公开(公告)号：DE3854616T2

公开(公告)日：1996-06-13

申请号：DE3854616

申请日：1988-12-12

Applicant: IBM

Inventor： BAUM RICHARD IRWIN ,  BORDEN TERRY LEE ,  BUTWELL JUSTIN RALPH ,  CLARK CARL EDWARD ,  GANEK ALAN GEORGE ,  LUM JAMES ,  MALL MICHAEL GERARD ,  PAGE DAVID RICHARD ,  PLAMBECK KENNETH ERNST ,  SCALZI CASPER ANTHONY ,  SCHMALZ RICHARD JOHN

IPC: G06F12/08 ,  G06F9/46 ,  G06F12/10 ,  G06F12/14 ,  G06F21/24 ,  G06F12/02

Abstract: A program authorization mechanism for authorizing access to an address space in the main memory of a computer system by a program being run under a multiple address space facility. An access-list entry is associated with each address space, each access-list entry being designated by an access-list-entry token contained in an access register. Each access-list entry includes a private indicator which indicates if the associated address space can be accessed by all programs from this access-list entry or if the associatd address space can only be accessed by an authorized program. For a program to be authorized, an extended authorization index in a control register must match an access-list extended authorization index in the access-list entry, or the extended authorization index value must be authorized in an authority table associated with the address space. An instruction for testing a given extended authorization index for a given access-list-entry is also disclosed.

公开(公告)号：DE3854616D1

公开(公告)日：1995-11-30

申请号：DE3854616

申请日：1988-12-12

Applicant: IBM

Inventor： BAUM RICHARD IRWIN ,  BORDEN TERRY LEE ,  BUTWELL JUSTIN RALPH ,  CLARK CARL EDWARD ,  GANEK ALAN GEORGE ,  LUM JAMES ,  MALL MICHAEL GERARD ,  PAGE DAVID RICHARD ,  PLAMBECK KENNETH ERNST ,  SCALZI CASPER ANTHONY ,  SCHMALZ RICHARD JOHN

IPC: G06F12/08 ,  G06F9/46 ,  G06F12/10 ,  G06F12/14 ,  G06F21/24 ,  G06F12/02

Abstract: A program authorization mechanism for authorizing access to an address space in the main memory of a computer system by a program being run under a multiple address space facility. An access-list entry is associated with each address space, each access-list entry being designated by an access-list-entry token contained in an access register. Each access-list entry includes a private indicator which indicates if the associated address space can be accessed by all programs from this access-list entry or if the associatd address space can only be accessed by an authorized program. For a program to be authorized, an extended authorization index in a control register must match an access-list extended authorization index in the access-list entry, or the extended authorization index value must be authorized in an authority table associated with the address space. An instruction for testing a given extended authorization index for a given access-list-entry is also disclosed.