Memory protection using a tagged architecture

Patent metadata

Field	Value
Publication number	US-10152330-B2
Application number	US-201615268738-A
Country	US
Kind code	B2
Filing date	Sep 19, 2016
Priority date	Sep 21, 2015
Publication date	Dec 11, 2018
Grant date	Dec 11, 2018

Abstract

The system and method of memory protection using a tagged architecture. The system of memory protection provides a unique tag for each field, within a structure, thus preventing access beyond the structure. The system compares the unique tag, e.g. color, of each field within the structure to the color of the pointer that is used to access the respective structure field. Freed memory is tagged as uninitialized.

First claim

What is claimed:

1. A method of computer memory protection using tagged architecture, the method comprising,
indicating freed memory in a memory array, via a hardware circuitry, by tagging the freed memory with an uninitialized tag;
initializing, via the hardware circuitry, the uninitialized tag on a pointer with an initial value to form an initialized tag;
providing, via the hardware circuitry, a unique tag for each of two or more fields of a structure stored in the memory array, wherein the two or more fields of the structure are of different data types;
providing, via the hardware circuitry, a matching tag for each pointer used to point to any of the two or more fields of the structure stored in the memory array;
preventing unauthorized access beyond each of the two or more fields of the structure by comparing, via the hardware circuitry, the unique tag on the two or more fields of the structure with the matched tag of the pointer that is used to point to the two or more fields of the structure, wherein all tag values are assigned only by the hardware circuitry and are not accessible by any user processes; and
propagating tag information via the hardware circuitry according to a memory protection policy.

2. The method of computer memory protection using tagged architecture of claim 1 , wherein initializing the tag on a pointer is handled by a compiler.

3. The method of computer memory protection using tagged architecture of claim 1 , wherein initializing the tag on a pointer is handled by a memory allocation library.

4. A computer-implemented method on a non-transitory medium for metadata processing, comprising executing on a processor the steps of:
indicating freed memory in a memory array, via a hardware circuitry, by tagging the freed memory with an uninitialized tag;
initializing, via the hardware circuitry, the uninitialized tag in a pointer with an initial value, to form an initialized tag;
providing, via the hardware circuitry, a unique tag for each of the two or more fields of a structure stored in the memory array, wherein the two or more fields of the structure are of different data types;
providing, via the hardware circuitry, a matching tag for each pointer used to point to the two or more fields of the structure stored in the memory array;
preventing unauthorized access beyond the two or more fields of the structure by comparing, via the hardware circuitry, the unique tag on each of the two or more fields of the structure with the matched tag of the respective field's pointer, wherein all tag values are assigned only by the hardware circuitry and are not accessible by any user processes; and
propagating tag information via the hardware circuitry according to a memory protection policy.

5. The computer-implemented method of claim 4 , wherein initializing the tag on a pointer is handled by a compiler.

6. The computer-implemented method of claim 4 , wherein initializing the tag on a pointer is handled by a memory allocation library.

7. A method of computer memory protection using tagged architecture, the method comprising,
providing, via a hardware circuitry, a unique tag for each of two or more fields of a structure stored in the memory array, wherein the two or more fields of the structure are of different data types;
initializing, via the hardware circuitry, a tag on a pointer with an initial value, to form an initialized tag;
providing, via the hardware circuitry, a matching tag for each pointer used to point to the two or more fields of the structure stored in the memory array;
comparing, via the hardware circuitry, the unique tag of each field of the structure with the matched tag of the pointer that is used to point to each field of the structure;
preventing, via the hardware circuitry, unauthorized access beyond each of the two or more fields of the structure when the unique tag on the two or more fields of the structure does not match the matched tag of the pointer that is used to point to the two or more fields of the structure, wherein all tag values are assigned only by the hardware circuitry and are not accessible by any user processes: and
propagating tag information via the hardware circuitry according to a memory protection policy.

8. The method of computer memory protection using tagged architecture of claim 7 , further comprising indicating, via the hardware circuitry, freed memory in a memory array by tagging the freed memory with an uninitialized tag.

9. The method of computer memory protection using tagged architecture of claim 7 , wherein initializing the tag on a pointer is handled by a compiler.

10. The method of computer memory protection using tagged architecture of claim 7 , wherein initializing the tag on a pointer is handled by a memory allocation library.

Assignees

• Bae Sys Inf & Elect Sys Integ

Inventors

• Chiricescu Silviu S
• Reubenstein Howard B
• Thomas Arun

Classifications

• G06F9/44 Primary

  Arrangements for executing specific programs · CPC title

• G06F21/55 Primary

  Detecting local intrusion or implementing counter-measures · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title