JPH05289924A - Data base management system - Google Patents

Abstract

PURPOSE:To speed up the access processing of shared data by avoiding the concentration of load into an authority information managing part. CONSTITUTION:Respective inquiring processing parts 12a, 12b for evaluating whether a processing request from a user is valid within its access authority or not based upon authority information managed by an authority information managing part 11 are equipped with authority information temporary storage parts 14. Each temporary storage part 14 is provided with a buffer storage function 14a for temporarily storing the authority information read out of the managing part 11 at the time of inquiring access authority from the processing part 12 to the managing part 11, so that the concentration of inquires from respective inquiring processing parts 12a, 12b into the managing part 11 can be avoided.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a database management system for managing data input / output for a database shared by a plurality of users according to the access authority of each user.

[0002]

2. Description of the Related Art In a database, data is usually shared by a plurality of users. Therefore, the database management system that manages the input and output of the data of such a database supports processes such as search, update, delete, and insert for the shared data as processes that each user can execute.

However, it is not preferable that the shared data is carelessly changed (updated, deleted, inserted, etc.) by an unspecified user. Therefore, as described in the reference document (1) shown below, the database management system predetermines the range of processing (that is, access authority) that can be executed on shared data for each user. When the authority information management unit is provided and a processing request for the shared data is received from the user, the processing content included in the processing request is within the range of the access authority set in the authority information management unit. If the access right is within the range, the processing request can be executed.

Reference (1): Japanese Standards Association, "Database Language SQL JIS-X-3005-1990", issued January 1, 1990 FIG. 2 is a database management system for controlling by such access authority. FIG.

Inside the database management system 20, an authority information management unit 21, an inquiry processing unit 22a,
22b and a database access processing unit 23 are provided. Here, the authority information management unit 21 collectively manages information about the access authority of each user to the shared data (that is, the range of processing that can be executed on the shared data), and It also responds to changes in access privileges. The inquiry processing unit 22a and the inquiry processing unit 22b have the same function. These inquiry processing units 22a and 22b receive a processing request from the user for the database, judge whether the processing request is valid based on the information managed by the authority information management unit 21, and make a judgment. The processing for the processing request is performed according to the result. The database access processing unit 23 is a unit that actually controls the input / output of data with respect to shared data, and responds to a processing request for shared data that the inquiry processing units 22a and 22b have determined to be a valid processing request within the access authority. Then, a predetermined data input / output process is executed.

Next, the inquiry processing unit 22a receives a processing request for shared data from one user, and the inquiry processing unit 22b is sent from another user to the authority information itself stored in the authority information management unit 21. Taking a case where a processing request for changing the above is entered as a specific example, the functions of the inquiry processing units 22a and 22b and the flow of processing in the database management system will be described.

FIG. 3 shows the flow of processing when the inquiry processing section 22a receives a processing request for shared data. Note that, in FIG. 2, the broken line arrows indicate the respective processing flows, and the numbers attached to the broken line arrows correspond to the step numbers of the flowchart shown in FIG.

Upon receiving the processing request from the user (step 201), the inquiry processing section 22a first analyzes the processing request to confirm the processing content included in the processing request (step 202). Then, it is determined what processing authority is required to execute the processing request (step 203). Then, based on this determination, the inquiry processing unit 22a notifies the authority information management unit 21 of the processing authority required for the processing request and the identification information of the user, and the processing authority required for the processing request. Inquires of the authority information management unit 21 whether or not the user is within the access authority given to the user (step 2).
04). Then, the authority information management unit 21 responds to this inquiry based on the authority information managed internally.
It is judged whether or not it is within the access authority, and the result of the judgment is returned to the inquiry processing unit 22a which made the inquiry (step 205).

The inquiry processing section 22a selects subsequent processing in response to the reply from the authority information management section 21 (step 206). When the response from the authority information management unit 21 is “outside the range of access authority”, the inquiry processing unit 22a rejects the processing request from the user (step 207) and ends the processing. On the other hand, when the response from the authority information management section 21 is "access authority is within", the inquiry processing section 22a issues a database access request to the database access processing section 23 (step 208). The database access processing unit 23 executes the processing according to the access request from the inquiry processing unit 22a and returns the processing result to the inquiry processing unit 22a (step 209). Then, the inquiry processing unit 22a having received the processing result from the database access processing unit 23 returns the processing result to the user (step 210), and ends the processing.

Even when the inquiry processing unit 22b receives a processing request to change the authority information itself stored in the authority information management unit 21, as in the case of the processing request for shared data, the steps shown in FIG. 201 to 206 are sequentially executed, and when the processing request is outside the range of the access authority, the inquiry processing unit 22b rejects the processing request from the user and ends the processing. However, when the processing request from the user is within the access authority, the inquiry processing unit 22b requests the authority information managing unit 21 to change the authority information managed (reference numeral 22 in FIG. 2).
0). The authority information management unit 21 has an inquiry processing unit 22b.
When the request for changing the authority information is received from the other, the processing for the inquiry about the authority information from the other inquiry processing unit 22a is put on standby. Then, the inquiry processing unit 22b
After executing the change process in response to the request from, the process for the inquiry from the inquiry processing unit 22a that has been waiting is continued.

[0011]

However, the above-mentioned conventional database management system 20 has the following problems.

That is, the database management system is usually configured to have a plurality of inquiry processing units so as to simultaneously receive processing requests from a plurality of users (in the case of FIG. 2, the inquiry processing units are included). 22a, 2
2b is 2 but there are also 3 or more), for example, when processing requests are issued from many users at the same time,
A large number of inquiry processing units simultaneously request the authority information management unit 21 to confirm the authority information. Therefore, the load is concentrated on the authority information management unit 21, and the authority information management unit 2
Since the progress of the processing in each inquiry processing unit is delayed due to the waiting for the reply from 1, the speedup of the access processing to the shared data is impaired.

The present invention has been made in view of the above circumstances, and it is possible to prevent the load from being concentrated on the authority information management unit even when a plurality of users make processing requests at the same time. An object of the present invention is to provide a database management system capable of shortening the waiting time of each inquiry processing unit for waiting for a reply from the authority information management unit and speeding up access processing to shared data.

[0014]

A database management system according to the present invention relates to a database from each user and an authority information management unit that collectively manages authority information that defines the access authority of each user to the database. A plurality of inquiry processing units that receive a processing request, determine whether the processing request is valid based on the authority information managed by the authority information management unit, and perform processing for the processing request according to the determination result. And a database access processing unit that executes an input / output process for shared data in response to a database access request issued when the inquiry processing unit recognizes it as a processing request within the access authority.

Further, each of the inquiry processing units described above is equipped with a privilege information temporary storage unit for temporarily storing and holding a part of the privilege information managed by the privilege information management unit, and the privilege information management unit. Is equipped with an authority change notifying function for notifying the authority information temporary storage unit of each inquiry processing unit when the managed authority information is changed. Further, the above-mentioned authority information temporary storage unit temporarily stores the authority information read from the authority information management unit when the inquiry processing unit inquires of the authority information management unit about the access authority. And an initialization function of discarding the information held by the buffer storage function when the authority information management unit notifies the authority information change.

The inquiry processing unit, when confirming the access authority of the user to the processing request,
First, the authority information held in the authority information temporary storage unit is checked to check the access authority, and only when the authority information not held in the authority information temporary storage unit is needed, the authority information temporary storage unit The inquiry is made to the authority information management unit regarding the insufficient authority information.

[0017]

In the database management system according to the present invention,
Regarding the authority information temporarily stored in the authority information temporary storage unit, the authority information temporary storage unit equipped in the inquiry processing unit functions as a buffer storage device provided between each inquiry processing unit and the authority information management unit. Can be confirmed at high speed without directly inquiring to the authority information management unit.

Therefore, in each inquiry processing unit, the authority information necessary for confirming the access authority of the user who issued the processing request is sufficient if the authority information held in the authority information temporary storage unit owned by the user is sufficient. , It is not necessary to contact the authority information management section to confirm the access authority. Even if the authority information required to confirm the access authority is not sufficient in the information held in the authority information temporary storage unit, it is sufficient to make an inquiry to the authority information management unit only for the insufficient amount. The substantial amount of authority information inquired to the authority information management unit is also reduced.

Therefore, even when a plurality of inquiry processing units of the database management system receive a processing request at the same time, each inquiry processing unit makes an inquiry to the authority information management unit at the same time so that the authority information management unit is inquired. It is possible to avoid concentrating the load by
It is possible to shorten the waiting time of each inquiry processing unit to wait for a reply from the authority information management unit and speed up the access processing to the shared data.

[0020]

1 shows an embodiment of a database management system according to the present invention. The database management system 10 of this embodiment includes an authority information management unit 11,
It is provided with two query processing units 12a and 12b and a database access processing unit 13.

Here, the authority information management unit 11 is means for collectively managing authority information that defines the access authority of each user to the database, and searches, updates, deletes, inserts, etc. the shared data. It manages authority information indicating whether or not each processing can be executed, and authority information indicating whether or not the modification processing of the authority information itself for each user can be executed.

The inquiry processing unit 12a and the inquiry processing unit 12b have the same function. The inquiry processing units 12a and 12b receive a processing request for a database from a user, and the authority information management unit 11
Whether or not the processing request is valid is determined based on the authority information managed by, and the processing for the processing request is performed according to the determination result.

The database access processing unit 13 is
A part that actually controls the input / output of data to / from shared data, and executes an input / output process for shared data in response to a database access request issued when the inquiry processing units 12a and 12b recognize it as a processing request within the access authority. To do.

Each of the above-mentioned inquiry processing units 12a and 12b
Includes a temporary privilege information storage unit 14 for temporarily storing and retaining a part of the privilege information managed by the privilege information management unit 11.
Is equipped with. The authority information management unit 11 is equipped with a authority change notification function 11a that notifies the authority information temporary storage unit 14 of each of the inquiry processing units 12a and 12b when the managed authority information is changed. Has been done.

In each of the authority information temporary storage sections 14 described above, the inquiry processing sections 12a and 12b to the authority information management section 11 are included.
A buffer storage function 14a for temporarily storing the authority information read from the authority information management unit 11 when the access authority is inquired, and when the authority information management unit 11 notifies the authority information change. The buffer memory function 14a
Initialization function 14b that discards the information held by
And are equipped with. Each inquiry processing unit 12 described above
When confirming the user's access authority to the processing request, the a and 12b first check the authority information held in their own authority information temporary storage unit 14 to confirm the access authority, and then confirm the authority information temporarily. Only when the authority information not stored in the storage unit 14 is required, the authority information management unit 11 is inquired about the lacking authority information in the authority information temporary storage unit 14. Next, the inquiry processing unit 12a receives a processing request for shared data from one user, and the inquiry processing unit 12b changes the authority information itself stored in the authority information management unit 11 from another user. Taking a specific example when a processing request is entered,
The functions of the inquiry processing units 12a and 12b and the flow of processing in the database management system will be described.

FIG. 4 shows the flow of processing when the inquiry processing unit 12a receives a processing request for shared data. It should be noted that, in FIG. 1, broken line arrows indicate the respective processing flows, and the numbers attached to the broken line arrows correspond to the step numbers in the flowchart shown in FIG.

Upon receipt of the processing request from the user (step 101), the inquiry processing section 12a first analyzes the processing request to confirm the processing content included in the processing request (step 102). Then, it is determined what processing authority is required to execute the processing request (step 103). Then, the inquiry processing unit 12a further checks the authority information stored in the authority information temporary storage unit 14 and determines whether the authority extracted in step 103 is the authority given to the user. It is confirmed (step 104). If the authority information temporary storage unit 14 lacks the authority information to be confirmed, the authority information management unit 11 is inquired about the insufficient authority information via the authority information temporary storage unit 14 (step 105.106). ). The authority information newly inquired to the authority information management unit 11 in step 106 is additionally held in the buffer storage function 14a of the authority information temporary storage unit 14.

When all the processing authorities extracted in step 103 are confirmed, it is judged whether or not the processing request from the user is within the access authority, and the subsequent processing is selected according to the judgment result ( Step 107).

If the determination in step 107 is "outside of the access authority", the inquiry processing section 12a rejects the processing request from the user (step 108), and ends the processing. On the other hand, step 107
If it is determined that the access authorization is within the access authority, the inquiry processing unit 12a issues a database access request to the database access processing unit 13 (step 109). The database access processing unit 13 executes a process in accordance with the access request from the inquiry processing unit 12a and outputs the processing result to the inquiry processing unit 12a.
(Step 110). Then, the inquiry processing unit 12a receiving the processing result from the database access processing unit 13 returns the processing result to the user (step 1
11), the process ends.

Even when the inquiry processing section 12b receives a processing request for changing the authority information itself stored in the authority information management section 11, as in the case of the processing request for the shared data, the steps shown in FIG. When the processing requests 101 to 107 are sequentially executed and the processing request is out of the range of the access authority, the inquiry processing unit 12b rejects the processing request from the user and ends the processing. However, when the processing request from the user is within the access authority, the inquiry processing unit 12b requests the authority information management unit 11 to change the authority information (reference numeral 120 in FIG. 1). When the authority information management unit 11 receives a request for authority information change processing from the inquiry processing unit 12b, the authority information management unit 11 waits for processing for an inquiry about authority information from another inquiry processing unit 12a, and at the same time, the inquiry processing units 12a and 12b. Of the change of the authority information to the authority information temporary storage unit 14 of
The authority information held in each authority information temporary storage unit 14 is discarded. Then, after the change processing according to the request from the inquiry processing unit 12b is executed, the processing for the inquiry from the inquiry processing unit 12a that has been waiting is continued.

In the database management system 10 of the embodiment described above, the inquiry processing units 12a and 12b.
The authority information temporary storage unit 14 equipped in the server functions as a buffer storage device provided between the inquiry processing units 12a and 12b and the authority information management unit 11, and is temporarily stored in the authority information temporary storage unit 14. The authority information can be confirmed at high speed without making a direct inquiry to the authority information management unit 11.

Therefore, each inquiry processing unit 12a, 1
In 2b, if the authority information required to confirm the access authority of the user who has issued the processing request is sufficient for the authority information held in the authority information temporary storage unit 14 owned by the user, it is necessary to confirm the access authority. It is not necessary to make an inquiry to the authority information management unit 11. Further, even if the authority information necessary for confirming the access authority is not sufficient only in the information held in the authority information temporary storage unit 14, it is sufficient to inquire the authority information management unit 11 only for the insufficient amount. The substantial amount itself of the authority information inquired by the sections 12a and 12b to the authority information management unit 11 is also reduced.

Therefore, the database management system 1
Even if two query processing units 12a and 12b of 0 receive processing requests at the same time, each query processing unit 1
It is possible to prevent the load from being concentrated on the authority information management unit 11 by the simultaneous inquiries of the authority information management unit 11 by 2a and 12b, and to wait for a reply from the authority information management unit 11. Each inquiry processing unit 1
It is possible to shorten the waiting time of 2a and 12b and speed up the access processing to the shared data.

In the above embodiment, the number of inquiry processing units provided in the database management system is two, but the number of inquiry processing units is three or more.
The effect of the present invention becomes more remarkable as the number of inquiry processing units increases.

[0035]

As is apparent from the above description, in the database management system according to the present invention, the authority information temporary storage unit equipped in the inquiry processing unit is provided between each inquiry processing unit and the authority information management unit. The authority information temporarily stored in the authority information temporary storage unit can be confirmed at high speed without directly inquiring to the authority information management unit.

Therefore, in each inquiry processing section, if the authority information required to confirm the access authority of the user who issued the processing request is the authority information held in the authority information temporary storage section owned by the user, , It is not necessary to contact the authority information management section to confirm the access authority. Even if the authority information required to confirm the access authority is not sufficient in the information held in the authority information temporary storage unit, it is sufficient to make an inquiry to the authority information management unit only for the insufficient amount. The substantial amount of authority information inquired to the authority information management unit is also reduced.

Therefore, even when a plurality of inquiry processing units of the database management system receive a processing request at the same time, the inquiry processing units simultaneously make inquiries to the authority information management unit, so that the authority information management unit is inquired. It is possible to avoid concentrating the load by
It is possible to shorten the waiting time of each inquiry processing unit to wait for a reply from the authority information management unit and speed up the access processing to the shared data.

[Brief description of drawings]

FIG. 1 is a configuration diagram of an embodiment of a database management system according to the present invention.

FIG. 2 is a configuration diagram of a conventional database management system.

FIG. 3 is an explanatory diagram of a processing procedure in a conventional database management system.

FIG. 4 is an explanatory diagram of a processing procedure according to an embodiment of the present invention.

[Explanation of symbols]

 10 database management system 11 authority information management section 11a authority change notification function 12a, 12b inquiry processing section 13 database access processing section 14 authority information temporary storage section 14a buffer storage function 14b initialization function

Claims (1)

[Claims] 1. An authority information management unit that collectively manages authority information that defines the access authority of each user to a database, and a processing request for a database from each user is accepted and managed by the authority information management unit. Based on the authority information, the plurality of inquiry processing units that determine whether or not the processing request is valid and perform the processing for the processing request according to the determination result, and the processing requests within the access authority by the inquiry processing unit The database management system includes a database access processing unit that executes an input / output process for shared data in response to a database access request issued when the permission information management unit is included in each inquiry processing unit. Equipped with a temporary authority information storage unit that temporarily stores and retains part of the authority information managed by The authority information management section is equipped with a authority change notification function that notifies the authority information temporary storage section of each inquiry processing section when the managed authority information is changed. The storage unit temporarily stores the authority information read from the authority information management unit when the inquiry processing unit inquires of the authority information management unit about the access authority, and the authority information management unit Equipped with an initialization function for discarding the information held by the buffer storage function when the change of authority information is notified, the inquiry processing unit, when confirming the access authority of the user to the processing request First checks the authority information held in the authority information temporary storage unit to confirm the access authority, and needs the authority information not held in the authority information temporary storage unit. Database management system only, and performing a query about authority information is missing in the temporary storage unit rights information to the rights information management unit if that.