Method and apparatus for preventing unauthorized access to computer system resources
    41.
    发明授权
    Method and apparatus for preventing unauthorized access to computer system resources 有权
    防止未经授权访问计算机系统资源的方法和装置

    公开(公告)号:US07702692B2

    公开(公告)日:2010-04-20

    申请号:US11355736

    申请日:2006-02-16

    IPC分类号: G06F17/30 G06F7/00

    CPC分类号: G06F21/53 G06F21/54

    摘要: A system is provided to prevent unauthorized access to computer system resources. The system operates by receiving a section of programming language code to execute on a computer system. This programming language code includes a pragma that defines a set of resources that the programming language code has permission to access. The system analyzes the pragma to determine the set of resources. After analyzing the pragma, the system processes the programming language code in accordance with the pragma. The system can further process the program in accordance with the pragma involves creating a sandbox that includes the set of resources defined by the pragma. The system then executes the programming language code within the boundaries of the sandbox.

    摘要翻译: 提供一种系统来防止未经授权的访问计算机系统资源。 该系统通过接收一部分在计算机系统上执行的编程语言代码来操作。 该编程语言代码包括一个pragma,它定义了编程语言代码具有访问权限的一组资源。 系统分析了编译指标来确定资源集。 在分析了pragma之后,系统按照编译语言处理编程语言代码。 系统可以根据pragma进一步处理程序,其中包括创建一个包含由pragma定义的一组资源的沙盒。 然后,系统在沙盒的边界内执行编程语言代码。

    Propagating commit times
    43.
    发明授权
    Propagating commit times 有权
    传播提交时间

    公开(公告)号:US07275074B2

    公开(公告)日:2007-09-25

    申请号:US10964494

    申请日:2004-10-12

    IPC分类号: G06F17/30

    摘要: A method and mechanism for propagating commit times between a plurality of database servers is provided. A database server maintains a set of one or more values that indicate which timestamps have been exchanged with at least one other database server that shares access to a common database. The one or more values maintained by the database server include a first value describing the most recent timestamp that the database server has sent to another database server and a second value describing the most recent timestamp that the database server has received from the other database server. The database server determines whether to send a commit timestamp associated with a committing transaction to another database server based, at least in part, on the set of one or more values. These techniques may be utilized for propagating commit times between any number of database servers.

    摘要翻译: 提供了一种用于在多个数据库服务器之间传播提交时间的方法和机制。 数据库服务器维护一组一个或多个值,这些值指示哪个时间戳与至少一个共享对公共数据库的访问的其他数据库服务器交换。 由数据库服务器维护的一个或多个值包括描述数据库服务器已经发送到另一个数据库服务器的最新时间戳的第一个值,以及描述数据库服务器从其他数据库服务器接收的最新时间戳的第二个值。 数据库服务器至少部分地基于一个或多个值的集合来确定是否将与提交事务相关联的提交时间戳发送到另一个数据库服务器。 这些技术可用于在任意数量的数据库服务器之间传播提交时间。

    Method and apparatus for preventing unauthorized access to computer system resources
    44.
    发明申请
    Method and apparatus for preventing unauthorized access to computer system resources 有权
    防止未经授权访问计算机系统资源的方法和装置

    公开(公告)号:US20070192623A1

    公开(公告)日:2007-08-16

    申请号:US11355736

    申请日:2006-02-16

    IPC分类号: G06F12/14

    CPC分类号: G06F21/53 G06F21/54

    摘要: One embodiment of the present invention provides a system that facilitates preventing unauthorized access to computer system resources. The system operates by receiving a section of programming language code to execute on a computer system. This programming language code includes a pragma that defines a set of resources that the programming language code has permission to access. The system analyzes the pragma to determine the set of resources. After analyzing the pragma, the system processes the programming language code in accordance with the pragma. In a variation on this embodiment, processing the program in accordance with the pragma involves creating a sandbox that includes the set of resources defined by the pragma. The system then executes the programming language code within the boundaries of the sandbox.

    摘要翻译: 本发明的一个实施例提供一种有助于防止对计算机系统资源的未授权访问的系统。 该系统通过接收一部分在计算机系统上执行的编程语言代码来操作。 该编程语言代码包括一个pragma,它定义了编程语言代码具有访问权限的一组资源。 系统分析了编译指标来确定资源集。 在分析了pragma之后,系统按照编译语言处理编程语言代码。 在该实施例的变型中,根据编译指示处理程序涉及创建包括由编译指示定义的资源集合的沙箱。 然后,系统在沙盒的边界内执行编程语言代码。

    Automatic assignment of services to servers in a multi-server system
    45.
    发明申请
    Automatic assignment of services to servers in a multi-server system 有权
    自动将服务分配给多服务器系统中的服务器

    公开(公告)号:US20050246441A1

    公开(公告)日:2005-11-03

    申请号:US10899680

    申请日:2004-07-26

    IPC分类号: G06F15/16 H04L29/08

    摘要: Groups of services are created based on one or both of the following: (a) what is accessed by each service, and (b) a likelihood of conflicts between accesses (e.g., a database object read operation or a database object write operation) performed by each service and accesses performed by each other service. Groups of services, which may be the groups created or subsets of those groups, are assigned to run on particular servers based on the processing power requirements of each group and the processing power available to each server. In the grouping process, accesses can be biased by giving more weight to object write operations than to object read operations, and to access operations on an index or dictionary than to access operations on a table.

    摘要翻译: 基于以下一种或两种方式创建服务组:(a)每个服务访问什么,以及(b)执行访问之间冲突的可能性(例如,数据库对象读取操作或数据库对象写入操作) 通过每个服务和由彼此服务执行的访问。 根据每个组的处理能力要求和每个服务器可用的处理能力,可以将分组创建的组或这些组的子集分配到特定服务器上运行。 在分组过程中,可以通过给予对象写入操作更多的权重而不是对象读取操作来访问访问,并且访问索引或字典上的操作而不是访问表上的操作。

    Complex computation across heterogenous computer systems
    46.
    发明申请
    Complex computation across heterogenous computer systems 有权
    异构计算机系统的复杂计算

    公开(公告)号:US20050119988A1

    公开(公告)日:2005-06-02

    申请号:US10724834

    申请日:2003-12-02

    IPC分类号: G06F9/50 G06F7/00

    摘要: A programmatic interface to allow external functions to be registered and called in parallel from within a database management system is described for coordinating a computation at multiple nodes. In one embodiment, each node executes a process configured for starting a program to perform the computation in response to a command received from a database system. In response to receiving a query at the database system, multiple commands are transmitted to the processes for concurrently performing the computation at each said corresponding process. Results are received from each of the processes and execution of the statement is completed based on the results received.

    摘要翻译: 描述了允许外部功能从数据库管理系统中并行注册和并行调用的编程接口,用于协调多个节点处的计算。 在一个实施例中,每个节点执行被配置为响应于从数据库系统接收到的命令来启动程序来执行计算的过程。 响应于在数据库系统处接收到查询,将多个命令发送到在每个所述相应处理中并行执行计算的处理。 从每个进程收到结果,根据收到的结果完成报表的执行。

    Event notification in a clustered computing environments
    47.
    发明申请
    Event notification in a clustered computing environments 有权
    群集计算环境中的事件通知

    公开(公告)号:US20050097569A1

    公开(公告)日:2005-05-05

    申请号:US10697073

    申请日:2003-10-29

    IPC分类号: G06F3/00 H04L29/06 H04L29/08

    摘要: Techniques for event notification in clustered computing environments are disclosed. The disclosed techniques for event notification enable applications that rely on event notifications to be ported transparently to clustered computing systems. The disclosed techniques for event notification exploit the characteristics of a clustered computing system and the characteristics of event notification in order to provide efficient event notification in clustered computing environments.

    摘要翻译: 公开了在集群计算环境中的事件通知技术。 所公开的用于事件通知的技术使依赖于事件通知的应用能够透明地移植到集群计算系统。 公开的用于事件通知的技术利用集群计算系统的特征和事件通知的特征,以便在集群计算环境中提供有效的事件通知。

    Cluster database with remote data mirroring
    48.
    发明授权
    Cluster database with remote data mirroring 有权
    具有远程数据镜像的群集数据库

    公开(公告)号:US06859811B1

    公开(公告)日:2005-02-22

    申请号:US10760013

    申请日:2004-01-15

    摘要: A method and apparatus for mirroring data between a plurality of sites is provided. A replication relationship is established between the plurality of sites that include a first site and a second site. A first database server at the first site receives an indication that a write operation could not be successfully mirrored at the second site. In response to the indication, the first database server initiates a membership voting operation by communicating with a quorum device to determine whether the first database server or a second database server associated with the second site should be removed from the replication membership. If it is determined that the second database server associated with the second site should be removed from the replication membership, then the first database server sends a message to indicate that write operations are no longer to be replicated at the second site.

    摘要翻译: 提供了一种用于在多个站点之间镜像数据的方法和装置。 在包括第一站点和第二站点的多个站点之间建立复制关系。 第一个站点上的第一个数据库服务器接收到第二个站点无法成功镜像写入操作的指​​示。 响应于该指示,第一数据库服务器通过与仲裁设备通信来发起成员资格投票操作,以确定是否应该从复制成员资格中移除与第二站点相关联的第一数据库服务器或第二数据库服务器。 如果确定应该从复制成员身份中删除与第二站点相关联的第二数据库服务器,则第一数据库服务器发送消息以指示不再在第二站点复制写入操作。

    Conditional data access after database system failure
    49.
    发明申请
    Conditional data access after database system failure 有权
    数据库系统故障后的条件数据访问

    公开(公告)号:US20050022047A1

    公开(公告)日:2005-01-27

    申请号:US10624242

    申请日:2003-07-21

    IPC分类号: G06F11/00 G06F11/14 G06F17/30

    CPC分类号: G06F17/30362 G06F11/1471

    摘要: A method of operation within a data processing system that includes a plurality of processing nodes each having access to a set of shared resources. Failure of one of the processing nodes is detected, followed by receipt of a request to access a first resource of the set of shared resources. Access to the first resource is granted if the failed node was not responsible for controlling access to the first resource and did not have exclusive access to the first resource when the failure was detected.

    摘要翻译: 一种在数据处理系统内的操作方法,其包括多个处理节点,每个处理节点都可以访问一组共享资源。 检测到处理节点之一的故障,随后接收访问该组共享资源的第一资源的请求。 如果故障节点不负责控制对第一个资源的访问,并且在检测到故障时没有对第一个资源的独占访问,则授予对第一个资源的访问权限。

    Sequence event processing using append-only tables
    50.
    发明授权
    Sequence event processing using append-only tables 有权
    使用append-only表进行序列事件处理

    公开(公告)号:US08131696B2

    公开(公告)日:2012-03-06

    申请号:US11638737

    申请日:2006-12-13

    IPC分类号: G06F7/00

    CPC分类号: G06F11/28 G06F9/542

    摘要: Techniques for processing events are provided. In one embodiment, a plurality of records is received. The plurality of records is generated by one or more computer systems and represents a plurality of events that have occurred in these computer systems. The plurality of events is processed, where processing the plurality of events comprises storing the plurality of records in an append-only sequence. The append-only sequence is a storage representation of the plurality of events that allows only appending new records that represent new events but does not allow modifying and deleting existing records that represent already existing events. One or more expressions are then evaluated based on the plurality of records that are stored in the append-only sequence.

    摘要翻译: 提供了处理事件的技术。 在一个实施例中,接收多个记录。 多个记录由一个或多个计算机系统生成并且表示在这些计算机系统中发生的多个事件。 处理多个事件,其中处理多个事件包括以仅追加序列存储多个记录。 仅追加序列是多个事件的存储表示,其仅允许附加表示新事件的新记录,但不允许修改和删除表示已经存在的事件的现有记录。 然后基于存储在仅追加序列中的多个记录来评估一个或多个表达式。