Patent US5249231A successfully refreshed from Google Patents.
US5249231A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Memory tagging for object reuse protection
Assignee: General Dynamics Mission Systems Inc
•
Filing: 1992-05-04
•
Granted: 1993-09-28
•
Expires: 2012-05-04
Abstract
Abstract A method and apparatus for memory tagging for object reuse protection which includes a central processing unit (CPU), a memory for storing a data word object and a corresponding tag identifying a first process with a first identification (ID). The memory means is coupled to the CPU. A subject ID register for storing a current process ID for a current process is coupled to the CPU and the memory. Tag checking apparatus for comparing the current process ID to the first ID is coupled to the CPU, to the subject ID register, and to the memory. Control logic is coupled to the CPU, to the memory, and to the tag checking apparatus. The control logic is for denying access to the data word object by the current process if the current process ID does not match the first ID.
Inventors
- 👤 Carlin R. Covey
- 👤 Hemant K. Gorowara
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 19:04
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1458; G06F12/1466
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
128 words
A method for controlling access to a data word object in a computer memory using memory tags, the method comprising the steps of: copying a first identifying bit pattern associated with a first subject to a first tag field in the data word object in the computer memory when the first subject writes the data word object into the computer memory; comparing the first identifying bit pattern in the first tag field to a second identifying bit pattern of a second subject attempting to read the data word object from the computer memory; and denying access by the second subject to the data word object in the computer memory if the first identifying bit pattern in the first tag field does not match the second identifying bit pattern.
Claim 2
Independent Claim
128 words
A method for controlling access to a data word object in a computer memory using memory tags, the method comprising the steps of: copying a first identifying bit pattern associated with a first subject to a first tag field in the data word object in the computer memory when the first subject writes the data word object into the computer memory; comparing the first identifying bit pattern in the first tag field to a second identifying bit pattern of a second subject attempting to read the data word object from the computer memory; and denying access by the second subject to the data word object in the computer memory if the first identifying bit pattern in the first tag field does not match the second identifying bit pattern.
Claim 3
Dependent Claim
37 words
A method for controlling access to data word object as claimed in claim 1, wherein the step of denying access comprises the step of preventing reading of operating system data using an operating system private ID tag.
Claim 4
Dependent Claim
34 words
A method for controlling access to a data word object as claimed in claim 1, wherein the step of denying access further comprises the step of aborting a read operation by the second subject.
Claim 5
Dependent Claim
35 words
A method for controlling access to a data word object as claimed in claim 1, wherein the step of denying access further comprises the step of forcing a fixed bit pattern to the second subject.
Claim 6
Dependent Claim
35 words
A method for controlling access to a data word object as claimed in claim 1, wherein the step of denying access further comprises the step of substituting a safe value for the data word object.
Claim 7
Dependent Claim
36 words
A method for controlling access to a data word object as claimed in claim 1, wherein the step of copying a first identifying bit pattern comprises the step of copying a subject identification (ID) register value.
Claim 8
Dependent Claim
27 words
A method for controlling access to a data word object as claimed in claim 1, wherein the step of denying access is dependent on a user process.
Claim 9
Dependent Claim
44 words
A method for controlling access to a data word object as claimed in claim 1, further comprising the step of identifying at least two identifying bit patterns for each subject, including a subject reader ID register value and a subject writer ID register value.
Claim 10
Dependent Claim
45 words
A method for controlling access to a data word object as claimed in claim 1, further comprising the step of selecting a subject reader ID register and a subject writer ID register based on an address in the memory, using a memory management unit (MMU).
Claim 11
Dependent Claim
26 words
A method for controlling access to a data word object as claimed in claim 1, further comprising the step of reallocating memory areas from a queue.
Claim 12
Dependent Claim
150 words
In a computer, a device for providing object reuse protection, the device comprising: a central processing unit (CPU); a memory means for storing a data word object comprising a tag field identifying a first process with a first identification (ID), the memory means coupled to the CPU; a subject ID register for storing a current process ID for a current process, the subject ID register coupled to the CPU and to the memory means; tag checking means for comparing the current process ID to the first ID, the tag checking means coupled to the CPU, to the subject ID register, and to the memory means; and control logic means for denying access to the data word object by the current process, if the current process ID does not match the first ID, the control logic means coupled to the CPU, to the memory means, and to the tag checking means.
Claim 13
Dependent Claim
150 words
In a computer, a device for providing object reuse protection, the device comprising: a central processing unit (CPU); a memory means for storing a data word object comprising a tag field identifying a first process with a first identification (ID), the memory means coupled to the CPU; a subject ID register for storing a current process ID for a current process, the subject ID register coupled to the CPU and to the memory means; tag checking means for comparing the current process ID to the first ID, the tag checking means coupled to the CPU, to the subject ID register, and to the memory means; and control logic means for denying access to the data word object by the current process, if the current process ID does not match the first ID, the control logic means coupled to the CPU, to the memory means, and to the tag checking means.
Claim 14
Dependent Claim
26 words
A device for providing object reuse protection as claimed in claim 11, wherein the tag checking means comprises a table lookup means to determine allowed operations.
Claim 15
Dependent Claim
27 words
A device for providing object reuse protection as claimed in claim 12, wherein the subject ID register comprises a reader ID register and a writer ID register.
Claim 16
Dependent Claim
27 words
A device for providing object reuse protection as claimed in claim 11, wherein the tag checking means comprises a random access memory (RAM) for mode-specific tag checking.
Claim 17
Dependent Claim
73 words
A device for providing object reuse protection as claimed in claim 13, wherein the device additionally comprises a memory management unit (MMU) coupled to the CPU, to the tag checking means, to the memory means, to the reader ID register, and to the writer ID register, the MMU for enabling the selection of the reader ID register or the selection of the writer ID register based on an address within the memory means.
Claim 18
Independent Claim
102 words
A method for preventing unauthorized access to a memory word in a computer memory using memory tags, the method comprising the steps of: providing a first identification for a first subject; copying the first identification to a tag field in the memory word when the first subject writes data into the memory word; providing a second identification for a second subject attempting to read the data from the memory word; comparing the first identification to the second identification; and denying access by the second subject to the data in the memory word, if the first identification does not match the second identification.
Claim 19
Independent Claim
102 words
A method for preventing unauthorized access to a memory word in a computer memory using memory tags, the method comprising the steps of: providing a first identification for a first subject; copying the first identification to a tag field in the memory word when the first subject writes data into the memory word; providing a second identification for a second subject attempting to read the data from the memory word; comparing the first identification to the second identification; and denying access by the second subject to the data in the memory word, if the first identification does not match the second identification.
Claim 20
Dependent Claim
34 words
A method for preventing unauthorized access as claimed in claim 16, wherein the step of denying access comprises the step of preventing reading of operating system data using an operating system private ID tag.
Claim 21
Dependent Claim
30 words
A method for preventing unauthorized access as claimed in claim 16, wherein the step of denying access further comprises the step of aborting a read operation by the second subject.
Claim 22
Dependent Claim
31 words
A method for preventing unauthorized access as claimed in claim 16, wherein the step of denying access further comprises the step of forcing a fixed bit pattern to the second subject.
Claim 23
Dependent Claim
28 words
A method for preventing unauthorized access as claimed in claim 16, wherein the step of denying access further comprises the step of substituting a safe value for the.
Claim 24
Dependent Claim
23 words
A method for preventing unauthorized access as claimed in claim 16, wherein the step of denying access is dependent on a user process.
Claim 25
Dependent Claim
34 words
A method for preventing unauthorized access as claimed in claim 16, further comprising the step of selecting a subject reader ID register and a subject writer ID register using a memory management unit (MMU).
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-09-27 | 1997-03-29 | 1997-09-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-09-27 | 2001-03-29 | 2001-09-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-09-27 | 2005-03-29 | 2005-09-28 | $7700.00 | Window Closed / Lapsed |