公开(公告)号：US20140310798A1

公开(公告)日：2014-10-16

申请号：US13897301

申请日：2013-05-17

Applicant: BROADCOM CORPORATION

Inventor： Flaviu TUREAN ,  Jaewon Shin

IPC: G06F21/62

CPC classification number: G06F21/606 ,  G06F2221/2113

Abstract: A method for providing hardware mandatory access control (MAC) may include coupling an input filter to a hardware core. The input filter may receive one or more labeled objects and may qualify the labeled objects based on a first label associated with each of the labeled objects. The input filter may strip the first label from each of the labeled objects to provide one or more input objects. The hardware core may receive the one or more input objects and may provide one or more output objects. An output filter may be coupled to the hardware core. The output filter may receive the one or more output objects and may associate to each of the one or more output objects a second label. Operations of the input filter and the output filter may be coordinated by a label manager.

Abstract translation: 用于提供硬件强制访问控制（MAC）的方法可以包括将输入过滤器耦合到硬件核心。 输入过滤器可以接收一个或多个标记对象，并且可以基于与每个标记对象相关联的第一标签来限定标记对象。 输入过滤器可以从每个标记对象剥离第一标签以提供一个或多个输入对象。 硬件核心可以接收一个或多个输入对象并且可以提供一个或多个输出对象。 输出滤波器可以耦合到硬件核。 输出滤波器可以接收一个或多个输出对象，并且可以将一个或多个输出对象中的每一个与第二标签相关联。 输入滤波器和输出滤波器的操作可由标签管理器协调。