会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 9. 发明授权
    • Systems and methods that optimize row level database security
    • 优化行级数据库安全性的系统和方法
    • US07661141B2
    • 2010-02-09
    • US10885815
    • 2004-07-07
    • Tanmoy DuttaGirish ChanderLaurentiu Bogdan CristoforRodger N. KlineJames R. Hamilton
    • Tanmoy DuttaGirish ChanderLaurentiu Bogdan CristoforRodger N. KlineJames R. Hamilton
    • G06F7/04G06F17/30H04N7/16
    • G06F21/6227
    • The systems and methods of the present invention facilitate database row-level security by utilizing SQL extensions to create and associate named security expressions with a query initiator(s). Such expressions include Boolean expressions, which must be satisfied by a row of data in order for that data to be made accessible to the query initiator. In general, a query is augmented with security expressions, which are aggregated and utilized during querying rows of data. The systems and methods variously place security expressions within a query in order to optimize query performance while mitigating information leaks. This is achieved by tagging security expressions as special and utilizing rules of predicate to pull or push non-security expressions above or below security expressions, depending on the likelihood of a non-security being safe, as determined via a static and/or dynamic analysis.
    • 本发明的系统和方法通过利用SQL扩展来创建和关联命名的安全表达式与查询启动器来促进数据库行级安全性。 这样的表达式包括布尔表达式,这些表达式必须由一行数据满足,以使该数据能够被查询启动器访问。 一般来说,查询会增加安全性表达式,这些表达式在查询数据行期间进行聚合和使用。 系统和方法将查询中的安全表达式各不相同,以优化查询性能,同时减轻信息泄漏。 这是通过将安全表达式标记为特殊的,并利用谓词的规则在安全表达式之上或之下拉取或推送非安全表达式,这取决于非安全性的可能性,通过静态和/或动态分析确定 。
    • 10. 发明授权
    • Systems and methods that specify row level database security
    • 指定行级数据库安全性的系统和方法
    • US07711750B1
    • 2010-05-04
    • US10903338
    • 2004-07-30
    • Tanmoy DuttaGirish ChanderJames R. HamiltonAlain C. Comeau
    • Tanmoy DuttaGirish ChanderJames R. HamiltonAlain C. Comeau
    • G06F7/00G06F17/30
    • G06F21/6227Y10S707/99933Y10S707/99939
    • The present invention specifies database security at a row level and, optionally, at a column and table level. The systems and methods cluster one or more sets of rows with similar security characteristics and treat them as a named expression, wherein clustered data is accessed based on associated row-level security. The systems and methods specify a syntax that invokes row(s), column(s) and/or table(s) security via programming statements. Such statements include arbitrary Boolean expressions (predicates) defined over, but not restricted to table columns and/or other contextual data. These statements typically are associated with query initiators, incorporated into queries therefrom, and utilized while querying data. Rows of data that return “true” when evaluated against an aggregate of associated security expressions are said to “satisfy” the security expressions and enable access to the data stored therein. Such security expressions can be created and invoked via the Structured Query Language (SQL) database programming language.
    • 本发明在行级别和可选地在列和表级别指定数据库安全性。 系统和方法集中一组或多组具有相似安全特性的行,并将其视为命名表达式,其中基于关联的行级安全性访问群集数据。 系统和方法通过编程语句指定调用行,列和/或表的安全性的语法。 这样的语句包括定义在但不限于表列和/或其他上下文数据的任意布尔表达式(谓词)。 这些语句通常与查询启动器相关联,并入查询中,并在查询数据时使用。 对相对于安全表达式的聚合进行评估时返回“true”的数据行被称为“满足”安全表达式并且能够访问存储在其中的数据。 可以通过结构化查询语言(SQL)数据库编程语言创建和调用此类安全表达式。