Back to results
US 11,531,775 B2Granted
Database security
AssigneeAb Initio Technology LLC
InventorChristopher J. Winters
Life of this patent
Estimating the term…
Abstract
A method includes automatically determining a component of a security label for each first record in a first table of a database having multiple tables, including: identifying a second record related to the first record according to a foreign key relationship; identifying a component of the security label for the second record; and assigning a value for the component of the security label for the first record based on the identified component of the security label for the second record. The method includes storing the determined security label in the record.
Claims53
A method comprising:
- automatically determining a first component of a security label for a first record in a first table of a database having multiple tables, including:
- accessing the first record;
- identifying a second record related to the first record according to a first foreign key relationship, in which the first foreign key relationship includes a value in a field of the first record that identifies the second record;
- accessing the second record, the second record having data stored in multiple fields;
- identifying a component of the security label for the second record, in which the component of the security label for the second record comprises a value in a field of the second record;
- and
- assigning a value for the first component of the security label for the first record based on the identified component of the security label for the second record;
- combining the first component of the security label for the first record with a second component of the security label for the first record into a single element that includes the first component and the second component to form the security label for the first record, the second component of the security label for the first record having been determined based on one or more of (1) an attribute of the first record, (2) an attribute of the first table, and (3) a component of a security label for a third record related to the first record by a second foreign key relationship;
- and
- storing the security label for the first record in one or more of the fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the security label is for managing access to the data stored in the fields of the first record.
7 more elements
A non-transitory computer-readable medium storing instructions for causing a computing system to:
- automatically determine a first component of a security label for a first record in a first table of a database having multiple tables, including:
- accessing the first record;
- identifying a second record related to the first record according to a foreign key relationship, in which the foreign key relationship includes a value in a field of the first record that identifies the second record;
- accessing the second record, the second record having data stored in multiple fields;
- identifying a component of the security label for the second record, in which the component of the security label for the second record comprises a value in a field of the second record;
- and
- assigning a value for the component of the security label for the first record based on the identified component of the security label for the second record;
- combine the first component of the security label for the first record with a second component of the security label for the first record into a single element that includes the first component and the second component to form the security label for the first record, the second component of the security label for the first record having been determined based on one or more of (1) an attribute of the first record, (2) an attribute of the first table, and (3) a component of a security label for a third record related to the first record by a second foreign key relationship;
- and
- store the security label for the first record in one or more of the fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the security label is for managing access to the data stored in the fields of the first record.
7 more elements
A computing system including:
- one or more processors coupled to a memory, the one or more processors and memory configured to:
- automatically determine a first component of a security label for a first record in a first table of a database having multiple tables, including:
- accessing the first record;
- identifying a second record related to the first record according to a foreign key relationship, in which the foreign key relationship includes a value in a field of the first record that identifies the second record;
- accessing the second record, the second record having data stored in multiple fields;
- identifying a component of the security label for the second record, in which the component of the security label for the second record comprises a value in a field of the second record;
- and
- assigning a value for the component of the security label for the first record based on the identified component of the security label for the second record;
- combine the first component of the security label for the first record with a second component of the security label for the first record into a single element that includes the first component and the second component to form the security label for the first record, the second component of the security label for the first record having been determined based on one or more of (1) an attribute of the first record, (2) an attribute of the first table, and (3) a component of a security label for a third record related to the first record by a second foreign key relationship;
- and
- store the security label for the first record in one or more of the fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the security label is for managing access to the data stored in the fields of the first record.
8 more elements
A computing system including:
- means for automatically determining a first component of a security label for a first record in a first table of a database having multiple tables, including:
- accessing the first record;
- identifying a second record related to the first record according to a foreign key relationship, in which the foreign key relationship includes a value in a field of the first record that identifies the second record;
- accessing the second record, the second record having data stored in multiple fields;
- identifying a component of the security label for the second record, in which the component of the security label for the second record comprises a value in a field of the second record;
- and
- assigning a value for the component of the security label for the first record based on the identified component of the security label for the second record;
- means for combining the first component of the security label for the first record with a second component of the security label for the first record into a single element that includes the first component and the second component to form the security label for the first record, the second component of the security label for the first record having been determined based on one or more of (1) an attribute of the first record, (2) an attribute of the first table, and (3) a component of a security label for a third record related to the first record by a second foreign key relationship;
- and
- means for storing the security label for the first record in one or more of the fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the security label is for managing access to the data stored in the fields of the first record.
7 more elements
A method comprising:
- determining that a first record stored in a first table of a database having multiple tables has been updated;
- automatically updating a first component of a first security label for the first record based on the update to the first record;
- storing the updated first security label in one or more fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the first security label is for managing access to the first record;
- and
- responsive to updating the first component of the first security label for the first record, automatically updating a second security label for a second record stored in a second table of the database, the second record being related to the first record according to a first foreign key relationship, in which the first foreign key relationship includes a value in the first record that identifies the second record,
- in which a second component of the first security label for the first record is based on one or more of (1) an attribute of the first table and (2) a component of a third security label for a third record related to the first record according to a second foreign key relationship, and in which the first security label is a single element that includes the first component and the second component.
3 more elements
A non-transitory computer-readable medium storing instructions for causing a computing system to:
- determine that a first record stored in a first table of a database having multiple tables has been updated;
- automatically update a first component of a first security label for the first record based on the update to the first record;
- store the updated first security label in one or more fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the first security label is for managing access to the first record;
- and
- responsive to updating the first component of the first security label for the first record, automatically update a second security label for a second record stored in a second table of the database, the second record being related to the first record according to a first foreign key relationship, in which the first foreign key relationship includes a value in the first record that identifies the second record,
- in which a second component of the first security label for the first record is based on one or more of (1) an attribute of the first table and (2) a component of a third security label for a third record related to the first record according to a second foreign key relationship, and in which the first security label is a single element that includes the first component and the second component.
3 more elements
A computing system including:
- one or more processors coupled to a memory, the one or more processors and memory configured to:
- determine that a first record stored in a first table of a database having multiple tables has been updated;
- automatically update a first component of a first security label for the first record based on the update to the first record;
- store the updated first security label in one or more fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the first security label is for managing access to the first record;
- and
- responsive to updating the first component of the first security label for the first record, automatically update a second security label for a second record stored in a second table of the database, the second record being related to the first record according to a first foreign key relationship, in which the first foreign key relationship includes a value in the first record that identifies the second record,
- in which a second component of the first security label for the first record is based on one or more of (1) an attribute of the first table and (2) a component of a third security label for a third record related to the first record according to a second foreign key relationship, and in which the first security label is a single element that includes the first component and the second component.
4 more elements
A computing system including:
- means for determining that a first record stored in a first table of a database having multiple tables has been updated;
- means for automatically updating a first component of a first security label for the first record based on the update to the first record;
- means for storing the updated first security label in one or more fields of the first record, wherein the security label stored in the one or more fields of the first record is dedicated to security of the first record, and wherein the first security label is for managing access to the first record;
- and
- means for, responsive to updating the first component of the first security label for the first record, automatically updating a second security label for a second record stored in a second table of the database, the second record being related to the first record according to a first foreign key relationship, in which the first foreign key relationship includes a value in the first record that identifies the second record,
- in which a second component of the first security label for the first record is based on one or more of (1) an attribute of the first table and (2) a component of a third security label for a third record related to the first record according to a second foreign key relationship, and in which the first security label is a single element that includes the first component and the second component.
3 more elements
Dependencies are inferred from the claim text.