US 2016/0104002 A1 · ROW LEVEL SECURITY INTEGRATION OF ANALYTICAL DATA STORE WITH CLOUD ARCHITECTURE

Abstract

A predicate-based row level security system is used when workers build or split an analytical data store. According to one implementation, predicate-based means that security requirements of source transactional systems can be used as predicates to a rule base that generates one or more security tokens, which are associated with each row as attributes of a dimension. Similarly, when an analytic data store is to be split, build job, user and session attributes can be used to generate complementary security tokens that are compared to security tokens of selected rows. Efficient indexing of a security tokens dimension makes it efficient to qualify row retrieval based on security criteria.

Claims22

Dependent claims

A method of building a secure read only analytic data structure, the method including:

accessing a data set from at least one transactional data management system, wherein data in the data set has security attributes managed by the transactional data management system;
processing first security translation rules that accept the security attributes as predicates and generating one or more security tokens for each object in the data set;
and
storing the one or more security tokens by association with each secured object in a read only analytic data structure generated from the data set, wherein the stored security tokens govern access to each secured object.

1 more element

A system of building a secure read only analytic data structure, the system including:

a processor and a computer readable storage medium storing computer instructions configured to cause the processor to:
access data set from at least one transactional data management system, wherein data in the data set has security attributes managed by the transactional data management system;
process first security translation rules that accept the security attributes as predicates and generating one or more security tokens for each object in the data set;
and
store the one or more security tokens by association with each secured object in a read only analytic data structure generated from the data set, wherein the stored security tokens govern access to each secured object.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application

14/512,230Filed 10 Oct 2014

Published

14 Apr 2016

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…
G06F 16/1865
File system types: transactional file systems
G06F 16/254
Integrating or interfacing systems involving database management systems: extract, transform and load [ETL] procedures, e.g. ETL data flows in…
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities

Row level security integration of analytical data store with cloud architecture

Life of this patent

Row level security integration of analytical data store with cloud architecture

Life of this patent

Abstract

Claims22