System and Method for Identifying Real Users Behind Application Servers
AssigneeDatiphy Inc.
InventorYeejang James Lin
Life of this patent
Estimating the term…
Abstract
A monitoring device and method for identifying the identity of users requesting database accesses. The data request from application servers to an application server are monitored and parsed. The SQL statements associated with the data request from the application server are also monitored and parsed, so are the SQL responses from the database server. The SQL responses are sent back to the user as data responses. The data responses are also monitored and parsed. The monitoring device matches the parsed data request with the parsed SQL statements, the parsed SQL responses, and the parsed data responses. By matching the string portion of these parsed data, the monitoring device can then identity the identity of the user making such data base request.
Claims8
A monitoring device for identifying the user identity of an application client accessing a database server, comprising:
- at least one monitoring port for connecting to a plurality of monitoring points and monitoring data requests and structure query language (SQL) instructions captured by the plurality of monitoring points;
- a parser for parsing the data requests and the SQL instructions;
- a comparator for comparing the parsed data requests and the parsed SQL instructions;
- and
- a storage unit for storing the data requests, the parsed data request, the SQL instructions, and the parsed SQL instructions,
- wherein
- the parser parses a data request and a SQL instruction,
- the comparator compares a data portion of the parsed data request with a data portion of the parsed SQL instruction, and
- if there is a match between the data portion of the parsed data request and the data portion of the parsed SQL instruction, the comparator associates the parsed SQL instruction with the user identity associated with the data request.
A method for identifying the user identity of an application client accessing a database server by a monitoring device, the monitoring device being connected to a plurality of monitoring points, the monitoring device having at least one monitoring port, a parser, a comparator, and a storage unit, comprising the steps of:
- parsing a data request, with a data portion, from a an application client;
- parsing a structure query language (SQL) instruction, with a data portion, related to the data request by the parser;
- comparing the data portion of the parsed data request with the data portion of the parsed SQL instruction;
- and
- if there is a match between the data portion of the parsed data request and the data portion of the parsed SQL instruction, associating the parsed SQL instruction with the user identity associated with the parsed data request.
Dependencies are inferred from the claim text.