专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07890530B2 Method and system for controlling access to data via a data-centric security model 失效
标题翻译：通过数据为中心的安全模型控制数据访问的方法和系统
公开(公告)号：US07890530B2
公开(公告)日：2011-02-15
申请号：US12025832
申请日：2008-02-05
申请人： Michael P. Bilger , Hyman D. Chantz , Nevenko Zunic
发明人： Michael P. Bilger , Hyman D. Chantz , Nevenko Zunic
IPC分类号： G06F17/00
CPC分类号： G06F21/6227 , G06F21/6218
摘要： A method and system for controlling access to data via a data-centric security model. A business data classification scheme is defined as a hierarchy that includes data types aligned with business operations. A data element is labeled with a data label. The data label includes multiple attributes associated with a data-centric security model. A first attribute is a data type of the data element. A second attribute includes security requirements. Data control rules are automatically generated for an enforcement of the security requirements. The enforcement grants or denies to a user an access to the data element via a predefined action. The enforcement is based on a predefined association among the predefined action, a predefined role that includes the user, the data type and, optionally, a purpose for performing the predefined action.
摘要翻译：一种通过数据为中心的安全模型来控制对数据访问的方法和系统。业务数据分类方案被定义为包括与业务操作对齐的数据类型的层次结构。数据元素用数据标签标记。数据标签包括与以数据为中心的安全模型相关联的多个属性。第一个属性是数据元素的数据类型。第二个属性包括安全性要求。自动生成数据控制规则，以执行安全性要求。执行授权或拒绝用户通过预定义的操作访问数据元素。执行基于预定义动作之间的预定义关联，包括用户的预定义角色，数据类型以及可选地用于执行预定义动作的目的。

2. 发明申请

US20090198697A1 METHOD AND SYSTEM FOR CONTROLLING ACCESS TO DATA VIA A DATA-CENTRIC SECURITY MODEL 失效
标题翻译：用于通过数据中心安全模型控制访问数据的方法和系统
公开(公告)号：US20090198697A1
公开(公告)日：2009-08-06
申请号：US12025832
申请日：2008-02-05
申请人： Michael P. Bilger , Hyman D. Chantz , Nevenko Zunic
发明人： Michael P. Bilger , Hyman D. Chantz , Nevenko Zunic
IPC分类号： G06F17/00
CPC分类号： G06F21/6227 , G06F21/6218
摘要： A method and system for controlling access to data via a data-centric security model. A business data classification scheme is defined as a hierarchy that includes data types aligned with business operations. A data element is labeled with a data label. The data label includes multiple attributes associated with a data-centric security model. A first attribute is a data type of the data element. A second attribute includes security requirements. Data control rules are automatically generated for an enforcement of the security requirements. The enforcement grants or denies to a user an access to the data element via a predefined action. The enforcement is based on a predefined association among the predefined action, a predefined role that includes the user, the data type and, optionally, a purpose for performing the predefined action.
摘要翻译：一种通过数据为中心的安全模型来控制对数据访问的方法和系统。业务数据分类方案被定义为包括与业务操作对齐的数据类型的层次结构。数据元素用数据标签标记。数据标签包括与以数据为中心的安全模型相关联的多个属性。第一个属性是数据元素的数据类型。第二个属性包括安全性要求。自动生成数据控制规则，以执行安全性要求。执行授权或拒绝用户通过预定义的操作访问数据元素。执行基于预定义动作之间的预定义关联，包括用户的预定义角色，数据类型以及可选地用于执行预定义动作的目的。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式