Patent ID: 9043612
Filing Date: 2015-05-26
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for managing data security, comprising: identifying a computerized process; generating a physical page key (PPK) for the computerized process, the physical key being stored in at least one table in at least one computer storage device; assigning to the PPK a set of allocated memory pages, each protected memory page in the set of memory pages having an associated data protection (DP) mask that masks the protected memory page in computer memory; generating a virtual page key (VPK) based on the PPK, the VPK identifying the process and a set of data authorized to be used by the process; receiving a request to access the set of data via the process; determining a validity of the VPK based on the PPK; and making a data access determination based on the validity, wherein the at least one table comprises a physical page table and the PPK is associated in the physical page table with physical page number (PPN) a data protection (DP) bit array, a write protection page key (WPPK), and a write protection (WP) bit array, and wherein the at least one table further comprises a physical protection table and the PPK is associated in the physical protection table with a WPPK and a virtual page key chain (VPK Ch) reference.