专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08584196B2 Technique for efficiently evaluating a security policy 有权
标题翻译：有效评估安全策略的技术
公开(公告)号：US08584196B2
公开(公告)日：2013-11-12
申请号：US12114915
申请日：2008-05-05
申请人： Mohammed Irfan Rafiq , Sabina Petride , Sam Idicula , Ashwini Surpur , Nipun Agarwal , Bhushan Khaladkar , Tim Wing Yu
发明人： Mohammed Irfan Rafiq , Sabina Petride , Sam Idicula , Ashwini Surpur , Nipun Agarwal , Bhushan Khaladkar , Tim Wing Yu
IPC分类号： G06F21/00
CPC分类号： G06F21/604
摘要： One embodiment of the present invention provides a system for efficiently evaluating a security policy. During operation, the system retrieves one or more roles associated with the user. Next, the system checks if a session-level cache exists for a set of Access Control Entries (ACEs) which is associated with the one or more roles. If this session-level cache exists, the system returns the set of ACEs from the session-level cache. Otherwise, the system generates the set of ACEs associated with the one or more roles from an Access Control List (ACL). During operation, the system can also update the one or more roles associated with the user and update the set of ACEs based on the updated one or more roles and the ACL. The system subsequently updates the session level cache with the updated set of ACEs and updated one or more roles.
摘要翻译：本发明的一个实施例提供了一种用于有效评估安全策略的系统。在操作期间，系统检索与用户相关联的一个或多个角色。接下来，系统检查与一个或多个角色相关联的一组访问控制条目（ACE）是否存在会话级缓存。如果此会话级缓存存在，系统会从会话级缓存中返回一组ACE。否则，系统将从访问控制列表（ACL）生成与一个或多个角色相关联的一组ACE。在操作期间，系统还可以更新与用户相关联的一个或多个角色，并根据更新的一个或多个角色和ACL更新ACE集合。系统随后使用更新的一组ACE更新会话级缓存并更新一个或多个角色。

2. 发明申请

US20090276824A1 TECHNIQUE FOR EFFICIENTLY EVALUATING A SECURITY POLICY 有权
标题翻译：有效评估安全政策的技术
公开(公告)号：US20090276824A1
公开(公告)日：2009-11-05
申请号：US12114915
申请日：2008-05-05
申请人： Mohammed Irfan Rafiq , Sabina Petride , Sam Idicula , Ashwini Surpur , Nipun Agarwal , Bhushan Khaladkar , Tim Wing Yu
发明人： Mohammed Irfan Rafiq , Sabina Petride , Sam Idicula , Ashwini Surpur , Nipun Agarwal , Bhushan Khaladkar , Tim Wing Yu
IPC分类号： G06F21/00
CPC分类号： G06F21/604
摘要： One embodiment of the present invention provides a system for efficiently evaluating a security policy. During operation, the system retrieves one or more roles associated with the user. Next, the system checks if a session-level cache exists for a set of Access Control Entries (ACEs) which is associated with the one or more roles. If this session-level cache exists, the system returns the set of ACEs from the session-level cache. Otherwise, the system generates the set of ACEs associated with the one or more roles from an Access Control List (ACL). During operation, the system can also update the one or more roles associated with the user and update the set of ACEs based on the updated one or more roles and the ACL. The system subsequently updates the session level cache with the updated set of ACEs and updated one or more roles.
摘要翻译：本发明的一个实施例提供了一种用于有效评估安全策略的系统。在操作期间，系统检索与用户相关联的一个或多个角色。接下来，系统检查与一个或多个角色相关联的一组访问控制条目（ACE）是否存在会话级缓存。如果此会话级缓存存在，系统会从会话级缓存中返回一组ACE。否则，系统将从访问控制列表（ACL）生成与一个或多个角色相关联的一组ACE。在操作期间，系统还可以更新与用户相关联的一个或多个角色，并根据更新的一个或多个角色和ACL更新ACE集合。系统随后使用更新的一组ACE更新会话级缓存并更新一个或多个角色。

3. 发明申请

US20110113036A1 EFFICIENT FILE ACCESS IN A LARGE REPOSITORY USING A TWO-LEVEL CACHE 有权
标题翻译：使用两级高速缓存的大型报表中的高效文件访问
公开(公告)号：US20110113036A1
公开(公告)日：2011-05-12
申请号：US12615090
申请日：2009-11-09
申请人： Sam Idicula , Sabina Petride , Bhushan Khaladkar , Nipun Agarwal
发明人： Sam Idicula , Sabina Petride , Bhushan Khaladkar , Nipun Agarwal
IPC分类号： G06F17/30 , G06F12/00 , G06F12/08
CPC分类号： G06F17/30097 , G06F12/0811 , G06F12/084 , G06F17/30929
摘要： A two-level cache to facilitate resolving resource path expressions for a hierarchy of resources is described, which includes a system-wide shared cache and a session-level cache. The shared cache is organized as a hierarchy of hash tables that mirrors the structure of a repository hierarchy. A particular hash table in a shared cache includes information for the child resources of a particular resource. A database management system that manages a shared cache may control the amount of memory used by the cache by implementing a replacement policy for the cache based on one or more characteristics of the resources in the repository. The session-level cache is a single level cache in which information for target resources of resolved path expressions may be tracked. In the session-level cache, the resource information is associated with the entire path expression of the associated resource.
摘要翻译：描述了用于促进解决资源层级的资源路径表达式的两级缓存，其包括系统范围共享高速缓存和会话级缓存。共享缓存被组织为映射存储库层次结构的散列表的层次结构。共享缓存中的特定哈希表包括特定资源的子资源的信息。管理共享高速缓存的数据库管理系统可以基于存储库中的资源的一个或多个特性来实现对高速缓存的替换策略来控制高速缓存所使用的存储器量。会话级缓存是单级缓存，其中可以跟踪解析的路径表达式的目标资源的信息。在会话级缓存中，资源信息与相关资源的整个路径表达式相关联。

4. 发明申请

US20090037368A1 FAST PATH LOADING OF XML DATA 有权
标题翻译： XML数据的快速路径加载
公开(公告)号：US20090037368A1
公开(公告)日：2009-02-05
申请号：US11840858
申请日：2007-08-17
申请人： Sabina Petride , Sivasankaran Chandrasekar , Ellen Batbouta , Sam Idicula , Asha Tarachandani , Bhushan Khaladkar , Nipun Agarwal
发明人： Sabina Petride , Sivasankaran Chandrasekar , Ellen Batbouta , Sam Idicula , Asha Tarachandani , Bhushan Khaladkar , Nipun Agarwal
IPC分类号： G06F17/30
CPC分类号： G06F17/30923
摘要： Techniques for implementing fast loading of binary XML into a binary XML database repository are provided. A client application reduces the processing burden on the repository by doing pre-processing of the binary XML data prior to loading.
摘要翻译：提供了将二进制XML快速加载到二进制XML数据库中的技术。客户端应用程序通过在加载之前对二进制XML数据进行预处理来减少存储库的处理负担。

5. 发明授权

US08326839B2 Efficient file access in a large repository using a two-level cache 有权
标题翻译：使用两级缓存在大型存储库中高效地进行文件访问
公开(公告)号：US08326839B2
公开(公告)日：2012-12-04
申请号：US12615090
申请日：2009-11-09
申请人： Sam Idicula , Sabina Petride , Bhushan Khaladkar , Nipun Agarwal
发明人： Sam Idicula , Sabina Petride , Bhushan Khaladkar , Nipun Agarwal
IPC分类号： G06F7/00 , G06F17/00 , G06F17/30
CPC分类号： G06F17/30097 , G06F12/0811 , G06F12/084 , G06F17/30929
摘要： A two-level cache to facilitate resolving resource path expressions for a hierarchy of resources is described, which includes a system-wide shared cache and a session-level cache. The shared cache is organized as a hierarchy of hash tables that mirrors the structure of a repository hierarchy. A particular hash table in a shared cache includes information for the child resources of a particular resource. A database management system that manages a shared cache may control the amount of memory used by the cache by implementing a replacement policy for the cache based on one or more characteristics of the resources in the repository. The session-level cache is a single level cache in which information for target resources of resolved path expressions may be tracked. In the session-level cache, the resource information is associated with the entire path expression of the associated resource.
摘要翻译：描述了用于促进解决资源层级的资源路径表达式的两级缓存，其包括系统范围共享高速缓存和会话级缓存。共享缓存被组织为映射存储库层次结构的散列表的层次结构。共享缓存中的特定哈希表包括特定资源的子资源的信息。管理共享高速缓存的数据库管理系统可以基于存储库中的资源的一个或多个特性来实现对高速缓存的替换策略来控制高速缓存所使用的存储器量。会话级缓存是单级缓存，其中可以跟踪解析的路径表达式的目标资源的信息。在会话级缓存中，资源信息与相关资源的整个路径表达式相关联。

6. 发明授权

US07933933B2 Fast path loading of XML data 有权
标题翻译：快速路径加载XML数据
公开(公告)号：US07933933B2
公开(公告)日：2011-04-26
申请号：US11840858
申请日：2007-08-17
申请人： Sabina Petride , Sivasankaran Chandrasekar , Ellen Batbouta , Sam Idicula , Asha Tarachandani , Bhushan Khaladkar , Nipun Agarwal
发明人： Sabina Petride , Sivasankaran Chandrasekar , Ellen Batbouta , Sam Idicula , Asha Tarachandani , Bhushan Khaladkar , Nipun Agarwal
IPC分类号： G06F17/30
CPC分类号： G06F17/30923
摘要： Techniques for implementing fast loading of binary XML into a binary XML database repository are provided. A client application reduces the processing burden on the repository by doing pre-processing of the binary XML data prior to loading.
摘要翻译：提供了将二进制XML快速加载到二进制XML数据库中的技术。客户端应用程序通过在加载之前对二进制XML数据进行预处理来减少存储库的处理负担。

7. 发明申请

US20090144804A1 METHOD AND APPARATUS TO SUPPORT PRIVILEGES AT MULTIPLE LEVELS OF AUTHENTICATION USING A CONSTRAINING ACL 有权
标题翻译：使用约束ACL在多个级别的认证中支持特权的方法和装置
公开(公告)号：US20090144804A1
公开(公告)日：2009-06-04
申请号：US11947235
申请日：2007-11-29
申请人： Sam Idicula , Thomas Keefe , Mohammed Irfan Rafiq , Tanvir Ahmed , Vikram Pesati , Nipun Agarwal
发明人： Sam Idicula , Thomas Keefe , Mohammed Irfan Rafiq , Tanvir Ahmed , Vikram Pesati , Nipun Agarwal
IPC分类号： H04L9/32
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Embodiments of the present invention provide systems and techniques for creating, updating, and using an ACL (access control list). A database system may include a constraining ACL which represents a global security policy that is to be applied to all applications that interact with the database. By ensuring that all ACLs inherit from the constraining ACL, the database system can ensure that the global security policy is applied to all applications that interact with the database. During operation, the system may receive a request to create or update an ACL. Before creating or updating the ACL, the system may modify the ACL to ensure that it inherits from the constraining ACL. In an embodiment, the system grants a privilege to a user only if both the ACL and the constraining ACL grant the privilege.
摘要翻译：本发明的实施例提供了用于创建，更新和使用ACL（访问控制列表）的系统和技术。数据库系统可以包括约束ACL，其表示要应用于与数据库交互的所有应用的全局安全策略。通过确保所有ACL从约束ACL继承，数据库系统可以确保将全局安全策略应用于与数据库交互的所有应用程序。在操作期间，系统可能会收到创建或更新ACL的请求。在创建或更新ACL之前，系统可能会修改ACL，以确保其从约束ACL继承。在一个实施例中，只有当ACL和约束ACL同时授予特权时，系统才向用户授予权限。

8. 发明授权

US09471801B2 Method and apparatus to support privileges at multiple levels of authentication using a constraining ACL 有权
标题翻译：使用约束ACL支持多级身份验证的权限的方法和装置
公开(公告)号：US09471801B2
公开(公告)日：2016-10-18
申请号：US11947235
申请日：2007-11-29
申请人： Sam Idicula , Thomas Keefe , Mohammed Irfan Rafiq , Tanvir Ahmed , Vikram Pesati , Nipun Agarwal
发明人： Sam Idicula , Thomas Keefe , Mohammed Irfan Rafiq , Tanvir Ahmed , Vikram Pesati , Nipun Agarwal
IPC分类号： G06F21/62
CPC分类号： G06F21/6218 , G06F2221/2141
摘要： Embodiments of the present invention provide systems and techniques for creating, updating, and using an ACL (access control list). A database system may include a constraining ACL which represents a global security policy that is to be applied to all applications that interact with the database. By ensuring that all ACLs inherit from the constraining ACL, the database system can ensure that the global security policy is applied to all applications that interact with the database. During operation, the system may receive a request to create or update an ACL. Before creating or updating the ACL, the system may modify the ACL to ensure that it inherits from the constraining ACL. In an embodiment, the system grants a privilege to a user only if both the ACL and the constraining ACL grant the privilege.
摘要翻译：本发明的实施例提供了用于创建，更新和使用ACL（访问控制列表）的系统和技术。数据库系统可以包括约束ACL，其表示要应用于与数据库交互的所有应用的全局安全策略。通过确保所有ACL从约束ACL继承，数据库系统可以确保将全局安全策略应用于与数据库交互的所有应用程序。在操作期间，系统可能会收到创建或更新ACL的请求。在创建或更新ACL之前，系统可能会修改ACL，以确保其从约束ACL继承。在一个实施例中，只有当ACL和约束ACL同时授予特权时，系统才向用户授予权限。

9. 发明授权

US08392405B2 Performing cost-based optimizations of authorization checks in database systems 有权
标题翻译：在数据库系统中执行基于成本优化的授权检查
公开(公告)号：US08392405B2
公开(公告)日：2013-03-05
申请号：US12144028
申请日：2008-06-23
申请人： Sam Idicula , Mohammed Irfan Rafiq , Nipun Agarwal
发明人： Sam Idicula , Mohammed Irfan Rafiq , Nipun Agarwal
IPC分类号： G06F7/00
CPC分类号： G06F17/30448
摘要： One embodiment of the present invention provides a system that facilitates performing a cost-based optimization of authorization checks in a database system. During operation, the system receives a query at the database system. Next, the system estimates a cost for executing the query, which involves estimating a cost for evaluating authorization checks, which involve functional evaluations of access rights for data accessed by the query. The system then rewrites the query to include evaluating authorization checks within the query. The system also estimates a cost for executing the rewritten query. Next, the system determines if executing the rewritten query has a lower cost than executing the query and performing the authorization checks. If so, the system executes the rewritten query. However, if not, the system executes the query.
摘要翻译：本发明的一个实施例提供一种有助于在数据库系统中执行授权检查的基于成本的优化的系统。在操作过程中，系统在数据库系统中接收查询。接下来，系统估计执行查询的成本，其涉及估计用于评估授权检查的成本，其涉及对查询访问的数据的访问权限的功能评估。然后系统重写查询以包括在查询中评估授权检查。该系统还估计执行重写查询的成本。接下来，系统确定执行重写查询是否具有比执行查询并执行授权检查更低的成本。如果是这样，系统将执行重写的查询。但是，如果没有，则系统执行查询。

10. 发明申请

US20090157686A1 METHOD AND APPARATUS FOR EFFICIENTLY CACHING A SYSTEM-WIDE ACCESS CONTROL LIST 审中-公开
标题翻译：高效地访问系统访问控制列表的方法和设备
公开(公告)号：US20090157686A1
公开(公告)日：2009-06-18
申请号：US11955781
申请日：2007-12-13
申请人： Sam Idicula , Mohammed Irfan Rafiq , Nipun Agarwal
发明人： Sam Idicula , Mohammed Irfan Rafiq , Nipun Agarwal
IPC分类号： G06F17/30
CPC分类号： G06F21/6209 , G06F2221/2141
摘要： One embodiment of the present invention provides a system for efficiently caching a system-wide Access Control Entry (ACE) for a subject requesting an action on an object associated with an application. During operation, the system retrieves a security class that is associated with an application. The system then checks if a constrained system-wide ACE associated with the subject, the object, the requested action, and the security class exists in a cache. If so, then the system retrieves the entry. Otherwise, the system retrieves a system-wide ACE associated with the subject and the requested action. The system also retrieves a local ACE associated with the subject, the object, the requested action, and the security class. Next, the system constrains the system-wide ACE with the local ACE and caches the result so that the constrained system-wide ACE is associated with the subject, the object, the requested action, and the security class.
摘要翻译：本发明的一个实施例提供了一种用于有效地缓存针对与应用相关联的对象请求动作的对象的系统范围的访问控制条目（ACE）的系统。在操作期间，系统检索与应用程序相关联的安全类。然后，系统检查与主题相关联的受限系统范围的ACE，对象，请求的操作和安全级别是否存在于缓存中。如果是，则系统检索该条目。否则，系统将检索与主题相关联的系统范围的ACE和请求的操作。系统还检索与主题相关联的本地ACE，对象，请求的操作和安全类。接下来，系统使用本地ACE约束系统范围的ACE，并缓存结果，使受限系统范围的ACE与主题，对象，请求的操作和安全类相关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式