CN100336059C - 智能使用用户数据以抢先阻止违反访问控制的查询的执行 - Google Patents

智能使用用户数据以抢先阻止违反访问控制的查询的执行 Download PDF

Info

Publication number
CN100336059C
CN100336059C CNB038236370A CN03823637A CN100336059C CN 100336059 C CN100336059 C CN 100336059C CN B038236370 A CNB038236370 A CN B038236370A CN 03823637 A CN03823637 A CN 03823637A CN 100336059 C CN100336059 C CN 100336059C
Authority
CN
China
Prior art keywords
security
field
query
user
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB038236370A
Other languages
English (en)
Chinese (zh)
Other versions
CN1688977A (zh
Inventor
理查德·D·德廷杰
理查德·J·史蒂文斯
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
International Business Machines Corp
Original Assignee
International Business Machines Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by International Business Machines Corp filed Critical International Business Machines Corp
Publication of CN1688977A publication Critical patent/CN1688977A/zh
Application granted granted Critical
Publication of CN100336059C publication Critical patent/CN100336059C/zh
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Bioethics (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Quality & Reliability (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)
CNB038236370A 2002-10-03 2003-09-25 智能使用用户数据以抢先阻止违反访问控制的查询的执行 Expired - Fee Related CN100336059C (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US10/264,243 2002-10-03
US10/264,243 US7698441B2 (en) 2002-10-03 2002-10-03 Intelligent use of user data to pre-emptively prevent execution of a query violating access controls

Publications (2)

Publication Number Publication Date
CN1688977A CN1688977A (zh) 2005-10-26
CN100336059C true CN100336059C (zh) 2007-09-05

Family

ID=32042191

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB038236370A Expired - Fee Related CN100336059C (zh) 2002-10-03 2003-09-25 智能使用用户数据以抢先阻止违反访问控制的查询的执行

Country Status (9)

Country Link
US (1) US7698441B2 (enExample)
EP (1) EP1550038A4 (enExample)
JP (1) JP4716729B2 (enExample)
KR (1) KR100737300B1 (enExample)
CN (1) CN100336059C (enExample)
AU (1) AU2003278954A1 (enExample)
CA (1) CA2498708C (enExample)
TW (1) TWI234379B (enExample)
WO (1) WO2004034186A2 (enExample)

Families Citing this family (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6996558B2 (en) 2002-02-26 2006-02-07 International Business Machines Corporation Application portability and extensibility through database schema and query abstraction
US7900133B2 (en) 2003-12-09 2011-03-01 International Business Machines Corporation Annotation structure type determination
US7711750B1 (en) * 2004-02-11 2010-05-04 Microsoft Corporation Systems and methods that specify row level database security
US7661141B2 (en) * 2004-02-11 2010-02-09 Microsoft Corporation Systems and methods that optimize row level database security
US20050289342A1 (en) * 2004-06-28 2005-12-29 Oracle International Corporation Column relevant data security label
US20060294066A1 (en) * 2005-06-23 2006-12-28 International Business Machines Corporation Visual display of information using historical condition support and event profiles
US8577684B2 (en) * 2005-07-13 2013-11-05 Intellisist, Inc. Selective security masking within recorded speech utilizing speech recognition techniques
US8321387B2 (en) * 2005-07-28 2012-11-27 International Business Machines Corporation Restricting access to sensitive data
US7444332B2 (en) * 2005-11-10 2008-10-28 International Business Machines Corporation Strict validation of inference rule based on abstraction environment
US7440945B2 (en) 2005-11-10 2008-10-21 International Business Machines Corporation Dynamic discovery of abstract rule set required inputs
US7756843B1 (en) * 2006-05-25 2010-07-13 Juniper Networks, Inc. Identifying and processing confidential information on network endpoints
US8433915B2 (en) 2006-06-28 2013-04-30 Intellisist, Inc. Selective security masking within recorded speech
GB0625641D0 (en) * 2006-12-21 2007-01-31 Symbian Software Ltd Dynamic filtering for partially trusted servers
TWI382319B (zh) * 2006-12-22 2013-01-11 Hon Hai Prec Ind Co Ltd 多任務解析系統及方法
US20090019424A1 (en) * 2007-07-12 2009-01-15 Sap Ag System and method of application context driven access restriction
KR101039698B1 (ko) * 2009-06-12 2011-06-08 (주)소만사 애플리케이션을 경유한 ｄｂ접근을 보호하기 위한 데이터베이스 보안 시스템, 서버 및 방법
US10162851B2 (en) * 2010-04-19 2018-12-25 Salesforce.Com, Inc. Methods and systems for performing cross store joins in a multi-tenant store
US20110264688A1 (en) * 2010-04-26 2011-10-27 International Business Machines Corporation Peer to peer (p2p) data licensing model in a distributed abstract query environment
US8266170B2 (en) 2010-04-26 2012-09-11 International Business Machines Corporation Peer to peer (P2P) missing fields and field valuation feedback
KR101104845B1 (ko) * 2010-09-08 2012-01-16 (주)소만사 데이터베이스와 클라이언트 간 ｄｂ ｖｐｎ을 이용한 안전 통신 시스템 및 방법
KR101143998B1 (ko) * 2011-09-20 2012-05-09 주식회사 안철수연구소 데이터베이스 보안 장치 및 방법
US9819798B2 (en) 2013-03-14 2017-11-14 Intellisist, Inc. Computer-implemented system and method for efficiently facilitating appointments within a call center via an automatic call distributor
CN104516882B (zh) * 2013-09-26 2018-02-06 国际商业机器公司 确定sql语句的危害度的方法和设备
US9619581B2 (en) * 2013-12-20 2017-04-11 Microsoft Technology Licensing, Llc Constructing queries for execution over multi-dimensional data structures
US10769122B2 (en) * 2014-03-13 2020-09-08 Ab Initio Technology Llc Specifying and applying logical validation rules to data
US9251221B1 (en) 2014-07-21 2016-02-02 Splunk Inc. Assigning scores to objects based on search query results
CN107430557B (zh) * 2015-02-12 2020-05-15 维萨国际服务协会 多方加密立方体处理设备、方法和系统
US10754978B2 (en) 2016-07-29 2020-08-25 Intellisist Inc. Computer-implemented system and method for storing and retrieving sensitive information
US11106679B2 (en) 2019-10-30 2021-08-31 Ocient Holdings LLC Enforcement of sets of query rules for access to data supplied by a plurality of data providers
CN109582691B (zh) * 2018-11-15 2023-04-07 百度在线网络技术（北京）有限公司 用于控制数据查询的方法和装置
US11379601B2 (en) * 2019-12-11 2022-07-05 Paypal, Inc. Detection of sensitive database information
US11768916B2 (en) 2019-12-11 2023-09-26 Paypal, Inc. Detection of sensitive database information

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6141754A (en) * 1997-11-28 2000-10-31 International Business Machines Corporation Integrated method and system for controlling information access and distribution
US6226754B1 (en) * 1997-10-10 2001-05-01 Rambus Incorporated Apparatus and method for device timing compensation
US6236996B1 (en) * 1997-10-31 2001-05-22 Sun Microsystems, Inc. System and method for restricting database access to managed object information using a permissions table that specifies access rights to the managed objects
CN1332877A (zh) * 1998-11-30 2002-01-23 联合想象计算机公司 关系数据库管理系统中用于支持动态运行时间对象定义的方法和装置

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5560008A (en) * 1989-05-15 1996-09-24 International Business Machines Corporation Remote authentication and authorization in a distributed data processing system
JPH087709B2 (ja) * 1989-05-15 1996-01-29 インターナシヨナル・ビジネス・マシーンズ・コーポレーシヨン アクセス特権制御方法及びシステム
US5204961A (en) * 1990-06-25 1993-04-20 Digital Equipment Corporation Computer network operating with multilevel hierarchical security with selectable common trust realms and corresponding security protocols
US5023765A (en) * 1990-12-03 1991-06-11 Barton Daniel W Pivotable lamp bracket for linear lighting fixture
JPH0799497B2 (ja) * 1990-12-14 1995-10-25 インターナショナル・ビジネス・マシーンズ・コーポレイション ソフトウェアの使用を管理するための装置及び方法
US5577209A (en) * 1991-07-11 1996-11-19 Itt Corporation Apparatus and method for providing multi-level security for communication among computers and terminals on a network
US5481700A (en) * 1991-09-27 1996-01-02 The Mitre Corporation Apparatus for design of a multilevel secure database management system based on a multilevel logic programming system
US5355474A (en) * 1991-09-27 1994-10-11 Thuraisngham Bhavani M System for multilevel secure database management using a knowledge base with release-based and other security constraints for query, response and update modification
US5572673A (en) * 1993-12-01 1996-11-05 Sybase, Inc. Secure multi-level system for executing stored procedures
US5751949A (en) * 1995-05-23 1998-05-12 Mci Corporation Data security system and method
US5859966A (en) * 1995-10-10 1999-01-12 Data General Corporation Security system for computer systems
US5768532A (en) * 1996-06-17 1998-06-16 International Business Machines Corporation Method and distributed database file system for implementing self-describing distributed file objects
US6226745B1 (en) * 1997-03-21 2001-05-01 Gio Wiederhold Information sharing system and method with requester dependent sharing and security rules
US6085191A (en) * 1997-10-31 2000-07-04 Sun Microsystems, Inc. System and method for providing database access control in a secure distributed network
US6112181A (en) * 1997-11-06 2000-08-29 Intertrust Technologies Corporation Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information
US6272488B1 (en) * 1998-04-01 2001-08-07 International Business Machines Corporation Managing results of federated searches across heterogeneous datastores with a federated collection object
US6487552B1 (en) * 1998-10-05 2002-11-26 Oracle Corporation Database fine-grained access control
US6578037B1 (en) * 1998-10-05 2003-06-10 Oracle Corporation Partitioned access control to a database
TW451143B (en) * 1998-11-05 2001-08-21 Ecomagents Inc Method for controlling access to information
US6745332B1 (en) * 1999-06-29 2004-06-01 Oracle International Corporation Method and apparatus for enabling database privileges
JP3671765B2 (ja) * 1999-09-24 2005-07-13 日本電信電話株式会社 異種情報源問い合わせ変換方法及び装置及び異種情報源問い合わせ変換プログラムを格納した記憶媒体
US7089588B2 (en) * 2000-01-19 2006-08-08 Reynolds And Reynolds Holdings, Inc. Performance path method and apparatus for exchanging data among systems using different data formats
JP2001344147A (ja) * 2000-05-31 2001-12-14 Dainippon Printing Co Ltd 汎用データベースアクセス装置
US6954748B2 (en) * 2002-04-25 2005-10-11 International Business Machines Corporation Remote data access and integration of distributed data sources through data schema and query abstraction

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6226754B1 (en) * 1997-10-10 2001-05-01 Rambus Incorporated Apparatus and method for device timing compensation
US6236996B1 (en) * 1997-10-31 2001-05-22 Sun Microsystems, Inc. System and method for restricting database access to managed object information using a permissions table that specifies access rights to the managed objects
US6141754A (en) * 1997-11-28 2000-10-31 International Business Machines Corporation Integrated method and system for controlling information access and distribution
CN1332877A (zh) * 1998-11-30 2002-01-23 联合想象计算机公司 关系数据库管理系统中用于支持动态运行时间对象定义的方法和装置

Also Published As

Publication number Publication date
CN1688977A (zh) 2005-10-26
US20040068661A1 (en) 2004-04-08
KR100737300B1 (ko) 2007-07-09
TWI234379B (en) 2005-06-11
TW200406113A (en) 2004-04-16
JP2006502494A (ja) 2006-01-19
AU2003278954A8 (en) 2004-05-04
CA2498708C (en) 2011-03-22
US7698441B2 (en) 2010-04-13
AU2003278954A1 (en) 2004-05-04
JP4716729B2 (ja) 2011-07-06
WO2004034186A3 (en) 2004-06-24
WO2004034186A2 (en) 2004-04-22
EP1550038A4 (en) 2009-04-01
CA2498708A1 (en) 2004-04-22
KR20050069995A (ko) 2005-07-05
EP1550038A2 (en) 2005-07-06

Similar Documents

Publication Publication Date Title
CN100336059C (zh) 智能使用用户数据以抢先阻止违反访问控制的查询的执行
CN1768325A (zh) 公开内容的抽象数据库抽象中的规则应用管理
CN101454779B (zh) 基于搜索的应用开发框架
CN1823335A (zh) 抽象数据链接和联接接口
CN1647080A (zh) 多数据库环境中存取数据的方法、计算机程序和计算机
CN100430951C (zh) 向用户/组授予访问控制列表所有权的访问控制系统和方法
US7836078B2 (en) Techniques for managing access to physical data via a data abstraction model
CN1786950A (zh) 处理抽象查询的方法和系统
US8326848B2 (en) Proactive analytic data set reduction via parameter condition injection
US6928554B2 (en) Method of query return data analysis for early warning indicators of possible security exposures
CN1705945A (zh) 全局查询相关属性
CN103329140B (zh) 基于用户隐私偏好创建访问控制策略
CN1759397A (zh) 对数据的函数应用的结果进行结构化索引
CN1698033A (zh) 有效管理企业的可配置组件的系统和方法
CN1725219A (zh) 管理多用户存取预定义查询的系统与方法
US8250093B2 (en) Method and system for utilizing a cache for path-level access control to structured documents stored in a database
CN101847155A (zh) 包括访问受保护的xml数据的xml数据库的管理系统
CN101064641A (zh) 对Web服务资源的基于属性的索引和/或查询方法及系统
US9679031B2 (en) Composing abstract queries for delegated user roles
CN1820451A (zh) 虚拟文件夹和项目共享系统和方法
KR20070073611A (ko) 포커스 데이터에 근거한 동적 인증
CN1729467A (zh) 用于管理来自单个接口的多层次数据的技术

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20070905

Termination date: 20200925