Two phase intermediate query security using access control
    2.
    发明授权
    Two phase intermediate query security using access control 失效
    两阶段中间查询安全使用访问控制

    公开(公告)号:US07171413B2

    公开(公告)日:2007-01-30

    申请号:US10651892

    申请日:2003-08-29

    IPC分类号: G06F17/30

    摘要: A method, system and article of manufacture for two phase intermediate query security using access control. A networked client-server computer system having a plurality of users of the client-server system and including software performing database queries via a DBMS for users of the system implements the method. The method includes receiving a query string from one of the users by the client system, the query string including references to database objects. The received query string is transformed by the client system to an intermediate query string, and a first phase query security is performed by the client system including identifying the referenced database objects and inserting a security marker into the intermediate query string for each respective identified database object, and sending the intermediate query string to the server system. Access control checks are performed by the server system on the inserted security markers in the intermediate query string, and the inserted security markers are replaced with corresponding DBMS code to enforce access control.

    摘要翻译: 一种使用访问控制的两阶段中间查询安全性的方法,系统和制造。 具有客户机 - 服务器系统的多个用户并且包括通过用于该系统的用户的DBMS执行数据库查询的软件的联网的客户端 - 服务器计算机系统实现该方法。 该方法包括由客户端系统从一个用户接收查询字符串,该查询字符串包括对数据库对象的引用。 所接收的查询字符串由客户端系统转换为中间查询字符串,并且客户端系统执行第一阶段查询安全性,包括识别引用的数据库对象,并将安全标记插入到每个相应的标识数据库对象的中间查询字符串中 ,并将中间查询字符串发送到服务器系统。 访问控制检查由服务器系统在中间查询字符串中插入的安全标记执行,插入的安全标记将替换为相应的DBMS代码,以实施访问控制。

    Method and system for managing object types for objects defined externally to the system
    5.
    发明授权
    Method and system for managing object types for objects defined externally to the system 失效
    用于管理系统外部定义对象的对象类型的方法和系统

    公开(公告)号:US06591276B1

    公开(公告)日:2003-07-08

    申请号:US09620924

    申请日:2000-07-21

    IPC分类号: G06F1730

    摘要: A method and system for managing object types for objects which are defined externally to a system is disclosed. In a first aspect, the method and system comprises recording a relationship of an object to an object class within the system and then recording a system-defined super-class of the object class. A plurality of tables are utilized to record the relationship and the system defined super-class. In a second aspect, a method and system for receiving an externally generated object comprises determining that the externally generated object is represented as an object class in one of a base table and a derived table. The method and system further including obtaining a system-defined super-class of the object. The method and system further includes inserting an object class of the object into the derived table with an identifier of the system-defined super-class and a derived table identifier to create a relationship of a system-defined super-class to a user-defined subclass. The method and system further includes inserting an object and its unique identifier into an objects table, thus creating an accepted object. In a third aspect, a method and system for sending an externally generated object by a system comprises receiving a request, for the object. The request includes a tag. The method and system also includes obtaining information based upon the tag from an object table to provide the object in an appropriate format.

    摘要翻译: 公开了一种用于管理在系统外部定义的对象的对象类型的方法和系统。 在第一方面,所述方法和系统包括将对象的关系记录到系统内的对象类,然后记录对象类的系统定义的超类。 利用多个表来记录关系和系统定义的超类。 在第二方面,一种用于接收外部产生的对象的方法和系统包括:确定外部生成的对象在基表和导出表之一中被表示为对象类。 所述方法和系统还包括获得所述对象的系统定义的超类。 所述方法和系统还包括将对象的对象类别插入到具有系统定义的超类的标识符的导出表中,以及派生表标识符,以创建系统定义的超类与用户定义的关系 子类。 该方法和系统还包括将对象及其唯一标识符插入到对象表中,从而创建被接受的对象。 在第三方面,一种用于通过系统发送外部产生的对象的方法和系统包括接收对象的请求。 请求包含一个标签。 方法和系统还包括基于来自对象表的标签获得信息,以适当的格式提供对象。

    Method and system for storing and managing sets of objects
    7.
    发明授权
    Method and system for storing and managing sets of objects 有权
    用于存储和管理对象集的方法和系统

    公开(公告)号:US06611845B1

    公开(公告)日:2003-08-26

    申请号:US09620756

    申请日:2000-07-21

    IPC分类号: G06F1730

    摘要: A system and method for storing and managing sets of objects is disclosed. The method and system comprises providing a plurality of set nodes based upon a defined set of data objects; and associating a plurality of constraint nodes with the plurality of set nodes. The method and system includes providing a plurality of object nodes based upon the objects; and obtaining object metadata from the plurality of object nodes. The method and system further includes associating at least one of the plurality of object nodes with at least one of the plurality of set nodes based upon a criteria and detecting that at least one of the plurality of set nodes has been modified and delivering a notification to at least one constraint node of a plurality of constraint nodes. Each of the plurality of constraint nodes provides constraints on at least one set node. Accordingly, a method and system in accordance with the present invention unifies the storing and managing of sets in order to simplify overall system behavior. The system and method uses an attributed, directed graph model to store object metadata, object-within-set metadata, and set constraints. By using this model, no special cases exist when an object belongs to just one set or hundreds of sets. The operations required to maintain the graph model are the same in every case. The operations required to maintain the metadata and constraints are also the same in every case. The entire model is therefore a unified and simplified system.

    摘要翻译: 公开了一种用于存储和管理对象集合的系统和方法。 该方法和系统包括:基于定义的一组数据对象来提供多个集合节点; 以及将多个约束节点与所述多个集合节点相关联。 该方法和系统包括:基于对象提供多个对象节点; 以及从所述多个对象节点获取对象元数据。 所述方法和系统还包括基于标准将所述多个对象节点中的至少一个与所述多个集合节点中的至少一个相关联,并且检测所述多个集合节点中的至少一个已被修改并且向 多个约束节点中的至少一个约束节点。 多个约束节点中的每一个为至少一个集合节点提供约束。 因此,根据本发明的方法和系统统一了集合的存储和管理,以简化整个系统行为。 系统和方法使用归因的有向图模型来存储对象元数据,对象内部元数据和集合约束。 通过使用该模型,当对象仅属于一个集合或数百个集合时,不存在特殊情况。 维护图形模型所需的操作在每种情况下是相同的。 维护元数据和约束所需的操作在每种情况下也是一样的。 因此,整个模型是一个统一和简化的系统。