Object encapsulation protection apparatus
AssigneeInternational Business Machines Corporation
InventorsJohn Clarence Endicott, Steven Lester Halter, Steven Jay Munroe, Erik Edward Voldal, Xin Xu
Life of this patent
Estimating the term…
Abstract
The present invention utilizes a hardware Window Storage Protection Controller (WSPC) and an Object Encapsulation Enforcement Manager (OEEM) to limit access to object data to only those methods which are encapsulated by the object All of the objects of the computer system which require protection are stored in protected storage by a base storage protection mechanism so that only the mechanisms of the present invention can deny or permit access to the data encapsulated by the objects.
Claims21
A data protection apparatus, said data protection apparatus comprising:
- a first object, said first object being stored on a computer system;
- first object data and a first at least one method program associated with said first object;
- and
- a storage protection mechanism which enforces encapsulation of said first object, said storage protection mechanism enforcing encapsulation by restricting access to said first object data to only first authorized method programs, said first authorized method programs being a set of method programs which includes at least one method program, said first method program being included in said first authorized method programs.
A method for providing data protection within a computer system, said method comprising the machine executed steps of:
- calling a first server method program of a first server object, said first server method program being one of at least one first server method programs associated with said first server object, said first server object having first object data and being stored on a computer system, said first server object being called by a client object;
- enforcing encapsulation of said first server object by restricting access to said first object data to only first authorized method programs, said first authorized method programs being a set of method programs which includes at least one method program, said first server method program being included in said first authorized method programs.
A computer system, said computer system comprising:
- a central processing unit;
- data storage;
- at least one system bus;
- a first object, said first object being stored in said data storage;
- first object data and a first at least one method program associated with said first object;
- and
- a storage protection mechanism which enforces encapsulation of said first object, said storage protection mechanism enforcing encapsulation by restricting access to said first object data to only first authorized method programs, said first authorized method programs being a set of method programs which includes at least one method program, said first method program being included in said first authorized method programs.
Dependencies are inferred from the claim text.