Patent ID: 9697370
Date: 2017-07-04
CPC Classifications: G06F,H04L

Claim:
1. A system for implementing and processing a block extent granularity authorization mechanism for a Coherent Accelerator Processor Interface (CAPI) adapter in a computer system comprising: the CAPI adapter performing an authorization process with an application client requesting authorization to a file from a file system, validating the request, determining a location of each extent comprising the file, and requesting authorization to each extent, assigning a CAPI client ID and CAPI register range to the requesting application client and requesting a previously authorized CAPI parent client to authorize the client ID to each extent where the application client requesting authorization is a child of the previously authorized CAPI parent client, and sending a create authorizations command to the CAPI adapter, and the CAPI adapter validating an Authorization Handle and the CAPI register range, and returning the validated Authorization Handle and CAPI register range to the previously authorized CAPI parent client and the file system, the file system returning an authorization list to the requesting client, the CAPI adapter comprising an authorization table, said authorization table including multiple authorization entries, each authorization entry including the Authorization Handle with CAPI server registers identification (ID) including a start Logical Block Address of the extent and range of Logical Block Addresses for each extent, said authorization table providing for the CAPI client, the CAPI client identification (ID), the CAPI server register space assigning resource ownership to the CAPI client and a CAPI set of allowed functions; the CAPI adapter comprising a file system authorization function, said file system authorization function responsive to receiving a command, performing the authentication process using the Authorization Handle defining for the CAPI client authorization for each extent contained in the received command and the Authorization Entry indexed by the Authorization Handle in the Authorization Table to authenticate the received command to prevent unauthorized data access, and said file system authorization function validating commands at an extent granularity with each extent for the CAPI client including a resource space subset of a block device Logical Unit (LUN), bypassing an Operating System/File System of the computer system for performing command operations.