US4525780A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Data processing system having a memory using object-based information and a protection scheme for determining access rights to such information
Assignee: EMC Corp
•
Filing: 1984-05-31
•
Granted: 1985-06-25
•
Expires: 2004-05-31
Abstract
Abstract A digital data processing system has a memory organized into objects containing at least operands and instructions. Each object is identified by a unique and permanent identifier code which identifies the data processing system and the object. The system uses a protection technique to prevent unauthorized access to objects by users who are identified by a subject number which identifies the user, a process of the system for executing a user's procedure, and the type of operation of the system to be performed by the user's procedure. An access control list for each object includes an access control list entry for each subject having access rights to the object and means for confirming that a particular active subject has access rights to a particular object before permitting access to the object. The system also includes stacks for containing information relating to the current state of execution of the system.
Inventors
- 👤 Richard G. Bratt
- 👤 Gerald F. Clancy
- 👤 Edward S. Gavrin
- 👤 Ronald H. Gruner
- 👤 Craig J. Mundie
- 👤 Stephen I. Schleimer
- 👤 Steven J. Wallach
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 17:35
CPC Classifications
G; G06; G06F; G06F11/00; G06F11/07; G06F11/0703; G06F11/0793; G01; G01R; G01R31/00; G01R31/28; G01R31/317; G01R31/3181; G01R31/3185; G01R31/318505; G06F11/0706; G06F11/073; G06F12/00; G06F12/02; G06F12/08; G06F12/0802; G06F12/0875; G06F12/14; G06F12/1458; G06F12/1483; G06F7/00; G06F7/38; G06F7/48; G06F7/483; G06F9/00; G06F9/06; G06F9/30; G06F9/30181; G06F9/30192; G06F9/44; G06F9/448; G06F9/4488; G06F9/46; G06F9/48; G06F9/4806; G06F9/4843; G06F9/54; G06F7/499; G06F7/49905; G06F7/4991; G06F7/49926
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
273 words
In a digital computer system including memory means for performing memory operations including storing and providing items of data, said items of data including instructions; processor means connected to said memory means for performing operations in response to said instructions including processing said items of data; memory organization means operative on said memory means for organizing said memory means into objects identified by unique identifiers and allowing the location of said items therein, each said item being associated with an object and addressable by a logical address specifying the unique identifier of the object with which said item is associated and an offset specifying the location of said item its associated object, said memory organization means further identifying for each one of said objects a selected set of subjects representing entities for which said processor means responds to said instructions; memory operation specifier generation means in said processor means responsive to said instructions for providing a memory operation specifier for each item processed by said processor, said memory operation specifier for a given item specifying the object in which said given item is to be located and one of said memory operations; and memory operations means responsive to a memory operation specifier which includes a logical address and a memory command specifying a memory operation for performing the memory operation specified by the memory command on the item specified by the logical address for a current subject for which said processor means is currently executing said instructions only when said current subject is one of the subjects in the selected set of subjects identified for the object specified in said memory operation specifier.
Claim 2
Dependent Claim
273 words
In a digital computer system including memory means for performing memory operations including storing and providing items of data, said items of data including instructions; processor means connected to said memory means for performing operations in response to said instructions including processing said items of data; memory organization means operative on said memory means for organizing said memory means into objects identified by unique identifiers and allowing the location of said items therein, each said item being associated with an object and addressable by a logical address specifying the unique identifier of the object with which said item is associated and an offset specifying the location of said item its associated object, said memory organization means further identifying for each one of said objects a selected set of subjects representing entities for which said processor means responds to said instructions; memory operation specifier generation means in said processor means responsive to said instructions for providing a memory operation specifier for each item processed by said processor, said memory operation specifier for a given item specifying the object in which said given item is to be located and one of said memory operations; and memory operations means responsive to a memory operation specifier which includes a logical address and a memory command specifying a memory operation for performing the memory operation specified by the memory command on the item specified by the logical address for a current subject for which said processor means is currently executing said instructions only when said current subject is one of the subjects in the selected set of subjects identified for the object specified in said memory operation specifier.
Claim 3
Dependent Claim
65 words
In a digital computer system of claim 1 wherein said memory operation specifier further includes a length specifier specifying the length of said item at the location specified by said logical address; and said memory operation means performs said memory operation specified by said memory command on said item at said location specified by said logical address having the length specified by said length specifier.
Claim 4
Dependent Claim
17 words
In a digital computer system of claim 2 wherein said length specifier specifies a length in bits.
Claim 5
Dependent Claim
32 words
In a digital computer system of claim 1 wherein said offset is a bit-granular offset and may specify any bit of the items associated with the object specified in said logical address.
Claim 6
Dependent Claim
33 words
In a digital computer system of claim 1 wherein said memory organization means identifies each said object with a single unique identifier and said single unique identifier never identifies any other said object.
Claim 7
Dependent Claim
15 words
In a digital computer system of claim 1 wherein said unique identifier contains 80 bits.
Claim 8
Dependent Claim
78 words
In a digital computer system of claim 1 wherein said memory organization means includes means for organizing said memory means into a plurality of logical allocation untis, each said object being associated with one of said logical allocation units, and said unique identifier further includes a logical allocation unit identifier specifying the logical allocation unit associated with the object identified by said unique identifier, and an object serial number identifying said object in said associated logical allocation unit.
Claim 9
Dependent Claim
78 words
In a digital computer system of claim 7 wherein said memory organization means identifies each said logical allocation unit by a single logical allocation unit identifier and said single logical allocation unit identifier never identifies any other said logical allocation unit, and said memory organization means identifies each object associated with said logical allocation unit by a single object serial number and said object serial number never identifies any other said object associated with said logical allocation unit.
Claim 10
Dependent Claim
56 words
In a digital computer system of claim 7 wherein said logical allocation unit identifier further includes a logical allocation unit group number specifying a logical allocation group including a plurality of said logical allocation units, and a logical allocation unit serial number identifying one of the logical allocation units of said plurality of logical allocation units.
Claim 11
Dependent Claim
110 words
In a digital computer system of claim 9 wherein said memory organization means identifies each of said plurality of logical allocation unit groups by a single logical allocation unit group number and said single logical allocation unit group number never identifies any other said logical allocation unit group; and said memory organization means identifies each logical allocation unit associated with the logical allocation unit group identified by said logical allocation unit group number by a single logical allocation unit serial number and said single logical allocation unit serial number never identifies any other logical allocation unit in the logical allocation unit group specified by said logical allocation unit group number.
Claim 12
Dependent Claim
58 words
In a digital computer system of claim 9 wherein said logical allocation unit group number contains 9 bits; said logical allocation unit serial number contains 8 bits; said object serial number contains 48 bits; and said offset identifies a single bit which may be any bit in the items associated with the object identified by said unique identifier.
Claim 13
Dependent Claim
23 words
In a digital computer system of claim 1 wherein said univeral identifiers do not specify locations of objects relative to other said objects.
Claim 14
Dependent Claim
110 words
In a digital computer system of claim 1 wherein certain ones of said subjects, including said current subject, are active subjects for which said processor means is or shortly will be executing said instructions; said memory operations means includes means for temporarily associating each said active subject with a different active subject number, said current subject being represented in said memory operation means by the active subject number currently associated therewith and said memory operations means using the active subject number currently associated with said current subject to determine whether said current subject is one of the set of subjects identified for the object specified in said memory operation specifier.
Claim 15
Dependent Claim
33 words
In a digital computer system of claim 13 wherein said memory operation means further includes means accessible to said processor means for storing the active subject number currently associated with said current subject.
Claim 16
Dependent Claim
102 words
In a digital computer system of claim 1 wherein said memory organization means further identifies for each of said selected set of subjects a selected set of said memory operations which said selected set of subjects is authorized to perform on the items locatable by a said object; and said memory operation means further performs the memory operation specified in said memory operation specifier only if said specified memory operation is identified as one of the selected set of memory operations which said current subject is authorized to perform on the items locatable by the object specified in said memory operation specifier.
Claim 17
Dependent Claim
113 words
In a digital computer system of claim 15 wherein said memory operation means further includes protection cache means for encaching information specifying said memory operations which a current subject is authorized to perform on the objects specified in the memory operation specifiers produced in response to said instructions, said protection cache means receiving said memory operation specifier and responding thereto by producing an access violation signal when said encached information indicates that said current subject may not perform the memory operation specified by said memory operation specifier on the object specified by said memory operaton specifier; and means responsive to said access violation signal for inhibiting the performance of said specified memory operation.
Claim 18
Dependent Claim
101 words
In a digital computer system of claim 1 wherein said instructions are contained in procedures of said items and said processor means responds to said instructions only while executing one of said procedures; the operations performed by said processor means further include a call operation for suspending a current execution of one of said procedures and commencing another execution as the current execution, and a return operation for terminating said current execution and resuming the execution which was suspended to commence the terminated current execution; and said current subject changes as a consequence of said call opeation and said return operation.
References Cited (Backward Citations)
US3902164A
Cited
US4135240A
Cited
US3902163A
Cited
US4084228A
Cited
US4177510A
Cited
US4205372A
Cited
US4133038A
Cited
US4130867A
Cited
US4079453A
Cited
US4148098A
Cited
US4206503A
Cited
US4276594A
Cited
US4325120A
Cited
US4408274A
Cited
US4354225A
Cited
US4367524A
Cited
US4371925A
Cited
US4398243A
Cited
US4430705A
Cited
US4442484A
Cited
US4439830A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1988-06-24 | 1988-12-24 | 1989-06-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1992-06-24 | 1992-12-24 | 1993-06-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1996-06-24 | 1996-12-24 | 1997-06-25 | $7700.00 | Window Closed / Lapsed |