US4177510A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Protection of data in an information multiprocessing system by implementing a concept of rings to represent the different levels of privileges among processes
Assignee: Compagnie Internationale pour l'Informatique CII-Honeywell Bull SA
•
Filing: 1974-12-02
•
Granted: 1979-12-04
•
Expires: 1994-12-02
Abstract
Abstract Computer data and procedure protection by preventing processes from interfering with each other or sharing each other's address space in an unauthorized manner is accomplished in hardware/firmware by restricting addressability to a segmented memory and by a ring protection mechanism. To protect information in segments shared by several processes from misuse by one of these processes a ring protection hardware system is utilized. There are four ring classes numbered 0 through 3. Each ring represents a level of system privilege with level 0 (the innermost ring) having the most privilege and level 3 (the outermost ring) the least. Every procedure in the system has a minimum and a maximum execute ring number assigned to it which specifies who may legally call the procedure. Also maximum write and read ring numbers specify the maximum ring numbers for which a write and/or read operation is permitted. Processes use a segmented address during execution wherein segment tables isolate the address space of the various processes in the system. Hardware checks that the address used by a process is part of the address space assigned to the process, and if the address is outside the prescribed address space, an exception occurs. A process cannot refer to data within the address space of another process because the hardware uses the segment table of the referencing process.
Inventors
- 👤 Marc Appell
- 👤 Georges Lepicard
- 👤 Philippe-Hubert DE Rivet
- 👤 John J. Bradley
- 👤 Benjamin S. Franklin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 10:42
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1458; G06F12/1491
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
252 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating a write-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read invormation from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnecting said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said second means, for comparing the effective address ring number EAR with the write ring number WR; and, (f) sixth means connected with said fifth means for generating a write-violation-exception signal when EAR is greater than WR.
Claim 2
Dependent Claim
252 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating a write-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read invormation from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnecting said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said second means, for comparing the effective address ring number EAR with the write ring number WR; and, (f) sixth means connected with said fifth means for generating a write-violation-exception signal when EAR is greater than WR.
Claim 3
Dependent Claim
253 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating a read-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnected with said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said first means, for comparing the effective address ring number EAR with the read ring number RD; and, (f) sixth means, connected with said fifth means, for generating a read-violation-exception signal when EAR is greater than RD.
Claim 4
Dependent Claim
253 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating a read-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnected with said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said first means, for comparing the effective address ring number EAR with the read ring number RD; and, (f) sixth means, connected with said fifth means, for generating a read-violation-exception signal when EAR is greater than RD.
Claim 5
Dependent Claim
66 words
The combination as recited in claim 2 including seventh means for storing a process ring PRN of a currently executing process, and also including eighth means connected with said seventh means, and further including ninth means connected with said eighth means for overriding said read-violation-exception signal when the effective address ring number EAR is equal to the process ring number PRN of the currently executing process.
Claim 6
Dependent Claim
273 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating an execute-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnecting with said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said second and third means, for comparing the maximum ring number MAXR and the write ring number WR with the effective-address-ring number EAR; and, (f) sixth means connected with said fifth means for generating an execute-violation-exception signal when the MAXR is not equal or greater than EAR which in turn is not equal or greater than WR.
Claim 7
Dependent Claim
273 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for generating an execute-violation-exception signal comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; (d) fourth means interconnecting with said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby an effective address ring number EAR is generated; (e) fifth means connected with said second and third means, for comparing the maximum ring number MAXR and the write ring number WR with the effective-address-ring number EAR; and, (f) sixth means connected with said fifth means for generating an execute-violation-exception signal when the MAXR is not equal or greater than EAR which in turn is not equal or greater than WR.
Claim 8
Dependent Claim
231 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for determining the maximum effective address ring number EAR (i.e. minimum level of privilege) of a selected process to access a selected group of information comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; and, (d) fourth means interconnecting said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby the effective address ring number EAR is generated.
Claim 9
Dependent Claim
231 words
In an automatic data processing apparatus for processing information, including a virtual memory having stored therein a plurality of different types of groups of information, each information group-type associated with an address space in said virtual memory bounded by a segment having adjustable bounds, said information being protected against unauthorized uses by a hierarchy of concentric ring levels (i.e. levels of privilege) wherein each group-type of information is associated with a predetermined ring number indicative of a level of privilege, said level of privilege decreasing as the associated ring number increases, an apparatus for determining the maximum effective address ring number EAR (i.e. minimum level of privilege) of a selected process to access a selected group of information comprising: (a) first means for storing first information indicating the maximum ring number RD (i.e. minimum level of privilege) required to read information from said selected group; (b) second means for storing second information indicating the maximum ring number WR (i.e. minimum level of privilege) required to write information into said selected group; (c) third means for storing third information indicating the maximum ring number MAXR (i.e. minimum level of privilege) required to process information from said selected group; and, (d) fourth means interconnecting said first, second and third means, for determining the maximum of the contents of said first, second and third means, whereby the effective address ring number EAR is generated.
Claim 10
Dependent Claim
31 words
The combination as recited in claim 5 wherein said second means additionally indicates the minimum ring number WR (i.e. maximum level of privilege) required to process information from said selected group.
Claim 11
Dependent Claim
18 words
The combination as recited in claim 5 wherein said fourth means comprises a comparator for comparing binary numbers.
Claim 12
Dependent Claim
50 words
The combination as recited in claim 5 including fifth means, connected with said second means, for comparing the effective address ring number EAR with the write ring number WR, and further including sixth means communicating with said fifth means for generating a write-violation-exception signal when EAR is greater than WR.
Claim 13
Dependent Claim
70 words
The combination as recited in claim 8 including seventh means connected, with said second and third means for comparing the maximum ring number MAXR and the write ring number WR with the effective-address-ring number EAR, and further including eighth means connected with said seventh means for generating an execute-violation-exception signal when the MAXR is not equal or greater than EAR which in turn is not equal or greater than WR.
Claim 14
Dependent Claim
50 words
The combination as recited in claim 9 including ninth means, connected with said first means, for comparing the effective address ring number EAR with the read ring number RD, and further including tenth means, connected with said ninth means, for generating a read-violation-exception signal when EAR is greater than RD.
Claim 15
Dependent Claim
67 words
The combination as recited in 10 including eleventh means for storing a process ring number PRN of a currently executing process, and also including twelfth means for connected with said eleventh means, and further including thirteenth means connected with said twelfth means for overriding said read-violation-exception signal when the effective address ring number EAR is equal to the process ring number PRN of the currently executing process.
Claim 16
Dependent Claim
67 words
The combination as recited in 10 including eleventh means for storing a process ring number PRN of a currently executing process, and also including twelfth means for connected with said eleventh means, and further including thirteenth means connected with said twelfth means for overriding said read-violation-exception signal when the effective address ring number EAR is equal to the process ring number PRN of the currently executing process.
References Cited (Backward Citations)
US3264615A
Cited
US3340539A
Cited
US3377624A
Cited
US3504349A
Cited
US3593300A
Cited
US3562717A
Cited
US3725874A
Cited
US3528062A
Cited
US3573855A
Cited
US3675209A
Cited
US3614740A
Cited
US3787813A
Cited
US3742458A
Cited
US3727192A
Cited
US3693165A
Cited
US3803559A
Cited
US3771146A
Cited
US3858182A
Cited
US3893084A
Cited
US3940745A
Cited
US4017840A
Cited
US4077058A
Cited
US3916385A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1982-12-03 | 1983-06-04 | 1983-12-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1986-12-03 | 1987-06-04 | 1987-12-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1990-12-03 | 1991-06-04 | 1991-12-04 | $7700.00 | Window Closed / Lapsed |