Patent US4677546A successfully refreshed from Google Patents.
US4677546A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Guarded regions for controlling memory access
Assignee: Signetics
•
Filing: 1984-08-17
•
Granted: 1987-06-30
•
Expires: 2004-08-17
Abstract
Abstract In a virtual memory system, a guarded region allows access to protected code and data without intervention from a processor's operating system by redefining regions of an address space with reference to gates indicating points of entry for those regions. A non-hierarchial access path in the form of a tree-like structure permits a process to access resources and data while controlling access thereto and return therefrom.
Inventors
- 👤 Martin Freeman
- 👤 Cecil H. Kaplinsky
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 18:21
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1458; G06F12/1491
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
214 words
A memory access control device for use in a data processing system, said device having a first connection for connecting to a memory for storing information and for being partitioned into a plurality of identifiable address spaces, said device having a second connection for connecting to a central processing unit for receiving therefrom virtual address information, characterized in that said device comprises: first programmable means to partition the virtual address space of at least one process executable on said central processing unit into at least two regions of variable lengths; second programmable means to allocate instructions and data to said regions; third programmable means to receive information having permission to access respective levels of protection and associated levels of access permission to each of said respective regions; fourth programmable means to receive information for assigning entry points to sub-spaces of said address space; address mapping means to map virtual addresses within said respective regions into physical addresses within said respective sub-spaces of physical memory; defining means for redefining within a predetermined region the contents of a virtual address space associated with said region by reference to a gate structure that defines a guarded region which is conditionally accessible and which gate structure also defines at least one fixed entry point for said guarded region.
Claim 2
Dependent Claim
214 words
A memory access control device for use in a data processing system, said device having a first connection for connecting to a memory for storing information and for being partitioned into a plurality of identifiable address spaces, said device having a second connection for connecting to a central processing unit for receiving therefrom virtual address information, characterized in that said device comprises: first programmable means to partition the virtual address space of at least one process executable on said central processing unit into at least two regions of variable lengths; second programmable means to allocate instructions and data to said regions; third programmable means to receive information having permission to access respective levels of protection and associated levels of access permission to each of said respective regions; fourth programmable means to receive information for assigning entry points to sub-spaces of said address space; address mapping means to map virtual addresses within said respective regions into physical addresses within said respective sub-spaces of physical memory; defining means for redefining within a predetermined region the contents of a virtual address space associated with said region by reference to a gate structure that defines a guarded region which is conditionally accessible and which gate structure also defines at least one fixed entry point for said guarded region.
Claim 3
Dependent Claim
35 words
A device as claimed in claim 1, wherein a gate comprises a gate module for performing gate operations and a gate descriptor having a segment table pointer, a segment table length, and an entry point.
Claim 4
Dependent Claim
24 words
A device as claimed in claim 1 or 2, wherein each region is defined by an associated segment table pointer and segment table length.
Claim 5
Dependent Claim
22 words
A device as claimed in claim 3, wherein the address space of a process is changed by redefinition of its segment table.
Claim 6
Dependent Claim
19 words
A device as claimed in claim 4, wherein one segment of an address space is a list of gates.
Claim 7
Dependent Claim
26 words
A device as claimed in claim 1 or 2, further including a stack for storing return information to be used upon exit from a guarded region.
Claim 8
Dependent Claim
20 words
A device as claimed in claim 1 or 2, wherein said device is contained in a single integrated circuit chip.
Claim 9
Dependent Claim
186 words
A protection scheme for use with a memory access control device used in the data processing system, said device having a first connection for connecting to a memory for storing information, said memory capable of being partitioned into a plurality of identifiable address spaces, said memory access control device having a second connection for connecting to a central processing unit from which said memory receives virtual address information, characterized in that said protection scheme comprises: first programmable means to partition the virtual address space of a least one process executable on said central processing unit into at least two regions of variable lengths; each of said regions being defined by a region descriptor having a segment table pointer register and a segment table length register; second programmable means to allocate instructions and data to said regions; address mapping means to map virtual adresses within a region into physical addresses within corresponding subspaces of physical memory; third programmable means to redefine said regions by changing region descriptors; means to map the virtual addresses of said redefined regions into physical addresses within different subspaces of said physical memory.
Claim 10
Dependent Claim
186 words
A protection scheme for use with a memory access control device used in the data processing system, said device having a first connection for connecting to a memory for storing information, said memory capable of being partitioned into a plurality of identifiable address spaces, said memory access control device having a second connection for connecting to a central processing unit from which said memory receives virtual address information, characterized in that said protection scheme comprises: first programmable means to partition the virtual address space of a least one process executable on said central processing unit into at least two regions of variable lengths; each of said regions being defined by a region descriptor having a segment table pointer register and a segment table length register; second programmable means to allocate instructions and data to said regions; address mapping means to map virtual adresses within a region into physical addresses within corresponding subspaces of physical memory; third programmable means to redefine said regions by changing region descriptors; means to map the virtual addresses of said redefined regions into physical addresses within different subspaces of said physical memory.
Claim 11
Dependent Claim
122 words
The protection scheme of claim 8 wherein said third programmable means to read define said regions by changing region descriptors comprises: a gate segment containing a list of gates by number, said gate segment being one of said plurality of identifiable address spaces; each of said gates being comprised of gate descriptors and gate modules, each of said gate descriptors containing a segment table pointer, a segment table length and an entry point; said gate descriptor providing a region descriptor, an entry point into the address specified by said region descriptor and including validity checking information in the form of a valid bit; said gate module containing instructions for performing gate functions and a control stack for keeping track of gate entrances.
Claim 12
Dependent Claim
38 words
The protection scheme of claim 9 wherein said gate module is a control means to sequence through the operation necessary to execute said protection scheme; said control unit operating on said domain stack, gate list and region descriptors.
Claim 13
Dependent Claim
16 words
The protection scheme of claim 10 wherein said domain stack contains a history of opened gates.
Claim 14
Dependent Claim
45 words
The protection scheme of claim 11 wherein said control unit upon receipt of a gate number obtains a gate; checks the validity of said gate; and transfers the prior region descriptors to the domain stack while replacing them with the region descriptor of said gate.
Claim 15
Dependent Claim
47 words
The protection scheme of claim 12 wherein said control unit executes domain change operations for the definition of a region, redefining a region by changing the physical address space to which it is mapped, and reinstating a region by remapping the address space to the first domain.
References Cited (Backward Citations)
US4300192A
Cited
US4038645A
Cited
US4084227A
Cited
US4099256A
Cited
US4388685A
Cited
US4231088A
Cited
US4355355A
Cited
US4442484A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1990-06-29 | 1990-12-29 | 1991-06-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1994-06-29 | 1994-12-29 | 1995-06-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1998-06-29 | 1998-12-29 | 1999-06-30 | $7700.00 | Window Closed / Lapsed |