High run-time performance method for setting ACL rule for content management security
    1.
    发明授权
    High run-time performance method for setting ACL rule for content management security 失效
    用于设置内容管理安全性的ACL规则的高运行时性能方法

    公开(公告)号:US07478094B2

    公开(公告)日:2009-01-13

    申请号:US10459078

    申请日:2003-06-11

    申请人: Mang-Rong Ho Tawei Hu

    发明人: Mang-Rong Ho Tawei Hu

    摘要: A method providing a high performance access control list. The preferred embodiments operate in a computer network having a plurality of users of the network and comprising a database management system and a content management system controlling access to a plurality of entities shareable by the users of the network, the content management system using an access control list table having group privilege rules and user privilege rules for controlling access to the entities. A high performance ACL method is provided, the method comprising providing a run-time compiled ACL table, wherein the compiled ACL table provides resolved privilege rules for each of the users at run-time, and using the compiled ACL table, the content management system accessing user-selected ones of the entities based on the resolved privilege rules.

    摘要翻译: 一种提供高性能访问控制列表的方法。 优选实施例在具有网络的多个用户的计算机网络中操作,并且包括数据库管理系统和控制对由网络的用户共享的多个实体的访问的内容管理系统,使用访问控制的内容管理系统 列表具有用于控制对实体的访问的组特权规则和用户权限规则。 提供了一种高性能ACL方法,该方法包括提供运行时编译的ACL表,其中编译的ACL表在运行时为每个用户提供解决的权限规则,并且使用编译的ACL表,内容管理系统 基于解决的权限规则访问用户选择的实体。

    System and method for incremental refresh of a compiled access control table in a content management system
    2.
    发明授权
    System and method for incremental refresh of a compiled access control table in a content management system 有权
    用于在内容管理系统中增量刷新编译的访问控制表的系统和方法

    公开(公告)号:US07284265B2

    公开(公告)日:2007-10-16

    申请号:US10131659

    申请日:2002-04-23

    IPC分类号: G06F17/30 H04L9/32

    CPC分类号: G06F21/6218

    摘要: System and method for authorizing access to an entity by a user, by binding an access control list to each entity; specifying for the user a set of user privileges; intersecting the access control list and set of user privileges in a compiled ACL table; incrementally refreshing the compiled ACL table responsive to run time modification of relevant tables containing the access control list and set of user privileges; and referencing the compiled access control list to authorize a user request to access an entity.

    摘要翻译: 通过将访问控制列表绑定到每个实体来授权用户访问实体的系统和方法; 为用户指定一组用户权限; 与访问控制列表和编译的ACL表中的用户权限集相交; 响应于包含访问控制列表和一组用户权限的相关表的运行时间修改,逐渐刷新编译的ACL表; 并引用编译的访问控制列表来授权访问实体的用户请求。

    Distributed storage management system having a cache server and method
therefor
    4.
    发明授权
    Distributed storage management system having a cache server and method therefor 失效
    具有缓存服务器的分布式存储管理系统及其方法

    公开(公告)号:US5896506A

    公开(公告)日:1999-04-20

    申请号:US656441

    申请日:1996-05-31

    IPC分类号: G06F17/30 G06F13/38 G06F15/17

    CPC分类号: G06F17/30067

    摘要: The present invention is directed to a method and system for storing and managing objects, such as binary large objects (blobs) in a digital library system which includes a plurality of clients, an object server for storing an object, a cache server for storing a copy of the object, and a centralized server for storing information identifying the object as being stored in the object server and associating one or more of the clients with the cache server, in which one of the clients, as a requesting client, requests retrieval of an object, a copy of the requested object is sent from the cache server to the requesting client if the object is stored in said cache server, and a copy of said object is sent from the object server to said requesting client if the object is not stored in the cache server; and a copy of the requested object is sent from the object server to the cache server after the object server sends the object to the client, in which the object sent to the client is made available to the client regardless of whether sending of the copy of the object to the cache server is completed.

    摘要翻译: 本发明涉及用于在数字图书馆系统中存储和管理诸如二进制大对象(blob)的对象的方法和系统,所述数字图书馆系统包括多个客户端,用于存储对象的对象服务器,用于存储对象的高速缓存服务器 对象的副本以及用于存储标识被存储在对象服务器中的对象的信息并将一个或多个客户端与高速缓存服务器相关联的集中式服务器,其中作为请求客户端的客户端之一请求检索 如果对象存储在所述缓存服务器中,则所请求对象的副本从缓存服务器发送到请求客户端,并且如果对象不是,则将对象服务器的副本从对象服务器发送到所述请求客户端 存储在缓存服务器中; 并且在对象服务器将对象发送到客户端之后,将所请求的对象的副本从对象服务器发送到缓存服务器,其中发送给客户端的对象可用于客户端,而不管是否发送副本 缓存服务器的对象完成。

    Method for implementing access control for queries to a content management system
    5.
    发明授权
    Method for implementing access control for queries to a content management system 失效
    用于实现对内容管理系统的查询的访问控制的方法

    公开(公告)号:US07392246B2

    公开(公告)日:2008-06-24

    申请号:US10367086

    申请日:2003-02-14

    IPC分类号: G06F17/30

    摘要: A method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

    摘要翻译: 一种生成实现存储在库服务器中的访问控制规则的SQL子表达式的方法。 然后,SQL子表达式与从应用程序接口(API)传递的SQL合并。 访问控制检查机制在内容管理系统的服务器端实现。 在此客户端/服务器环境中,查询SQL语句分为两层:API(客户端)层和服务器层。 API将查询字符串发送到底层存储过程。 存储过程然后根据库服务器的配置参数生成访问控制逻辑。 该访问控制逻辑被动态添加到由API发送的查询字符串中。 存储过程准备,构建并执行此新查询字符串作为动态SQL语句。

    Method for delegation of administrative operations in user enrollment tasks
    8.
    发明授权
    Method for delegation of administrative operations in user enrollment tasks 失效
    在用户注册任务中委派管理操作的方法

    公开(公告)号:US07533157B2

    公开(公告)日:2009-05-12

    申请号:US10327329

    申请日:2002-12-24

    摘要: A method of controlling access in a content management system includes defining a domain among a plurality of domains for the content management system and designating a domain administrator for the domain. This enables the domain administrator to perform administrative tasks within the domain without revealing or affecting information in other domains of the content management system. For example, a domain administrator can view user information only for users associated with that domain. The domain administrator also can associate a user with only the defined domain, thereby limiting the user's access to information in the system to information associated with the domain.

    摘要翻译: 一种在内容管理系统中控制访问的方法包括在内容管理系统的多个域中定义域,并指定域的域管理员。 这使得域管理员能够在域内执行管理任务,而不会泄露或影响内容管理系统其他域中的信息。 例如,域管理员只能查看与该域关联的用户的用户信息。 域管理员还可以将用户仅与定义的域相关联,从而将用户对系统中的信息的访问限制为与该域相关联的信息。

    AUTOFOLDERING PROCESS IN CONTENT MANAGEMENT
    9.
    发明申请
    AUTOFOLDERING PROCESS IN CONTENT MANAGEMENT 审中-公开
    内容管理中的自动化过程

    公开(公告)号:US20090049078A1

    公开(公告)日:2009-02-19

    申请号:US12202294

    申请日:2008-08-31

    IPC分类号: G06F17/30

    CPC分类号: G06F16/93

    摘要: A system, and program product for managing the creation, retrieval, editing or distribution of content by creating a folder and filing the folder in a library on a selected server. This is accomplished by first creating an autofoldering configuration entry in an Auto Link table. Accomplishment of this step results in returning target item types and an auto folder structure. This auto folder structure contains target and source item type IDs. The next step is fetching a next set of target item type attribute IDs, and looping through item types from the auto folder structure, searching for a target folder for each target item type from the auto folder structure. A link is invoked to a folder for each target item found; and a target folder is created if no target folders are found.

    摘要翻译: 一种系统和程序产品,用于通过创建文件夹以及在所选择的服务器的库中归档该文件夹来管理内容的创建,检索,编辑或分发。 这是通过首先在自动链接表中创建自动文件夹配置条目来实现的。 完成此步骤将导致返回目标项目类型和自动文件夹结构。 此自动文件夹结构包含目标和源项目类型ID。 下一步是获取下一组目标项目类型属性ID,并从自动文件夹结构中循环选择项目类型,从自动文件夹结构中搜索每个目标项目类型的目标文件夹。 将链接调用到找到的每个目标项目的文件夹中; 并且如果没有找到目标文件夹,则创建目标文件夹。