Computer system security method and apparatus having program authorization information data structures
INFORMATION PROTECTION AND AUTHENTICATION OF TEXAS, LLCThe holder of the '717 patent has sued Microsoft, Symantec, CA, F-Secure, McAfee, Kaspersky, Sophos, Novell, and PC Tools for infringing this patent.
Summary / Description
| Summary / Description | To provide enhancement needed for a System/370 to operate with MVS, the present invention introduces the concept of the use of storage protect key masks, and is included in a new subsystem control facility that provides: (1) basic authority control with dual address space memory references; (2) program subsystem linkages; and (3) Address Space Number translation to main memory addresses with authorization control. |
Basic Information
| Type of Prior Art | Issued Patents - US |
| Country | United States of America |
| Patent/Application # | 4366537 |
| Kind Code | United States (US) - United STATES Patent - A |
| Patentee Name | International Business Machines Corp. |
| Relevant Pages, Columns, or Lines | col. 4, ln 8-24 |
| URL | http://patft.uspto.gov/netacgi/... |
| Publication Date | May 23, 1980 |
| Additional Information | T |
Notes / To Do
| Notes | |
Excerpt
Another feature of the present invention provides for direct linkage between problem programs executing at different levels of authority, without the use of the Supervisor Call instruction. Control register 5 includes a subsystem-linkage control valid bit, a linkage-table origin, and the linkage-table length. The subsystem-linkage control authorizes the execution of a Program Call and Program Transfer instruction. The linkage-table origin and linkage-table length define the location and extent of the linkage table. The linkage table and the associated entry tables are used during a PC-number-translation process. The contents of an entry-table entry are: authorization key mask, ASN, entry addressing-mode bit, entry instruction address, entry problem-state bit, entry parameter, and entry key mask. The PC-number-translation process occurs during the execution of the Program Call instruction.
Relevance
Claims
Claim 61
In a digital computer system for providing improved computer security having digital data processing means for executing a plurality of digital computer programs for a computer user and memory means for storing digital program instructions and digital data, apparatus for protecting a digital computer user from operations typically performable by a digital computer program executing on behalf of a user comprising:
a) means for storing digital authorization information in said memory means which restricts an associated program from performing operations, when executed by said processing means, which are available to said computer user; and
b) means for storing in at least one segment digital data for associating said authorization information with at least one program to be executed by said processing means.
Relevance
means for storing in at least one segment digital data for associating said authorization information with at least one program to be executed by said processing means.
means for storing in at least one segment digital data for associating said authorization information with at least one program to be executed by said processing means.
Claim Chart
All
Claim 1
In a digital computer system having a digital data processing means for executing a plurality of digital programs and a memory means for storing digital program instructions and digital data, apparatus for protecting a digital computer user from operations typically performable by a digital computer program executing on behalf of a user comprising:
a) means for storing a plurality of digital authorization entries in said memory means, wherein said entries qualify operations which an associated program is permitted to perform when executed by said processing means; and
b) means for storing in at least one segment, digital data for associating said authorization entries with at least one program.
Relevance
b) means for storing in at least one segment, digital data for associating said authorization entries with at least one program.
b) means for storing in at least one segment, digital data for associating said authorization entries with at least one program.
Claim Chart
All
Claim 120
In a digital computer system having digital data processing means for executing a plurality of digital computer programs for a computer user and memory means for storing digital program instructions and digital data, a method for providing improved computer security comprising the steps of:
a) storing digital authorization information in said memory means which restricts an associated program from accessing resources when executed by said digital data processing means which are accessible to said computer user; and
b) storing in at least one segment, digital data for associating said authorization information with at least one program to be executed by said processing means for said computer user.
Relevance
storing in at least one segment, digital data for associating said authorization information with at least one program to be executed by said processing means for said computer user.
storing in at least one segment, digital data for associating said authorization information with at least one program to be executed by said processing means for said computer user.
Claim Chart
All
