresponding to a subject of a plurality of subjects wherein each said subject is comprised of the combination of (1) a user of said digital computer system, (2) a process of said digital computer system for executing a said procedure of said user, and (3) the type of operation to be performed by said digital computer system in response to a said instruction of said at least one said procedure of said first user's program, and said currently active subject number identifies said first user currently utilizing said digital computer system, (2) a said process currently executing said at least one procedure of said first user's program, and (3) said type of operation to be performed by said digital computer system in response to a present one of said instructions of said at least one procedure of said first user's program, protection memory means for storing at least one access control list, each said access control list corresponding to each of said objects and comprising at least one access control entry, each said access control entry corresponding to a said subject having access rights to said corresponding object and containing said access rights of said a said subject to said corresponding object, and access right confirmation means responsive to a said currently active subject number and to operation of said processor means for indexing said protection means in response to a said current instruction of said at least one procedure of said first user's program when said a said current instruction request access to a said one of said objects and for comparing said access rights of a said corresponding currently active subject to said a said one of said objects.
Claim 3
Dependent Claim
53 words
The digital computer system of claim 1, further comprising: protection cache means responsive to operation of said processor means and to said currently active subject number for storing access rights read from said protection memory means and for comparing access rights of said a said currently active subject to certain of said objects.
Claim 4
Dependent Claim
15 words
The digital computer system of claim 1, wherein said objects include data objects containing data.
Claim 5
Dependent Claim
18 words
The digital computer system of claim 1, wherein said objects include procedure objects containing at least said instructions.
Claim 6
Dependent Claim
56 words
The digital computer system of claim 1, wherein said processor means and said memory means further comprise: stack means responsive to third certain of said instructions for storing information relating to current state of execution of said instructions, and said objects include stack objects containing said information relating to current state of execution of said instructions.
Claim 7
Dependent Claim
34 words
The digital computer system of claim 1, wherein said memory means further comprises means for storing at least said unique identifier codes of active said objects currently being used in said digital computer system.
Claim 8
Dependent Claim
43 words
The digital computer system of claim 1, wherein said first unique identifier code fields are comprised of a group number sub-field and a selectable serial number sub-field, at least one said group number being uniquely and permanently assigned to said digital computer system.
Claim 9
Dependent Claim
24 words
The digital computer system of claim 7, wherein said group number sub-field and said serial numer sub-field together contains 32 bits of binary information.
Claim 10
Dependent Claim
38 words
The digital computer system of claim 8, wherein said means for generating said first unique identifier code fields includes memory means having outputs to said combining means for providing said group number sub-field and said serial number sub-field.
Claim 11
Dependent Claim
33 words
The digital computer system of claim 1, wherein said second unique identifier code fields are comprised of an architectural clock field containing binary information representing elapsed time interval from a selected initial time.
Claim 12
Dependent Claim
26 words
The digital computer system of claim 10, wherein said selected initial time is common to each said digital computer system of plurality of digital computer systems.
Claim 13
Dependent Claim
49 words
The digital computer system of claims 10 or 11, wherein said means for generating said second unique identifier code fields further comprises: architectural clock means for generating architectural clock signals at predetermined intervals, and architectural counter means having outputs to said processor means for counting said architectural clock signals.
Claim 14
Dependent Claim
20 words
The digital computer system of claim 10, wherein said second unique identifier code fields contain 48 bits of binary information.
Claim 15
Dependent Claim
54 words
The digital computer system of claim 13, wherein the least significant bit of said second unique identifier code fields represents elapsed time intervals of substantially no greater than 600 picoseconds, and the most significant bit of said second unique identifier code fields represent an elapsed time interval of substantially no less than 127 years.
Claim 16
Dependent Claim
423 words
In a digital computer system including processor means for performing operations on operands and memory means for storing at least instructions for controlling said processor means, said digital computer system comprising: means for uniquely identifying information comprising: said processor means responsive to first certain of said instructions for structuring said information including said operands and said instructions into said objects, and means for generating unique identifier codes, a said unique identifier code being permanently associated with a corresponding one of said objects generated by said processor means, and protection means for preventing a user currently using said digital computer system to execute a program comprising at least one said procedure object containing at least instructions from obtaining unauthorized access to certain of said objects comprising: subject number memory means responsive to operation of said processor means for storing a currently active subject number of plurality of subject numbers, each of said subject numbers corresponding to a subject of a plurality of subjects wherein each said subject is comprised of the combination of (1) a user of said digital computer system, (2) a process of said digital computer system for executing a said procedure of said user, and (3) the type of operation to be performed by said digital computer system in response to a said instruction of a said procedure of said user's program, and said currently active subject number identifies said user currently utilizing said digital computer system, (2) a said process currently executing said procedure of said user's program, and (3) said type of operation to be performed by said digital computer system in response to a present one of said instructions of said at least one procedure of said first user's program, protection memory means for storing at least one access control list, each said access control list corresponding to each of said objects and comprising at least one access control entry, each said access control entry corresponding to a said subject having access rights to said corresponding object and containing said access rights of said a said subject to said corresponding object, and access right means responsive to a said currently active subject number and to operation of said processor means for indexing said protection means in response to a said current instruction of said at least one procedure of said user's program when said a said current instruction requests access to a said one of said objects and for comparing said access rights of a said corresponding currently active subject to said a said one of said objects.
Claim 17
Dependent Claim
423 words
In a digital computer system including processor means for performing operations on operands and memory means for storing at least instructions for controlling said processor means, said digital computer system comprising: means for uniquely identifying information comprising: said processor means responsive to first certain of said instructions for structuring said information including said operands and said instructions into said objects, and means for generating unique identifier codes, a said unique identifier code being permanently associated with a corresponding one of said objects generated by said processor means, and protection means for preventing a user currently using said digital computer system to execute a program comprising at least one said procedure object containing at least instructions from obtaining unauthorized access to certain of said objects comprising: subject number memory means responsive to operation of said processor means for storing a currently active subject number of plurality of subject numbers, each of said subject numbers corresponding to a subject of a plurality of subjects wherein each said subject is comprised of the combination of (1) a user of said digital computer system, (2) a process of said digital computer system for executing a said procedure of said user, and (3) the type of operation to be performed by said digital computer system in response to a said instruction of a said procedure of said user's program, and said currently active subject number identifies said user currently utilizing said digital computer system, (2) a said process currently executing said procedure of said user's program, and (3) said type of operation to be performed by said digital computer system in response to a present one of said instructions of said at least one procedure of said first user's program, protection memory means for storing at least one access control list, each said access control list corresponding to each of said objects and comprising at least one access control entry, each said access control entry corresponding to a said subject having access rights to said corresponding object and containing said access rights of said a said subject to said corresponding object, and access right means responsive to a said currently active subject number and to operation of said processor means for indexing said protection means in response to a said current instruction of said at least one procedure of said user's program when said a said current instruction requests access to a said one of said objects and for comparing said access rights of a said corresponding currently active subject to said a said one of said objects.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.