公开(公告)号：US20060248599A1

公开(公告)日：2006-11-02

申请号：US11212840

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

IPC分类号： G06F17/30 ,  H04L9/32 ,  G06F7/00 ,  G06F7/04 ,  G06K9/00 ,  H03M1/68 ,  H04K1/00 ,  H04L9/00 ,  H04N7/16

CPC分类号： H04L63/10 ,  G06F21/6227 ,  H04L63/102 ,  H04L63/105

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system communicatively connected to a plurality of network domains, each network domain having a level of security, the database system comprises at least one database accessible from all of the plurality of network domains, the database comprising data, each unit of data having a level of security and access control security operable to provide access to a unit of data in the database to a network domain based on the level of security of the network domain and based on the level of security of the unit of data.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统，通信地连接到多个网络域，每个网络域具有安全级别，所述数据库系统包括从所有多个网络域可访问的至少一个数据库，所述数据库包括数据，每个数据单元具有 安全级别和访问控制安全性可操作以基于网络域的安全级别并且基于数据单元的安全级别来向数据库中的数据单元提供访问。

公开(公告)号：US07814076B2

公开(公告)日：2010-10-12

申请号：US11212695

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

IPC分类号： G06F7/00

CPC分类号： G06F21/6227 ,  G06F2221/2101

摘要： A secure database appliance leverages database security in a consistent framework providing consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of database objects, each database object having a level of security, a plurality of factors, each factor representing a characteristic of a user of the database system, at least one database session of the user in the database, the database session having a level of security, the user connected to the database with a network domain, each network domain having a level of security, wherein the database system is operable to grant or deny access to the data to a user based on the factors associated with the user, based on the level of security of the data, based on the level of security of the database session, and based on the level of security of the network domain.

摘要翻译： 安全数据库设备利用一致的框架中的数据库安全性，除了基于用户和基于角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括多个数据库对象，每个数据库对象具有安全级别，多个因素，表示数据库系统的用户的特征的每个因素，数据库中用户的至少一个数据库会话， 数据库会话具有安全级别，用户使用网络域连接到数据库，每个网络域具有安全级别，其中数据库系统可操作以基于相关因素向用户授予或拒绝对用户的访问 与用户基于数据安全级别，基于数据库会话的安全级别，并基于网络域的安全级别。

公开(公告)号：US20060248085A1

公开(公告)日：2006-11-02

申请号：US11212695

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

IPC分类号： G06F17/30

CPC分类号： G06F21/6227 ,  G06F2221/2101

摘要： A secure database appliance leverages database security in a consistent framework providwa consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of database objects, each database object having a level of security, a plurality of factors, each factor representing a characteristic of a user of the database system, at least one database session of the user in the database, the database session having a level of security, the user connected to the database with a network domain, each network domain having a level of security, wherein the database system is operable to grant or deny access to the data to a user based on the factors associated with the user, based on the level of security of the data, based on the level of security of the database session, and based on the level of security of the network domain.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和基于角色的访问控制和问责制安全外，还使用强制访问控制来实现一致，灵活和适应性强的安全性。 数据库系统包括多个数据库对象，每个数据库对象具有安全级别，多个因素，表示数据库系统的用户的特征的每个因素，数据库中用户的至少一个数据库会话， 数据库会话具有安全级别，用户使用网络域连接到数据库，每个网络域具有安全级别，其中数据库系统可操作以基于相关因素向用户授予或拒绝对用户的访问 与用户基于数据安全级别，基于数据库会话的安全级别，并基于网络域的安全级别。

公开(公告)号：US08732856B2

公开(公告)日：2014-05-20

申请号：US11212840

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Scott Gaetjen ,  Gail Wright

IPC分类号： G06F7/04

CPC分类号： H04L63/10 ,  G06F21/6227 ,  H04L63/102 ,  H04L63/105

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system communicatively connected to a plurality of network domains, each network domain having a level of security, the database system comprises at least one database accessible from all of the plurality of network domains, the database comprising data, each unit of data having a level of security and access control security operable to provide access to a unit of data in the database to a network domain based on the level of security of the network domain and based on the level of security of the unit of data.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统，通信地连接到多个网络域，每个网络域具有安全级别，所述数据库系统包括从所有多个网络域可访问的至少一个数据库，所述数据库包括数据，每个数据单元具有 安全级别和访问控制安全性可操作以基于网络域的安全级别并且基于数据单元的安全级别来向数据库中的数据单元提供访问。

公开(公告)号：US07593942B2

公开(公告)日：2009-09-22

申请号：US11212663

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

发明人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

IPC分类号： G06F17/30

CPC分类号： G06F21/6218 ,  G06F2221/2101 ,  G06F2221/2113 ,  Y10S707/99939

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises database objects having a level of security, factors representing a characteristic of a user of the database system, rules defining a limitation on operation of the database system by the user based on at least some of the plurality of factors and based on attributes of data to be operated on, including the level of security of the database object, and a plurality of realms defining a privilege of the user relative to a schema, the database system is operable to grant or deny access to data to a user based on the factors, the rules satisfied by the factors and the attributes of the data, and the realm associated with the user.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括具有安全级别的数据库对象，代表数据库系统的用户的特征的因素，用户基于多个因素中的至少一些因素定义对数据库系统的操作的限制的规则，并且基于 要操作的数据的属性，包括数据库对象的安全级别以及定义用户相对于模式的特权的多个领域，数据库系统可操作地授予或拒绝对基于用户的数据的访问 关于因素，数据的因素和属性所满足的规则以及与用户相关的领域。

公开(公告)号：US20080010233A1

公开(公告)日：2008-01-10

申请号：US11212854

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

发明人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

IPC分类号： G06F17/30

CPC分类号： G06F21/6227

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of datasets, each dataset including a plurality of data, and a plurality of database objects, each object having a security label comprising a security classification of the object, at least one database session, the database session having a security label indicating a security classification of the database session, wherein, the database system is operable to allow or deny access to data to a database session based on a security label of a database object and on a security label of the database session.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括多个数据集，每个数据集包括多个数据，以及多个数据库对象，每个对象具有包括对象的安全分类的安全标签，至少一个数据库会话，数据库会话具有安全性 指示数据库会话的安全分类的标签，其中，数据库系统可操作以基于数据库对象的安全标签和数据库会话的安全标签来允许或拒绝对数据库会话的访问。

公开(公告)号：US07831570B2

公开(公告)日：2010-11-09

申请号：US11212854

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

发明人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

IPC分类号： G06F7/00

CPC分类号： G06F21/6227

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of datasets, each dataset including a plurality of data, and a plurality of database objects, each object having a security label comprising a security classification of the object, at least one database session, the database session having a security label indicating a security classification of the database session, wherein, the database system is operable to allow or deny access to data to a database session based on a security label of a database object and on a security label of the database session.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括多个数据集，每个数据集包括多个数据，以及多个数据库对象，每个对象具有包括对象的安全分类的安全标签，至少一个数据库会话，数据库会话具有安全性 指示数据库会话的安全分类的标签，其中，数据库系统可操作以基于数据库对象的安全标签和数据库会话的安全标签来允许或拒绝对数据库会话的访问。

公开(公告)号：US20060248083A1

公开(公告)日：2006-11-02

申请号：US11212663

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

发明人： Patrick Sack ,  Edward Austin ,  Scott Gaetjen

IPC分类号： G06F17/30

CPC分类号： G06F21/6218 ,  G06F2221/2101 ,  G06F2221/2113 ,  Y10S707/99939

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises database objects having a level of security, factors representing a characteristic of a user of the database system, rules defining a limitation on operation of the database system by the user based on at least some of the plurality of factors and based on attributes of data to be operated on, including the level of security of the database object, and a plurality of realms defining a privilege of the user relative to a schema, the database system is operable to grant or deny access to data to a user based on the factors, the rules satisfied by the factors and the attributes of the data, and the realm associated with the user.

公开(公告)号：US07814075B2

公开(公告)日：2010-10-12

申请号：US11212669

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Kenton Davis

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Kenton Davis

IPC分类号： G06F7/00

CPC分类号： G06F21/6227 ,  G06F2221/2101 ,  G06F2221/2113

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of database objects, each database object having a level of security, a plurality of factors, each factor representing a characteristic of a user of the database system, at least one database session of the user in the database, the database session having a level of security, the user connected to the database with a network domain, each network domain having a level of security, wherein the database system is operable to grant or deny access to the data to a user based on the factors associated with the user, based on the level of security of the data, based on the level of security of the database session, and based on the level of security of the network domain.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括多个数据库对象，每个数据库对象具有安全级别，多个因素，表示数据库系统的用户的特征的每个因素，数据库中用户的至少一个数据库会话， 数据库会话具有安全级别，用户使用网络域连接到数据库，每个网络域具有安全级别，其中数据库系统可操作以基于相关因素向用户授予或拒绝对用户的访问 与用户基于数据安全级别，基于数据库会话的安全级别，并基于网络域的安全级别。

公开(公告)号：US20060248084A1

公开(公告)日：2006-11-02

申请号：US11212669

申请日：2005-08-29

申请人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Kenton Davis

发明人： Patrick Sack ,  Edward Austin ,  Jack Brinson ,  Kenton Davis

IPC分类号： G06F17/30

CPC分类号： G06F21/6227 ,  G06F2221/2101 ,  G06F2221/2113

摘要： A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system comprises a plurality of database objects, each database object having a level of security, a plurality of factors, each factor representing a characteristic of a user of the database system, at least one database session of the user in the database, the database session having a level of security, the user connected to the database with a network domain, each network domain having a level of security, wherein the database system is operable to grant or deny access to the data to a user based on the factors associated with the user, based on the level of security of the data, based on the level of security of the database session, and based on the level of security of the network domain.

摘要翻译： 安全数据库设备利用一致框架中的数据库安全性，除了基于用户和角色的访问控制和问责制安全外，还使用强制访问控制来提供一致，灵活和适应性强的安全性。 数据库系统包括多个数据库对象，每个数据库对象具有安全级别，多个因素，表示数据库系统的用户的特征的每个因素，数据库中用户的至少一个数据库会话， 数据库会话具有安全级别，用户使用网络域连接到数据库，每个网络域具有安全级别，其中数据库系统可操作以基于相关因素向用户授予或拒绝对用户的访问 与用户基于数据安全级别，基于数据库会话的安全级别，并基于网络域的安全级别。