Where should the type information be: in tags and descriptors 416

Dan, Thanks for the Mondrian reference.

I am not certain what you mean about "flipping protection attributes". I agree that protection ought to be done at an object level and not at a page or word level. buttuming that descriptors are used to describe all storage areas and that operations must utilize descriptors to access any storage and that the descriptors can only be manufactured-changed in properly controlled ways, access control to data is achieved straightforwardly. Different descriptors can cause the referenced data to be treated in different ways (but can complicate the management of the storage area).

Similarly if control access is limited to relative jumps within a described code area or to other areas via tagged addresses-descriptors with type code and if operations on these descriptors-tagged addresses can only be done in controlled ways, then much of the work of protection is subsumed by these mechanisms. See Iliffe's books for very detailed examples of all of the above.

If one organizes one's code and data in the form of objects where each object is responsible for its end and protection, sharing, and synchronization of its data, one does not need protection rings. However one still needs to pbutt (or be able to obtain) authenticated credentials of the user and authenticated data from the environment (perhaps via SAML ) of the subject and make authorization decisions, perhaps by using XACML. Note that in the distributed case, this will be necessary anyway. Simple local R-W sharing of data can be done more straightforwardly.

Ed Feustel

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==---- ---= East-West-Coast Server Farms - Total Privacy via Encryption =---