发明授权
- 专利标题: Critical system protection
- 专利标题(中): 关键系统保护
-
申请号: US456882申请日: 1983-01-10
-
公开(公告)号: US4581702A公开(公告)日: 1986-04-08
- 发明人: Stephen F. Saroka , Glenn C. Smith
- 申请人: Stephen F. Saroka , Glenn C. Smith
- 申请人地址: NY Armonk
- 专利权人: International Business Machines Corporation
- 当前专利权人: International Business Machines Corporation
- 当前专利权人地址: NY Armonk
- 主分类号: G06F12/10
- IPC分类号: G06F12/10 ; G06F12/14 ; G06F12/08 ; G06F12/00
摘要:
This disclosure improves data processing system integrity by assigning content types to virtual pages and using the assigned content types to enforce special access rules. The page content types are: (a) any changeable data and/or any executable instructions (current S/370); (b) SCP executable instructions and/or unchangeable data (SENC); (c) SCP restrictively changeable data only (system DO); and optionally (d) application data only (user DO). Page content type designation is done by providing in each PTE two integrity control flag bits called herein SENC and DO. In the first embodiment, the SENC and DO bits are separately coded to respectively control access to SENC and system DO page types. In a second embodiment the SENC and DO bits are combinatorially encoded to obtain four types. A new system integrity state, the SCP state, is provided to protect SENC and system DO page usage. The SCP state is initiated by a hardware interrupt, i.e. a swap of PSWs, and exists only as long as the CPU is fetching instructions from SENC pages. The following new program interrupts are provided to identify when the CPU tries: (1) to execute an instruction fetched from a SENC page while the system is not in the SCP (2) to execute an instruction fetched from a system or application DO page; or (3) to store data into a system DO page using an instruction not fetched from a SENC page. Also while in the SCP state, key zero users are forced to change their access key, whenever necessary, to match the storage key of any page frame prior to changing it.
公开/授权文献
信息查询