CN107111720B - 用于控制对于对象的访问的方法、介质、设备和装置 - Google Patents

用于控制对于对象的访问的方法、介质、设备和装置 Download PDF

Info

Publication number
CN107111720B
CN107111720B CN201580053689.7A CN201580053689A CN107111720B CN 107111720 B CN107111720 B CN 107111720B CN 201580053689 A CN201580053689 A CN 201580053689A CN 107111720 B CN107111720 B CN 107111720B
Authority
CN
China
Prior art keywords
value
values
user
administrator
tuples
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201580053689.7A
Other languages
English (en)
Chinese (zh)
Other versions
CN107111720A (zh
Inventor
R·N·瓦达潘德施瓦拉
B·斯瑞尼瓦萨
G·纳古拉空达
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Oracle Financial Services Software Ltd
Original Assignee
Oracle Financial Services Software Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Oracle Financial Services Software Ltd filed Critical Oracle Financial Services Software Ltd
Priority claimed from PCT/IB2015/056172 external-priority patent/WO2016055878A1/en
Publication of CN107111720A publication Critical patent/CN107111720A/zh
Application granted granted Critical
Publication of CN107111720B publication Critical patent/CN107111720B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104—Grouping of entities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2145—Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Automation & Control Theory (AREA)
  • Databases & Information Systems (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)
CN201580053689.7A 2014-10-08 2015-08-13 用于控制对于对象的访问的方法、介质、设备和装置 Active CN107111720B (zh)

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
IN5056CH2014 2014-10-08
IN5056/CHE/2014 2014-10-08
US14/628,308 US9935964B2 (en) 2014-10-08 2015-02-23 Access control for objects having attributes defined against hierarchically organized domains containing fixed number of values
US14/628,308 2015-02-23
PCT/IB2015/056172 WO2016055878A1 (en) 2014-10-08 2015-08-13 Access control for objects having attributes defined against hierarchically organized domains containing fixed number of values

Publications (2)

Publication Number Publication Date
CN107111720A CN107111720A (zh) 2017-08-29
CN107111720B true CN107111720B (zh) 2020-12-08

Family

ID=55655640

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201580053689.7A Active CN107111720B (zh) 2014-10-08 2015-08-13 用于控制对于对象的访问的方法、介质、设备和装置

Country Status (3)

Country Link
US (2) US9935964B2 (enExample)
JP (1) JP6578356B2 (enExample)
CN (1) CN107111720B (enExample)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11088834B2 (en) * 2015-04-28 2021-08-10 Palo Alto Research Center Incorporated System for privacy-preserving monetization of big data and method for using the same
CN105701416B (zh) * 2016-01-11 2019-04-05 华为技术有限公司 强制访问控制方法、装置和物理主机
CN108536755B (zh) * 2018-03-14 2021-02-12 海通证券股份有限公司 一种信息标签的管理方法及管理系统
US11513815B1 (en) 2019-05-24 2022-11-29 Hiro Systems Pbc Defining data storage within smart contracts
US11657391B1 (en) 2019-05-24 2023-05-23 Hiro Systems Pbc System and method for invoking smart contracts
US10699269B1 (en) * 2019-05-24 2020-06-30 Blockstack Pbc System and method for smart contract publishing
US12169683B2 (en) 2021-11-19 2024-12-17 Oracle Financial Services Software Limited Automatic two-way generation and synchronization of notebook and pipeline
US12131139B2 (en) 2021-11-22 2024-10-29 Oracle Financial Services Software Limited Unified pipeline flow with common and phase-specific paths
US20250131120A1 (en) * 2023-10-23 2025-04-24 Oracle International Corporation Compsitional reasoning of information flow in scripted query language

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020095490A1 (en) * 2000-09-28 2002-07-18 Barker Geoffrey T. System and method for providing configurable security monitoring utilizing an integrated information portal
US20060059211A1 (en) * 2004-09-10 2006-03-16 Canon Kabushiki Kaisha Information processing method and information processing apparatus
US20060143144A1 (en) * 2003-10-10 2006-06-29 Speeter Thomas H Rule sets for a configuration management system
US20080134286A1 (en) * 2000-04-19 2008-06-05 Amdur Eugene Computer system security service
US20080133530A1 (en) * 2006-12-01 2008-06-05 Cisco Technology, Inc. Instance-based authorization utilizing query augmentation
US20090018996A1 (en) * 2007-01-26 2009-01-15 Herbert Dennis Hunt Cross-category view of a dataset using an analytic platform
CN101523403A (zh) * 2006-10-19 2009-09-02 国际商业机器公司 用于在Web服务环境中同步策略控制的方法和系统
CN102207955A (zh) * 2008-06-05 2011-10-05 国际商业机器公司 使用加权搜索树的基于上下文的安全策略评估
CN102959922A (zh) * 2010-06-25 2013-03-06 瑞典爱立信有限公司 用于授权临时访问电子内容的方法、服务器和系统

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5978796A (en) 1997-06-30 1999-11-02 International Business Machines Corporation Accessing multi-dimensional data by mapping dense data blocks to rows in a relational database
US6016499A (en) * 1997-07-21 2000-01-18 Novell, Inc. System and method for accessing a directory services respository
US7743074B1 (en) * 2000-04-05 2010-06-22 Microsoft Corporation Context aware systems and methods utilizing hierarchical tree structures
EP1195694A3 (en) 2000-10-06 2006-01-11 International Business Machines Corporation Automatic determination of OLAP Cube dimensions
US6985902B2 (en) * 2001-02-05 2006-01-10 Threewide.Com, Inc. Method, system and apparatus for creating and accessing a hierarchical database in a format optimally suited to real estate listings
US8635221B2 (en) * 2002-12-20 2014-01-21 International Business Machines Corporation Method, system, and program product for managing access to data items in a database
JP2005216188A (ja) * 2004-01-30 2005-08-11 Canon Inc 文書管理システム
US7707078B2 (en) 2004-03-26 2010-04-27 Microsoft Corporation Method and apparatus for mapping dimension-based accounting entries to allow segment-based reporting
US8234704B2 (en) * 2006-08-14 2012-07-31 Quantum Security, Inc. Physical access control and security monitoring system utilizing a normalized data format
US8931055B2 (en) 2006-08-31 2015-01-06 Accenture Global Services Gmbh Enterprise entitlement framework
US7836080B2 (en) * 2006-12-22 2010-11-16 International Business Machines Corporation Using an access control list rule to generate an access control list for a document included in a file plan
US7716233B2 (en) 2007-05-23 2010-05-11 Business Objects Software, Ltd. System and method for processing queries for combined hierarchical dimensions
US8166071B1 (en) * 2008-05-22 2012-04-24 Informatica Corporation System and method for efficiently securing enterprise data resources
US8495007B2 (en) 2008-08-28 2013-07-23 Red Hat, Inc. Systems and methods for hierarchical aggregation of multi-dimensional data sources
JP4571998B2 (ja) 2009-03-16 2010-10-27 株式会社ミスミ コンビネーションモジュール提供装置
JP5806894B2 (ja) * 2011-09-16 2015-11-10 株式会社日立ソリューションズ東日本 アクセス管理装置およびアクセス管理プログラム
US8793489B2 (en) * 2012-03-01 2014-07-29 Humanconcepts, Llc Method and system for controlling data access to organizational data maintained in hierarchical
US8904551B2 (en) * 2012-11-07 2014-12-02 International Business Machines Corporation Control of access to files
US9111104B2 (en) * 2013-03-29 2015-08-18 Jive Software, Inc. Entitlements determination via access control lists

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080134286A1 (en) * 2000-04-19 2008-06-05 Amdur Eugene Computer system security service
US20020095490A1 (en) * 2000-09-28 2002-07-18 Barker Geoffrey T. System and method for providing configurable security monitoring utilizing an integrated information portal
US20060143144A1 (en) * 2003-10-10 2006-06-29 Speeter Thomas H Rule sets for a configuration management system
US20060059211A1 (en) * 2004-09-10 2006-03-16 Canon Kabushiki Kaisha Information processing method and information processing apparatus
CN101523403A (zh) * 2006-10-19 2009-09-02 国际商业机器公司 用于在Web服务环境中同步策略控制的方法和系统
US20080133530A1 (en) * 2006-12-01 2008-06-05 Cisco Technology, Inc. Instance-based authorization utilizing query augmentation
US20090018996A1 (en) * 2007-01-26 2009-01-15 Herbert Dennis Hunt Cross-category view of a dataset using an analytic platform
CN102207955A (zh) * 2008-06-05 2011-10-05 国际商业机器公司 使用加权搜索树的基于上下文的安全策略评估
CN102959922A (zh) * 2010-06-25 2013-03-06 瑞典爱立信有限公司 用于授权临时访问电子内容的方法、服务器和系统

Also Published As

Publication number Publication date
US10645090B2 (en) 2020-05-05
US20160104004A1 (en) 2016-04-14
JP2017531877A (ja) 2017-10-26
US9935964B2 (en) 2018-04-03
CN107111720A (zh) 2017-08-29
JP6578356B2 (ja) 2019-09-18
US20180167398A1 (en) 2018-06-14

Similar Documents

Publication Publication Date Title
CN107111720B (zh) 用于控制对于对象的访问的方法、介质、设备和装置
US9576020B1 (en) Methods, systems, and computer program products for storing graph-oriented data on a column-oriented database
US10754562B2 (en) Key value based block device
US20210273972A1 (en) Dynamic Hierarchical Tagging System and Method
US10776336B2 (en) Dynamic creation and maintenance of multi-column custom indexes for efficient data management in an on-demand services environment
EP2580691B1 (en) Scalable rendering of large spatial databases
US8065484B2 (en) Enhanced access to data available in a cache
JP6347588B2 (ja) 特定のデータ・ストアに安全にアクセスするためのプロセッサ実装方法、データ・ストアを安全にするためのコンピュータ・プログラムおよびコンピュータ・システム（データにアクセスするためのコンテキストベース・セキュリティ・スクリーニング）
CN105745651B (zh) 用于管理可写搜索结果的技术
JP2005346717A (ja) データソースを発見して接続するための方法、システムおよび装置
US11500873B2 (en) Methods and systems for searching directory access groups
US10102219B2 (en) Rendering high resolution images using image tiling and hierarchical image tile storage structures
CN108268614B (zh) 一种森林资源空间数据的分布式管理方法
US11093541B2 (en) Transforming an ontology query to an SQL query
JP2017535842A (ja) データソースからデータターゲットにデータを転送するためのインポート手順の呼出しの単純化
US8924273B2 (en) Simplifying migration from one financial consolidation application to another
US8782777B2 (en) Use of synthetic context-based objects to secure data stores
US11657064B2 (en) Componentized dashboards
CN113190864A (zh) 基于权限配置的数据访问方法、装置、系统、存储介质
CN115795437A (zh) 数据处理方法及装置、终端设备、计算机可读存储介质
CN115269527B (zh) 向客户共享数据共享度量
CN105224596A (zh) 一种访问数据的方法及装置
WO2016055878A1 (en) Access control for objects having attributes defined against hierarchically organized domains containing fixed number of values
US12462061B2 (en) Knowledge encoding based mapping of knowledge objects for data compliance
US20240193295A1 (en) Scalable Dataset Sharing With Linked Datasets

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant