Bounded Pointer Read-Write Range Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing bounded pointers lack versatility in managing read and write operations, as they often apply a single range to memory addresses without granularity, which limits security and robustness in ensuring data integrity and confidentiality.
Innovation Solution
The introduction of bounded pointers with differing read and write ranges allows for specific memory addresses to be designated as read-only or write-only, enhancing security and robustness by using range information that distinguishes between read and write permissions, and efficient encoding techniques to reduce storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single range is applied to bounded pointers for both reading and writing, then the structure is simple, but the security and control granularity are insufficient
Solution Approach 1:
The patent segments the unified address range into separate read range and write range. Each range is independently defined with its own base address and limit address, allowing fine-grained control over memory access permissions. This segmentation enables different security policies for reading and writing operations without requiring complete structural redesign.
Solution Approach 2:
The patent applies different permission qualities to different portions of the address space by defining distinct read and write ranges. Specific memory regions can be designated as read-only, write-only, or read-write based on the overlap and relationship between the two ranges, enabling localized security policies tailored to specific data requirements.
2Reliability
If separate read and write ranges are implemented for bounded pointers, then control granularity and security are improved, but storage requirements increase
Solution Approach 1:
The bounded pointer structure is designed to serve multiple functions within a unified framework. The same pointer object simultaneously manages both read and write permissions, and the range validation mechanism handles both read and write operations. This multi-functionality reduces the need for separate pointer structures for different access types.
Solution Approach 2:
The patent merges the read range and write range management into a single bounded pointer object. Both ranges share common validation logic and are stored together in the same data structure, reducing redundant storage requirements compared to maintaining separate pointer structures for read and write operations.
3Adaptability or versatility
If traditional bounded pointers are used without differentiated ranges, then storage is efficient, but the ability to prevent unauthorized modification is limited
Solution Approach 1:
The bounded pointer structure dynamically adapts to different access control requirements by allowing flexible configuration of read and write ranges. The system can adjust the overlap and relationship between ranges to create various permission schemes (read-only, write-only, read-write, or restricted access) without requiring different pointer types.
Solution Approach 2:
The patent changes the parameters of the bounded pointer by introducing separate base address and limit address fields for both read and write ranges. This parameter expansion enables fine-grained access control while maintaining a consistent pointer structure that can be configured for different security requirements through parameter adjustment.
Data Source
AI summary
An apparatus and method are provided for storing bounded pointers. One example apparatus comprises a storage comprising storage elements to store bounded pointers, each bounded pointer comprising a pointer value and associated attributes including at least range information, and processing circuitry to store a bounded pointer in a chosen storage element. The storing process comprises storing in the chosen storage element a pointer value of the bounded pointer, and storing in the storage element the range information of the bounded pointer, such that the range information indicates both a read range of the bounded pointer and a write range of the bounded pointer that differs to the read range. The read range comprises at least one memory address for which reading is allowed when using the bounded pointer, and the write range comprises at least one memory address to which writing is allowed when using the bounded pointer.