US5628023A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Virtual storage computer system having methods and apparatus for providing token-controlled access to protected pages of memory via a token-accessible view
Assignee: International Business Machines Corp
•
Filing: 1994-12-27
•
Granted: 1997-05-06
•
Expires: 2014-12-27
Abstract
Abstract A virtual storage computer system having token controlled storage protection. The computer system includes a processor, a real storage, and a virtual storage containing a user space and a system space. A virtual storage area in the user space provides a protected view of one or more pages of memory located in the real storage. A virtual storage area in the system space provides a token-accessible view of the corresponding pages of memory. To protect the pages of memory, a user program first requests that token controlled protection be provided via the virtual address in the user space and that a corresponding user token be returned by the processor. The user program stores the user token for later use when accessing the protected pages. When the user program requests access to the protected pages, the processor matches the user token with a system token to obtain a token-accessible view in the system space of the protected pages.
Inventors
- 👤 Barbara J. Bryant
- 👤 Glen E. Garrison
- 👤 Danny R. Sutherland
- 👤 Kenneth G. Rubsam
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 22:40
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1416; G06F12/145; G06F12/02; G06F12/08; G06F12/10
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
205 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area and wherein said access request means includes a token-request means for requesting access to said real storage area via a token-accessible view of said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and said token-accessible view via said address translation means.
Claim 2
Dependent Claim
205 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area and wherein said access request means includes a token-request means for requesting access to said real storage area via a token-accessible view of said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and said token-accessible view via said address translation means.
Claim 3
Dependent Claim
22 words
The system of claim 1 wherein said token-access request means includes means for providing a user virtual address and said user token.
Claim 4
Dependent Claim
22 words
The system of claim 2 further including exception means for generating a program exception when said user program activates said protected view.
Claim 5
Dependent Claim
37 words
The system of claim 3 wherein said address translation means includes means for translating said user virtual address into a corresponding real address and outputting said corresponding real address when said user program activates said token-accessible view.
Claim 6
Dependent Claim
29 words
The system of claim 4 further including means for activating said token-accessible view in response to said access request means providing said user virtual address and said user token.
Claim 7
Dependent Claim
216 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area and wherein said access request means includes a token-access request means for providing a user virtual address and said user token for requesting access to said real storage area via a token-accessible view of said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and said token-accessible view via said address translation means.
Claim 8
Dependent Claim
216 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area and wherein said access request means includes a token-access request means for providing a user virtual address and said user token for requesting access to said real storage area via a token-accessible view of said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and said token-accessible view via said address translation means.
Claim 9
Dependent Claim
22 words
The system of claim 6 wherein said address translation means includes means for translating said user virtual address into said system token.
Claim 10
Dependent Claim
52 words
The system of claim 7 wherein said address translation means includes a token verification control means for comparing said user token to said system token, for providing said real address when said user and system tokens correspond, and for providing a program exception when said user and system tokens do not correspond.
Claim 11
Dependent Claim
216 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address and a second virtual storage area with a second virtual address, said second virtual storage area corresponding to said first virtual storage area and said real storage area; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and said second virtual address, and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and a token-accessible view of said real storage area via said address translation means.
Claim 12
Dependent Claim
216 words
A virtual storage computer system having token controlled storage protection comprising: a data processor; a real storage means for providing a real storage area with a real address; a virtual storage means for providing a first virtual storage area with a first virtual address and a second virtual storage area with a second virtual address, said second virtual storage area corresponding to said first virtual storage area and said real storage area; a user program means for execution by said data processor, said user program means having a protection request means for requesting that said token controlled storage protection be provided for said real storage area via said first virtual address and said second virtual address, and that a corresponding user token be returned by said processor, a store means for storing said user token corresponding to said first virtual address, and access request means for requesting access to said real storage area; an address translation means responsive to said access request means for translating a virtual address into a corresponding real address; and token protect means, responsive to said protection request means, for generating said user token and a corresponding system token, and area protection means for establishing a protected view and a token-accessible view of said real storage area via said address translation means.
Claim 13
Dependent Claim
43 words
The system of claim 9 wherein said area protection means establishes said protected view of said real storage area with respect to said first virtual address, and establishes said token-accessible view of said real storage area with respect to said second virtual address.
Claim 14
Dependent Claim
25 words
The system of claim 10 further including a token table means for storing said system token, said first virtual address and said second virtual address.
Claim 15
Dependent Claim
54 words
The system of claim 11 wherein said access request means includes a pointer request means for using said user token to locate a corresponding system token in said token table means and to retrieve a pointer virtual address corresponding to a user virtual address provided with said user token by said access request means.
Claim 16
Dependent Claim
63 words
The system of claim 12 wherein said token table means includes a token verification control means for generating said pointer virtual address and passing it to said access request means if said user virtual address is calculated to be in said first virtual storage area, and for requesting an exception if said user virtual address is not in said first virtual storage area.
Claim 17
Dependent Claim
26 words
The system of claim 13 wherein said access request means requests access to said real storage via said token-accessible view by providing said pointer virtual address.
Claim 18
Dependent Claim
44 words
The system of claim 14 further including an isolating storage area contiguous with said second virtual storage area, and wherein said token protect means establishes a protected view of said real storage area with respect to the virtual address of said isolating storage area.
Claim 19
Independent Claim
172 words
A method of token controlled storage protection in a virtual storage computer system having a real storage and a virtual storage, said method comprising: creating, in said real storage, a real storage area with a real address; creating, in said virtual storage, a first virtual storage area with a first virtual address and corresponding to said real storage area; establishing a protected view and a token-accessible view from a user program to said real storage area via an address translation means, including acquiring a user token and a system token corresponding to said first virtual storage area, and storing said user token in said user program; requesting access to said real storage area by providing said user token and a user virtual address via said user program; and comparing said user token with said system token and, if said user and system tokens correspond, activating said token-accessible view and outputting said real address, and, if said user and system tokens do not correspond, activating said protected view and outputting a program exception.
Claim 20
Independent Claim
172 words
A method of token controlled storage protection in a virtual storage computer system having a real storage and a virtual storage, said method comprising: creating, in said real storage, a real storage area with a real address; creating, in said virtual storage, a first virtual storage area with a first virtual address and corresponding to said real storage area; establishing a protected view and a token-accessible view from a user program to said real storage area via an address translation means, including acquiring a user token and a system token corresponding to said first virtual storage area, and storing said user token in said user program; requesting access to said real storage area by providing said user token and a user virtual address via said user program; and comparing said user token with said system token and, if said user and system tokens correspond, activating said token-accessible view and outputting said real address, and, if said user and system tokens do not correspond, activating said protected view and outputting a program exception.
Claim 21
Dependent Claim
25 words
The method of claim 16 wherein said activating said token-accessible view includes translating said user virtual address into said real address and said system token.
Claim 22
Independent Claim
148 words
A method of token controlled storage protection in a virtual storage computer system having a real storage and a virtual storage, said method comprising: creating, in said real storage, a real storage area with a real address; creating, in said virtual storage, a first virtual storage area with a first virtual address and corresponding to said real storage area; creating, in said virtual storage, a second virtual storage area with a second virtual address and corresponding to said real storage area and said first virtual storage area; establishing a protected view and a token-accessible view from a user program to said real storage area via an address translation means, including acquiring user and system tokens corresponding to said first virtual storage area, and storing said user token in said user program; and requesting access to said real storage area by providing said user token via said user program.
Claim 23
Independent Claim
148 words
A method of token controlled storage protection in a virtual storage computer system having a real storage and a virtual storage, said method comprising: creating, in said real storage, a real storage area with a real address; creating, in said virtual storage, a first virtual storage area with a first virtual address and corresponding to said real storage area; creating, in said virtual storage, a second virtual storage area with a second virtual address and corresponding to said real storage area and said first virtual storage area; establishing a protected view and a token-accessible view from a user program to said real storage area via an address translation means, including acquiring user and system tokens corresponding to said first virtual storage area, and storing said user token in said user program; and requesting access to said real storage area by providing said user token via said user program.
Claim 24
Dependent Claim
44 words
The method of claim 18 wherein said establishing said token-accessible view includes providing a protected view of said real storage area with respect to said first virtual address and an unprotected view of said real storage area with respect to said second virtual address.
Claim 25
Dependent Claim
27 words
The method of claim 19 wherein said establishing said token-accessible view includes relating said first and second virtual addresses and said system token in a token table.
Claim 26
Dependent Claim
43 words
The method of claim 20 wherein said requesting access to said real storage area includes providing a user virtual address in said first virtual storage area along with said user token to obtain a pointer virtual address in said second virtual storage area.
Claim 27
Dependent Claim
67 words
The method of claim 21 further including generating, in response to said requesting access to said real storage, said pointer virtual address corresponding to said user virtual address if said user virtual address is within said first virtual storage area and returning said pointer virtual address to said user program, and generating a program exception if said user virtual address is outside said first virtual storage area.
Claim 28
Dependent Claim
28 words
The method of claim 22 further including activating said token-accessible view in response to said user program requesting access to said real storage with said pointer virtual address.
Claim 29
Dependent Claim
40 words
The method of claim 23 further including creating an isolating storage area contiguous with said second virtual storage area, and establishing a protected view of said real storage area with respect to the virtual address of said isolating storage area.
Claim 30
Dependent Claim
31 words
The method of claim 24 further including generating a program exception in response to activating said protected view of said real storage via said virtual address of said isolating storage area.
References Cited (Backward Citations)
US4392200A
Cited
US4574350A
Cited
US5255384A
Cited
US4727485A
Cited
US4716528A
Cited
US4965719A
Cited
US4961134A
Cited
US5134696A
Cited
US5095420A
Cited
US5237668A
Cited
US5280592A
Cited
US5276878A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-05-05 | 2000-11-04 | 2001-05-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-05-05 | 2004-11-04 | 2005-05-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-05-05 | 2008-11-04 | 2009-05-06 | $7700.00 | Window Closed / Lapsed |