Controlling access to data in a database
AssigneeInternational Business Machines Corporation
InventorsTomohiro Iwahashi, Atsushi Noguchi, Naoko Nishiura, Kanako Tsuchida
Life of this patent
Estimating the term…
Abstract
A method and associated apparatus/system for controlling access to data in a database. A first login by a first user is accepted. A second login by the first user under the name of a second user is accepted. Third data is referred, based on first data of the database accessible from the first user and second data of the database accessible from the second user, upon request to refer to the database under the name of the first user or the second user after the first login and the second login are accepted.
Claims20
A method for accessing data in a database table, said method comprising:
- displaying a login page on a display screen of a first computer;
- receiving a first user ID and a first password associated with a first user via the displayed login page;
- sending, by a processor of the first computer, a first authentication request for the first user ID and the first password;
- in response to successful authentication of the first user ID and the first password, displaying an additional login page on the display screen of the first computer;
- receiving a second user ID, that differs from the first user ID, and a second password associated with a second user via the displayed additional login page;
- sending, by the processor of the first computer, a second authentication request for the second user ID and the second password without logging out the first user;
- in response to successful authentication of the second user ID and the second password, sending, by the processor of the first computer, to a second computer having access to the database table while the first user and the second user are simultaneously logged in via the first computer, a search request for first data from the database table that the first user is authorized to access and second data from the database table that the second user is authorized to access;
- after said sending the search request, receiving, by the processor of the first computer, the requested first and second data in the database table;
- and
- displaying, by the processor in a user interface on the display screen of the first computer, the first data that the first user is authorized to access and the second data that the second user is authorized to access.
A computer program product comprising a computer readable hardware storage device having computer readable program code stored thereon, wherein the computer readable program code, when executed by a processor of a first computer, causes the processor to:
- display a login page on a display screen of a first computer;
- receive a first user ID and a first password associated with a first user via the displayed login page;
- send a first authentication request for the first user ID and the first password;
- in response to successful authentication of the first user ID and the first password, display an additional login page on the display screen of the first computer;
- receive a second user ID, that differs from the first user ID, and a second password associated with a second user via the displayed additional login page;
- send a second authentication request for the second user ID and the second password without logging out the first user;
- in response to successful authentication of the second user ID and the second password, send to a second computer having access to a database table, while the first user and the second user are simultaneously logged in via the first computer, a search request for first data from the database table that the first user is authorized to access and second data from the database table that the second user is authorized to access;
- receive the requested first and second data in the database table after sending the search request;
- and
- display, in a user interface on the display screen of the first computer, the first data that the first user is authorized to access and the second data that the second user is authorized to access.
A computer system comprising:
- a display screen;
- a network interface;
- and
- a processor communicatively coupled to the display screen and the network interface, wherein the processor is configured to:
- output signals to the display screen to display a login page;
- receive a first user ID and a first password associated with a first user via the displayed login page;
- send, via the network interface, a first authentication request for the first user ID and the first password;
- in response to successful authentication of the first user ID and the first password, output signals to the display screen to display an additional login page;
- receive a second user ID, that differs from the first user ID, and a second password associated with a second user via the displayed additional login page;
- send, via the network interface, a second authentication request for the second user ID and the second password without logging out the first user;
- in response to successful authentication of the second user ID and the second password, send, via the network interface, to a second computer having access to a database table, while the first user and the second user are simultaneously logged in via the first computer, a search request for first data from the database table that the first user is authorized to access and second data from the database table that the second user is authorized to access;
- receive the requested first and second data in the database table after sending the search request;
- and
- output signals to the display screen to display, in a user interface on the display screen, the first data that the first user is authorized to access and the second data that the second user is authorized to access.
Dependencies are inferred from the claim text.