A data storage resource is identifiable by physical addresses, and optionally by a virtual address. A policy defines which resources are accessible and which resources are not accessible. A request to access a resource is allowed if access to the resource is permitted by the policy, and if carrying out...http://www.google.fr/patents/US7565509?utm_source=gb-gplus-shareBrevet US7565509 - Using limits on address translation to control access to an addressable entity
Using limits on address translation to control access to an addressable entity