Using an access key to protect and point to regions in windows for infiniband

• US 6,578,122 B2
• Filed: 03/01/2001
• Issued: 06/10/2003
• Est. Priority Date: 03/01/2001
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Rogers, Steven L., Recio, Renato John, Fuhs, Ronald Edward, Walk, Bruce Marshall, Craddock, David F., Beukema, Bruce Leroy, Gregg, Thomas Anthony
• Primary Examiner(s): Yoo, Do Hyun
• Assistant Examiner(s): Moazzami, Nasser
• Application Number:
  US09/798,183
• Publication Number:
  US 20020124148A1
• Time in Patent Office: 831 Days
• Field of Search: 711/163-164, 711/152, 711/202-203, 711/205-209, 711/220-221, 709/216-217, 710/100, 710/52, 710/48, 710/260, 710/317, 713/200-201, 712/22, 714/4, 714/10, 714/12
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1475 in a virtual system, e.g. with translation means
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories

Abstract

A method, system and program for controlling access to computer memory are provided. The present invention comprises receiving a work request from a user, wherein the work request comprises an index portion and a protection portion. The index portion of the work request is used to locate an element in an address translation and protection table. The protection portion of the work request is then compared with a protection key in the table element, and access to memory is granted only if the protection portion and protection key match.

Claims

1. A method for controlling access to computer memory, comprising:

receiving a work request from a user, wherein the work request comprises an index portion and a protection portion;

locating an element in an address translation and protection table by means of the index portion of the work request;

comparing the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory region and comprises a pointer to a real address in an address translation table in main memory; and

granting access to memory only if the protection portion and protection key match.

2. The method according to claim 1, wherein the work request is a local access key.

3. The method according to claim 1, wherein the work request is a remote access key.

4. The method according to claim 1, wherein the step of locating the element in the address translation and protection table further comprises combining a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.

5. A method for controlling access to computer memory, comprising:

receiving a work request from a user, wherein the work request comprises an index portion and a protection portion;

locating an element in an address translation and protection table by means of the index portion of the work request;

comparing the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory window and comprises a pointer to a memory region in which the memory window is contained; and

granting access to memory only if the protection portion and protection key match.

6. The method according to claim 5, wherein the work request is a local access key.

7. The method according to claim 5, wherein the work request is a remote access key.

8. The method according to claim 5, wherein the step of locating the element in the address translation and protection table further comprises combining a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.

9. A computer program product for use in a data processing system, for controlling access to computer memory, the computer program product comprising:

first instructions for receiving a work request from a user, wherein the work request comprises an index portion and a protection portion, and wherein the work request is a local access key;

second instructions for locating an element in an address translation and protection table by means of the index portion of the work request;

third instructions for comparing the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory region and comprises a pointer to a real address in an address translation table in main memory; and

fourth instructions for granting access to memory only if the protection portion and protection key match.

10. The computer program product according to claim 9, wherein the work request is a local access key.

11. The computer program product according to claim 9, wherein the work request is a remote access key.

12. The computer program product according to claim 9, wherein the instructions for locating the element in the address translation and protection table further comprises computer program product combining a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.

13. A computer program product for use in a data processing system, for controlling access to computer memory, the computer program product comprising:

first instructions for receiving a work request from a user, wherein the work request comprises an index portion and a protection portion, and wherein the work request is a local access key;

second instructions for locating an element in an address translation and protection table by means of the index portion of the work request;

third instructions for comparing the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory window and comprises a pointer to a memory region in which the memory window is contained; and

fourth instructions for granting access to memory only if the protection portion and protection key match.

14. The computer program product according to claim 13, wherein the work request is a local access key.

15. The computer program product according to claim 13, wherein the work request is a remote access key.

16. The computer program product according to claim 13, wherein the instructions for locating the element in the address translation and protection table further comprises computer program product combining a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.

17. A system for controlling access to computer memory, comprising:

a receiver to receive a work request from a user, wherein the work request comprises an index portion and a protection portion;

a locator to locate an element in an address translation and protection table by means of the index portion of the work request;

a comparator to compare the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory region and comprises a pointer to a real address in an address translation table in main memory; and

a security component to grant access to memory only if the protection portion and protection key match.

18. The system according to claim 17, wherein the work request is a local access key.

19. The system according to claim 17, wherein the work request is a remote access key.

20. The system according to claim 17, wherein the locator further comprises an adder to combine a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.

21. A system for controlling access to computer memory, comprising:

a receiver to receive a work request from a user, wherein the work request comprises an index portion and a protection portion;

a locator to locate an element in an address translation and protection table by means of the index portion of the work request;

a comparator to compare the protection portion of the work request with a protection key in the table element, wherein the table element is associated with a memory window and comprises a pointer to a memory region in which the memory window is contained; and

a security component to grant access to memory only if the protection portion and protection key match.

22. The system according to claim 21, wherein the work request is a local access key.

23. The system according to claim 21, wherein the work request is a remote access key.

24. The system according to claim 21, wherein the locator further comprises an adder to combine a virtual address within the index portion of the work request with a real address, wherein the real address is stored in a base real address register.