# US 2010/0169377 A1 · System, method, and computer-readable medium for facilitating application virtual database users > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2010/0169377 A1 - Document ID: US20100169377A1 - Status: Published application - Kind: A1 - Application number: 12/346,568 - Filed: 2008-12-30 - Published: 2010-07-01 - Earliest claimed: 2008-12-30 - Inventors: Debra Galeazzi; James Browning; Douglas P. Brown - Web page: https://patentgrep.com/patent/US20100169377A1 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 16/252: {between a Database Management System and a front-end application} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system, method, and computer-readable medium that provide virtual user access to a database system are provided. Middle-tier application end users issue requests to a middle-tier application that submits the requests to a database system on behalf of the middle-tier end users. The middle-tier application may authenticate end users and maintain a session pool for maintaining sessions with the database system for virtual users comprising valid middle-tier application end users. The middle-tier application is able to assert the identity of virtual users corresponding to the end users for use in access rights checking and auditing of queries without establishing a new logon session for the user. To facilitate middle-tier application assertion of virtual user identities, the middle-tier application is registered as a valid database user with the database system. ## Claims ### Claim 1 A method of providing virtual access to a database system deployed in a computer system by a middle-tier application, comprising: registering the middle-tier application with the database system with a database user name; receiving, by the middle-tier application, a request to be processed in the database system from a client system configured as an end user to the middle-tier application; asserting, by the middle-tier application, an identity of a connection between the middle-tier application and the database system as a virtual user corresponding to the end user; and submitting, by the middle-tier application, the request to the database system on the connection. ### Claim 2 (depends on 1) The method of claim 1, further comprising: authenticating, by the middle-tier application, the end user with the middle-tier application; and creating, by the middle-tier application, a session pool that includes the connection. ### Claim 3 (depends on 1) The method of claim 1, further comprising: associating the database user name with the virtual user; and recording one or more roles that specify database access rights of the virtual user. ### Claim 4 (depends on 3) The method of claim 3, wherein creating the virtual user comprises creating a plurality of virtual users each corresponding to one of a plurality of end users of the middle-tier application. ### Claim 5 (depends on 1) The method of claim 1, further comprising verifying, by the database system, the virtual user is a valid virtual user. ### Claim 6 (depends on 1) The method of claim 1, further comprising verifying, by the database system, that the request complies with the database access rights of the virtual user's role. ### Claim 7 (depends on 1) The method of claim 1, further comprising authenticating, by the database system, the middle-tier application as a valid user of the database system. ### Claim 8 A computer-readable medium having computer-executable instructions for execution by a processing system, the computer-executable instructions for providing virtual access to a database system deployed in a computer system by a middle-tier application, the computer-executable instructions, when executed, cause the processing system to: register the middle-tier application with the database system with a database user name; receive, by the middle-tier application, a request to be processed in the database system from a client system configured as an end user to the middle-tier application; assert, by the middle-tier application, an identity of a connection between the middle-tier application and the database system as a virtual user corresponding to the end user; assert, by the middle-tier application, one or more roles to be used for verification of access rights for the virtual user; and submit, by the middle-tier application, the request to the database system on the connection. ### Claim 9 (depends on 8) The computer-readable medium of claim 8, further comprising instructions that, when executed, cause the processing system to: authenticate, by the middle-tier application, the end user with the middle-tier application; and create, by the middle-tier application, a session pool that includes the connection. ### Claim 10 (depends on 8) The computer-readable medium of claim 8, further comprising instructions that, when executed, cause the processing system to: associate the database user name with the virtual user; and record one or more roles that specify database access rights of the virtual user. ### Claim 11 (depends on 10) The computer-readable medium of claim 10, wherein the instructions that create the virtual user comprise instructions that, when executed, cause the processing system to create a plurality of virtual users each corresponding to one of a plurality of end users of the middle-tier application. ### Claim 12 (depends on 8) The computer-readable medium of claim 8, further comprising instructions that, when executed, cause the processing system to verify, by the database system, the virtual user is a valid virtual user. ### Claim 13 (depends on 8) The computer-readable medium of claim 8, further comprising instructions that, when executed, cause the processing system to verify, by the database system, that the request complies with the database access rights of the virtual user. ### Claim 14 (depends on 8) The computer-readable medium of claim 8, further comprising instructions that, when executed, cause the processing system to authenticate, by the database system, the middle-tier application as a valid user of the database system. ### Claim 15 A system having a database system deployed therein that provides virtual access to the database system by a middle-tier application, comprising: at least one storage medium on which the database system is stored; and at least one processing module that registers the middle-tier application with the database system with a database user name, receives a connection from the middle-tier application with an identity of a virtual user corresponding to an end user of the middle-tier application, and receives, from the middle-tier application on the connection, a request to be processed in the database system that was submitted to the middle-tier application from a client system configured as the end user of the middle-tier application. ### Claim 16 (depends on 15) The system of claim 15, wherein the middle-tier application authenticates the end user with the middle-tier application and creates a session pool that includes the connection. ### Claim 17 (depends on 15) The system of claim 15, wherein the at least one processing module creates the virtual user by registering the virtual user with the database system, associates the database user name with the virtual user, and records one or more roles that specify database access rights of the virtual user. ### Claim 18 (depends on 17) The system of claim 17, wherein the at least one processing module creates a plurality of virtual users each corresponding to one of a plurality of end users of the middle-tier application. ### Claim 19 (depends on 15) The system of claim 15, wherein the at least one processing module verifies the virtual user is a valid virtual user. ### Claim 20 (depends on 15) The system of claim 15, wherein the at least one processing module verifies that the request complies with the database access rights of the virtual user.