Database fine-grained access control
    1.
    发明授权
    Database fine-grained access control 有权
    数据库细粒度访问控制

    公开(公告)号:US06487552B1

    公开(公告)日:2002-11-26

    申请号:US09167092

    申请日:1998-10-05

    IPC分类号: G06F1730

    摘要: A method and mechanism are provided for accessing data. Values are stored for a set of context attributes associated with a session between a database user and a database server. The database system includes an attribute setting mechanism that selectively restricts access to the set of context attributes based on a policy. During the session, the database server executes a query that contains a reference to one or more of the context attributes. For example, the query may contain a predicate that requires a comparison between a context attribute value and a constant. The database server processes the query based on current values of the one or more of the context attributes referenced in the query. A mechanism is also provided for dynamically attaching predicates to queries, where the predicates are attached based on a policy. For example, the database system detects that a query is issued against a database object. Prior to executing the query, a policy function associated with the database object is invoked. The policy function creates a modified query by selectively adding zero or more predicates to the query based on a policy associated with the database object. The modified query is then executed.

    摘要翻译: 提供了访问数据的方法和机制。 存储与数据库用户和数据库服务器之间的会话相关联的一组上下文属性的值。 数据库系统包括属性设置机制,其基于策略选择性地限制对该组上下文属性的访问。 在会话期间,数据库服务器执行包含对一个或多个上下文属性的引用的查询。 例如,查询可以包含需要在上下文属性值和常量之间进行比较的谓词。 数据库服务器根据查询中引用的一个或多个上下文属性的当前值处理查询。 还提供了一种机制,用于动态地将谓词附加到查询中,其中基于策略附加谓词。 例如,数据库系统检测到针对数据库对象发出查询。 在执行查询之前,调用与数据库对象关联的策略函数。 策略函数通过根据与数据库对象相关联的策略选择性地向查询添加零个或多个谓词来创建修改的查询。 然后执行修改后的查询。

    Method and apparatus for storing and retrieving data in multiple
languages simultaneously using a fully-populated sub-table
    2.
    发明授权
    Method and apparatus for storing and retrieving data in multiple languages simultaneously using a fully-populated sub-table 失效
    使用完全填充的子表同时存储和检索多种语言的数据的方法和装置

    公开(公告)号:US5787410A

    公开(公告)日:1998-07-28

    申请号:US603658

    申请日:1996-02-20

    IPC分类号: G06F17/30

    摘要: The present invention provides a computer implemented method and apparatus for storing and retrieving data in a database management system (DBMS) in multiple languages, simultaneously, using a fully-populated Sub-Table. In one embodiment, the method and apparatus include generating a Base Table and a Translation Sub-Table. The Base Table includes base rows, each having a primary key and zero or more untranslatable values, exclusive of translatable data values. The Translation Sub-Table includes sets of sub-table rows, wherein each set of sub-table rows corresponds to a base row in the Base Table. In each set of sub-table rows, a sub-table row is provided for each operational language having at least one translatable data value corresponding to the primary key of the respective base row.

    摘要翻译: 本发明提供了一种计算机实现的方法和装置,用于使用完全填充的子表同时在多种语言的数据库管理系统(DBMS)中存储和检索数据。 在一个实施例中,该方法和装置包括生成基表和转换子表。 基表包括基本行,每行具有主键和零个或多个不可翻译的值,不包括可翻译的数据值。 翻译子表包括子表行集合,其中每组子表行对应于基表中的基行。 在每个子表行集合中,为具有对应于相应基本行的主键的至少一个可翻译数据值的每个操作语言提供子表行。

    Copy-on-write versioning of documents
    3.
    发明授权
    Copy-on-write versioning of documents 有权
    文件复制版本

    公开(公告)号:US07627615B2

    公开(公告)日:2009-12-01

    申请号:US11590430

    申请日:2006-10-30

    IPC分类号: G06F17/30

    摘要: Approach for versioning of documents is described. A version accumulator structure stores one or more version values indicating different versions of a data object. The data object is decomposable into a plurality of nodes. One or more copies of each node of the plurality of nodes are stored, where the one or more copies are associated with non-overlapping version ranges. A first request to perform a change to the data object is received. The first request specifies an effective version value for the change, which involves a particular node. The change is performed based on the effective version value and without making a deep copy of the data object. A second request to retrieve a certain version of the data object is received. The certain version is retrieved based on the version ranges associated with the one or more copies of each node of the plurality of nodes.

    摘要翻译: 描述文档版本控制的方法。 版本累加器结构存储指示数据对象的不同版本的一个或多个版本值。 数据对象可分解成多个节点。 存储多个节点中的每个节点的一个或多个副本,其中一个或多个副本与不重叠的版本范围相关联。 接收到对数据对象进行更改的第一个请求。 第一个请求指定了更改的有效版本值,该版本值涉及特定节点。 该更改是基于有效的版本值进行的,而不是深入复制数据对象。 接收到检索数据对象的特定版本的第二个请求。 基于与多个节点中的每个节点的一个或多个副本相关联的版本范围来检索特定版本。

    Copy-on-write versioning of documents
    4.
    发明申请
    Copy-on-write versioning of documents 有权
    文件复制版本

    公开(公告)号:US20080104141A1

    公开(公告)日:2008-05-01

    申请号:US11590430

    申请日:2006-10-30

    IPC分类号: G06F17/30

    摘要: Approach for versioning of documents is described. A version accumulator structure stores one or more version values indicating different versions of a data object. The data object is decomposable into a plurality of nodes. One or more copies of each node of the plurality of nodes are stored, where the one or more copies are associated with non-overlapping version ranges. A first request to perform a change to the data object is received. The first request specifies an effective version value for the change, which involves a particular node. The change is performed based on the effective version value and without making a deep copy of the data object. A second request to retrieve a certain version of the data object is received. The certain version is retrieved based on the version ranges associated with the one or more copies of each node of the plurality of nodes.

    摘要翻译: 描述文档版本控制的方法。 版本累加器结构存储指示数据对象的不同版本的一个或多个版本值。 数据对象可分解成多个节点。 存储多个节点中的每个节点的一个或多个副本,其中一个或多个副本与不重叠的版本范围相关联。 接收到对数据对象进行更改的第一个请求。 第一个请求指定了更改的有效版本值,该版本值涉及特定节点。 该更改是基于有效的版本值进行的,而不是深入复制数据对象。 接收到检索数据对象的特定版本的第二个请求。 基于与多个节点中的每个节点的一个或多个副本相关联的版本范围来检索特定版本。

    Database fine-grained access control
    5.
    发明授权
    Database fine-grained access control 有权
    数据库细粒度访问控制

    公开(公告)号:US07281003B2

    公开(公告)日:2007-10-09

    申请号:US10943189

    申请日:2004-09-15

    IPC分类号: G06F17/30

    摘要: A method and mechanism are provided for accessing data. Values are stored for a set of context attributes associated with a session between a database user and a database server. The database system includes an attribute setting mechanism that selectively restricts access to the set of context attributes based on a policy. During the session, the database server executes a query that contains a reference to one or more of the context attributes. For example, the query may contain a predicate that requires a comparison between a context attribute value and a constant. The database server processes the query based on current values of the one or more of the context attributes referenced in the query. A mechanism is also provided for dynamically attaching predicates to queries, where the predicates are attached based on a policy. For example, the database system detects that a query is issued against a database object. Prior to executing the query, a policy function associated with the database object is invoked. The policy function creates a modified query by selectively adding zero or more predicates to the query based on a policy associated with the database object. The modified query is then executed.

    摘要翻译: 提供了访问数据的方法和机制。 存储与数据库用户和数据库服务器之间的会话相关联的一组上下文属性的值。 数据库系统包括属性设置机制,其基于策略选择性地限制对该组上下文属性的访问。 在会话期间,数据库服务器执行包含对一个或多个上下文属性的引用的查询。 例如,查询可以包含需要在上下文属性值和常量之间进行比较的谓词。 数据库服务器根据查询中引用的一个或多个上下文属性的当前值处理查询。 还提供了一种机制,用于动态地将谓词附加到查询中,其中基于策略附加谓词。 例如,数据库系统检测到针对数据库对象发出查询。 在执行查询之前,调用与数据库对象关联的策略函数。 策略函数通过根据与数据库对象相关联的策略选择性地向查询添加零个或多个谓词来创建修改的查询。 然后执行修改后的查询。

    Techniques for managing resources for multiple exclusive groups
    6.
    发明授权
    Techniques for managing resources for multiple exclusive groups 有权
    用于管理多个独占组的资源的技术

    公开(公告)号:US06606627B1

    公开(公告)日:2003-08-12

    申请号:US09940870

    申请日:2001-08-27

    IPC分类号: G06F1730

    摘要: Techniques for allowing an application designed to store data for one group of users to store data for a plurality of groups of users include modifying the application to cause the application to indicate a routine to a database server that stores data for the application in a database. The routine provides modifications to queries of the database, which limit access based on the groups to which belong users that cause the queries to be submitted. In response to receiving a query involving the database and caused by a particular user, the database server locates the routine, and, prior to executing the query, modifies the query. Modifying the query includes invoking the routine. The modification to the query thereby limits access of the particular user to data that is associated with the group of users to which the particular user belongs.

    摘要翻译: 用于允许设计用于存储一组用户的数据以存储多个用户组的数据的应用的技术包括修改应用程序以使应用程序向数据库服务器指示例程,该数据库服务器将用于该应用的数据存储在数据库中。 该例程提供对数据库的查询的修改,这限制了基于属于用户的组的访问,导致提交查询。 响应于接收到涉及数据库并由特定用户引起的查询,数据库服务器查找例程,并且在执行查询之前修改该查询。 修改查询包括调用该例程。 因此,对查询的修改限制了特定用户对与特定用户所属的用户组相关联的数据的访问。

    Virtually partitioning user data in a database system
    7.
    发明授权
    Virtually partitioning user data in a database system 有权
    在数据库系统中实际划分用户数据

    公开(公告)号:US06587854B1

    公开(公告)日:2003-07-01

    申请号:US09872896

    申请日:2001-05-31

    IPC分类号: G06F1730

    摘要: A method and apparatus are provided for storing data of multiple enterprises in a set of database objects in a database system and allowing multiple enterprises to interact with the database system as if those database objects contained only their data. According to an aspect of the present invention, a database command issued against a database object by a user is modified by adding predicates that limit access to data associated with the enterprise in which the user has data access. The predicates may specify conditions based on a column in the database object that identifies the enterprise. When a user issues a database command to add data to the database object, the column is populated in a manner transparent to the user. The data in the database object that is associated with a particular enterprise is stored in a separate tablespace.

    摘要翻译: 提供了一种方法和装置,用于将多个企业的数据存储在数据库系统中的一组数据库对象中,并允许多个企业与数据库系统进行交互,就好像这些数据库对象只包含其数据。 根据本发明的一个方面,通过添加限制对与用户具有数据访问的企业相关联的数据的访问的谓词来修改对用户对数据库对象发布的数据库命令。 谓词可以基于标识企业的数据库对象中的列来指定条件。 当用户发出数据库命令以将数据添加到数据库对象时,该列以对用户透明的方式填充。 与特定企业关联的数据库对象中的数据存储在单独的表空间中。

    Dynamic memory allocation in a computer using a bit map index
    8.
    发明授权
    Dynamic memory allocation in a computer using a bit map index 失效
    使用位图索引计算机中的动态内存分配

    公开(公告)号:US5784699A

    公开(公告)日:1998-07-21

    申请号:US653221

    申请日:1996-05-24

    IPC分类号: G06F12/02 G06F12/08

    摘要: A dynamic memory allocator in a computer assigns portions of memory into a large number of slots that include zero or more memory blocks of equal size. Free lists identify memory blocks, corresponding to a slot size, not currently in use in the computer. Software programs generate requests, including a size, for a memory block. The size of the requests are rounded up to the nearest slot size. To allocate a memory block, the free lists are searched, using a bit map index or a hierarchical bit map index, to identify an available memory block to accommodate the memory block requested. The dynamic memory allocator handles large block allocations different from small block allocations. A virtual memory allocator stores a plurality of pointers to identify one or more virtual pages of memory for allocation to the dynamic memory allocator.

    摘要翻译: 计算机中的动态存储器分配器将存储器的一部分分配给包括零个或多个相同大小的存储器块的大量时隙。 免费列表标识对应于计算机当前未使用的插槽大小的内存块。 软件程序生成内存块的请求,包括大小。 请求的大小向上取整到最接近的插槽大小。 为了分配存储器块,使用位图索引或分层位图索引来搜索空闲列表,以识别可用的存储器块以容纳所请求的存储器块。 动态内存分配器处理与小块分配不同的大块分配。 虚拟存储器分配器存储多个指针以识别用于分配给动态存储器分配器的存储器的一个或多个虚拟页面。

    Product packaging and installation mechanism
    9.
    发明授权
    Product packaging and installation mechanism 有权
    产品包装安装机制

    公开(公告)号:US07412700B2

    公开(公告)日:2008-08-12

    申请号:US10848635

    申请日:2004-05-18

    IPC分类号: G06F9/445 G06F12/00

    摘要: Files of software to be installed in a computer are packaged as follows. A source file is prepared to contain at least a declaration of an array of sufficient space to accommodate the files to be packaged. The source file is compiled into an executable file. Thereafter, the array in the executable file is overwritten with data from each file being packaged. Depending on the embodiment, the address of where each file begins in the executable file and each file's name may be stored in the same executable file or in a different file. The stored file names are used to identify an address of a file from its name, when the named file is first accessed. In several embodiments, the operating system loads the executable file as a library that is automatically shared by multiple instances of the application (or by multiple applications), to efficiently use physical memory.

    摘要翻译: 要安装在计算机中的软件文件包装如下。 源文件准备至少包含一个足够空间的数组的声明,以容纳要打包的文件。 源文件被编译成可执行文件。 此后,可执行文件中的数组将被来自正在打包的每个文件的数据覆盖。 根据实施例,每个文件在可执行文件中开始的地址和每个文件的名称可以存储在相同的可执行文件或不同的文件中。 存储的文件名用于在首次访问命名文件时从其名称中标识文件的地址。 在几个实施例中,操作系统将可执行文件加载为由应用程序的多个实例(或多个应用程序)自动共享的库,以有效地使用物理内存。

    Database fine-grained access control

    公开(公告)号:US06631371B1

    公开(公告)日:2003-10-07

    申请号:US10247323

    申请日:2002-09-18

    IPC分类号: G06F1730

    摘要: A method and mechanism are provided for accessing data. Values are stored for a set of context attributes associated with a session between a database user and a database server. The database system includes an attribute setting mechanism that selectively restricts access to the set of context attributes based on a policy. During the session, the database server executes a query that contains a reference to one or more of the context attributes. For example, the query may contain a predicate that requires a comparison between a context attribute value and a constant. The database server processes the query based on current values of the one or more of the context attributes referenced in the query. A mechanism is also provided for dynamically attaching predicates to queries, where the predicates are attached based on a policy. For example, the database system detects that a query is issued against a database object. Prior to executing the query, a policy function associated with the database object is invoked. The policy function creates a modified query by selectively adding zero or more predicates to the query based on a policy associated with the database object. The modified query is then executed.