# US 2019/0318113 A1 · Accessing Data Stored In A Database System > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0318113 A1 - Document ID: US20190318113A1 - Status: Published application - Kind: A1 - Application number: 16/343,348 - Filed: 2016-10-21 - Published: 2019-10-17 - Earliest claimed: 2016-10-21 - Assignees: Barcelona Supercomputing Center—Centro Nacional De SupercomputacióN; Universitat Politecnica De Catalunya - Applicants: Barcelona Supercomputing Center - Centro Nacional De Supercomputacion; Universitat Politecnica De Catalunya - Inventors: Antonio Cortes Rossello; Jonathan Marti Fraiz; Anna Queralt Calafat; Daniel Gasull Moreira - Web page: https://patentgrep.com/patent/US20190318113A1 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 16/22: Indexing; Data structures therefor; Storage structures - G06F 16/2365: {Ensuring data consistency and integrity} - G06F 16/2443: {Stored procedures} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Computer-implemented methods are disclosed for accessing data stored in a database system comprising a controller configured in such a way that data is stored with relationships between data-elements of the data, and with enforcement of data integrity. The method comprises receiving, by the controller, a call by first user to a first access-procedure for accessing a first data-element, the first access-procedure including a call to second access-procedure for accessing a second data-element based on a relationship between the first and second data-elements; performing, by the controller, the call to the first access-procedure; verifying, by the controller, whether the first user is authorized to access the second data-element according to access authorization data; performing, by the controller, the call to the second access-procedure; and returning, by the controller, a result of the access to the second data-element including an indicator of authorized access to the second data-element. Computer programs and database systems suitable for performing such methods are also disclosed. ## Claims ### Claim 1 A computer-implemented method for accessing data stored in a database system comprising a controller configured in such a way that the data is stored with relationships between data-elements of the data, and with enforcement of integrity of the data; wherein a first data-element and a second data-element of the data are stored in the database system with a relationship between the first data-element and the second data-element; wherein the first data-element is stored in the database system encapsulated by one or more first access-procedures so that the first data-element is accessible exclusively by calling the one or more first access-procedures; wherein the second data-element is stored in the database system encapsulated by one or more second access-procedures so that the second data-element is accessible exclusively by calling the one or more second access-procedures; wherein the database system further stores access authorization data indicating, at data-element level, whether access to second data-element is authorized to a first user identified in the database system through corresponding credentials that enable the first user to log in and operate in the database system; the method comprising: receiving, by the controller, a call by the first user to a first access-procedure of the one or more first access-procedures for attempting to access the first data-element, said first access-procedure of the one or more first access-procedures including a call to a second access-procedure of the one or more second access-procedures for attempting to access the second data-element based on the relationship between first and second data-elements; performing, by the controller, the call to said first access-procedure of the one or more first access-procedures; verifying, by the controller, whether the first user is authorized to access the second data-element according to the access authorization data; performing, by the controller, the call to said second access-procedure of the one or more second access-procedures; and returning, by the controller, a result of the attempt to access the second data-element, including an indicator of whether the first user is authorized to access the second data-element. ### Claim 2 (depends on 1) A computer-implemented method according to claim 1, wherein the second data-element is stored in the database system with data indicating whether the second data-element belongs to a set of data-elements created by a second user. ### Claim 3 (depends on 2) A computer-implemented method according to claim 2, wherein the access authorization data indicates whether access to the data-elements in the set of data-elements created by the second user is authorized to the first user. ### Claim 4 (depends on 3) A computer-implemented method according to claim 3, wherein verifying whether the first user is authorized to access the second data-element comprises verifying, by the controller, whether the first user is authorized to access the data-elements in the set of data-elements created by the second user. ### Claim 5 (depends on 1) A computer-implemented method according to claim 1, wherein the access authorization data indicating whether access to the second data-element is authorized to the first user includes a start date of the authorization. ### Claim 6 (depends on 5) A computer-implemented method according to claim 5, wherein verifying whether the first user is authorized to access the second data-element comprises verifying, by the controller, whether a current date is later than the start date of the authorization to access the second data-element. ### Claim 7 (depends on 1) A computer-implemented method according to claim 1, wherein the access authorization data indicating whether access to the second data-element is authorized to the first user includes an end date of the authorization. ### Claim 8 (depends on 7) A computer-implemented method according to claim 7, wherein verifying whether the first user is authorized to access the second data-element comprises verifying, by the controller, whether a current date is earlier than the end date of the authorization to access the second data-element. ### Claim 9 (depends on 1) A computer-implemented method according to claim 1, wherein the database system stores call authorization data indicating, at access-procedure level, whether the first user is authorized to call the second access-procedure of the one or more second access-procedures; wherein the method further comprises verifying, by the controller, whether the first user is authorized to call the second access-procedure of the one or more second access-procedures according to the call authorization data; and wherein the returned indicator of whether the first user is authorized to access the second data-element further indicates whether the first user is authorized to call the second access-procedure of the one or more second access-procedures. ### Claim 10 (depends on 9) A computer-implemented method according to claim 9, wherein the second access-procedure of the one or more second access-procedures is stored in the database system with data indicating whether said second access-procedure belongs to a set of access-procedures created by a third user. ### Claim 11 (depends on 10) A computer-implemented method according to claim 10, wherein the call authorization data indicates whether call to access-procedures in the set of access-procedures created by the third user is authorized to the first user. ### Claim 12 (depends on 11) A computer-implemented method according to claim 11, wherein verifying whether the first user is authorized to call the second access-procedure of the one or more second access-procedures comprises verifying, by the controller, whether the first user is authorized to call the access-procedures in the set of access-procedures created by the third user. ### Claim 13 (depends on 1) A computer-implemented method according to claim 1, wherein the call authorization data indicating whether the first user is authorized to call the second access-procedure of the one or more second access-procedures includes a start date of the authorization. ### Claim 14 (depends on 13) A computer-implemented method according to claim 13, wherein verifying whether the first user is authorized to call the second access-procedure of the one or more second access-procedures comprises verifying, by the controller, whether a current date is later than the start date of the authorization to call the second access-procedure of the one or more second access-procedures. ### Claim 15 (depends on 1) A computer-implemented method according to claim 1, wherein the call authorization data indicating whether the first user is authorized to call the second access-procedure of the one or more second access-procedures includes an end date of the authorization. ### Claim 16 (depends on 15) A computer-implemented method according to claim 15, wherein verifying whether the first user is authorized to call the second access-procedure of the one or more second access-procedures comprises verifying, by the controller, whether a current date is earlier than the end date of the authorization to call the second access-procedure of the one or more second access-procedures. ### Claim 17 (depends on 1) A computer-implemented method according to claim 1, wherein the call authorization data further indicates whether a fourth user who created the first access-procedure of the one or more first access-procedures in the database system is authorized to call the second access-procedure of the one or more second access-procedures. ### Claim 18 (depends on 17) A computer-implemented method according to claim 17, wherein the second access-procedure of the one or more second access-procedures is called, by the controller, as if the first user were authorized to call said second access-procedure based on whether the first user is authorized to call the first access-procedure of the one or more first access-procedures and the fourth user, who created said first access-procedure, is authorized to call the second access-procedure of the one or more second access-procedures. ### Claim 19 (depends on 1) A computer program product comprising program instructions for causing a computing system to perform a computer-implemented method according to claim 1 for accessing data stored in a database system. ### Claim 20 (depends on 19) A computer program product according to claim 19, embodied on a storage medium. ### Claim 21 (depends on 19) A computer program product according to claim 19, carried on a carrier signal. ### Claim 22 (canceled) ### Claim 23 (depends on 1) A database system for accessing data stored in the database system, comprising a controller configured in such a way that the data is stored with relationships between data-elements of the data, and with enforcement of integrity of the data; wherein a first data-element and a second data-element of the data are stored in the database system with a relationship between the first data-element and the second data-element; wherein the first data-element is stored in the database system encapsulated by one or more first access-procedures so that the first data-element is accessible exclusively by calling the one or more first access-procedures; wherein the second data-element is stored in the database system encapsulated by one or more second access-procedures so that the second data-element is accessible exclusively by calling the one or more second access-procedures; wherein the database system further stores access authorization data indicating, at data-element level, whether access to second data-element is authorized to a first user identified in the database system through corresponding credentials that enable the first user to log in and operate in the database system; and wherein the controller comprises a memory and a processor, embodying instructions stored in the memory and executable by the processor, the instructions comprising functionality to execute a computer-implemented method according to claim 1 for accessing data stored in the database system.