Data protection for computer systems

Claim 1

A computer system, comprising: an instruction unit; a data memory; a data unit coupled to said instruction unit, wherein said instruction unit reads instructions from said data memory, and causes said data unit to perform arithmetical and logical functions on data taken from said data memory; a security memory in parallel with said data memory, wherein said security memory contains a security label for each location in said data memory; and a security unit, wherein said security unit, for each instruction performed in said data unit, compares the security level for all data used by the instruction with a clearance level for a user, and which assigns to every modified memory location a security level which dominates the levels of all data used to determine the modified value of such memory location.

Claim 3

A method for providing security for a computer system, comprising the steps of: (a) for each machine language instruction to be executed, determining the type of the instruction; (b) if the instruction is, as determined in step (a), a data operation, then if the security level of a user dominates the level of each data word used by the instruction, allowing the instruction to be performed and giving any result a security level which dominates all of the data words used by the instruction and a control domain level, else preventing execution of the instruction; (c) if the instruciton is a conditional, then if the security level of the user dominates the level of all antecedents for the condition, setting the control domain level to a level which dominates all of such antecedents and allowing the instruction to be performed, else preventing execution of the instruction; (d) if the instruction is a procedure call, storing the current control domain level on a stack; and (e) if the instruction is a return from a procedure, setting the control domain level to the value that was stored on the stack when such procedure was called.

Claim 4

A method for providing security for a computer system, comprising the steps of: (a) for each machine language instruction to be executed, determining the type of the instruction; (b) if the instruction is, as determined in step (a), a data operation, then if the security level of a user dominates the level of each data word used by the instruction, allowing the instruction to be performed and giving any result a security level which dominates all of the data words used by the instruction and a control domain level, else preventing execution of the instruction; (c) if the instruciton is a conditional, then if the security level of the user dominates the level of all antecedents for the condition, setting the control domain level to a level which dominates all of such antecedents and allowing the instruction to be performed, else preventing execution of the instruction; (d) if the instruction is a procedure call, storing the current control domain level on a stack; and (e) if the instruction is a return from a procedure, setting the control domain level to the value that was stored on the stack when such procedure was called.