Back to results
US 7,127,462 B2Granted
Method and apparatus for managing a database and processing program therefor
AssigneeHitachi, Ltd.
InventorsShigeto Hiraga, Takashi Itaya
Life of this patent
Estimating the term…
Abstract
A database management system is provided for protecting data from being malicious update or deleted. The system is arranged to hold as a table attribute an insert-only attribute and a row deletion prohibition period, and as an access right attribute a row insertion date and time holding column name and to specify a row insertion date and time when a row was inserted, for disabling said date and time data. When requesting a table data update or a row deletion, the table attribute and the row insertion date and time are checked for preventing the malicious update and deletion.
Claims7
A database management method for managing a database including a table, said method comprising the steps of:
- entering a database definition request including identification information for specifying a database and access attribute information of said database;
- wherein said access attribute information includes tamper proof information regarding the table included in the database for protecting the database including the table from being falsely or erroneously updated, wherein the set of tamper proof information associated with the table applies to all users of the database;
- wherein said tamper proof information defines whether the table is associated with an insert-only attribute which indicates that the table can not be updated, row deletion prohibiting period information which indicates a time period during which a row of the table can not be deleted, beginning at the time the row was inserted into the database, and row insertion date and time holding information which indicates the date and time a row is inserted into the table;
- if the table is associated with said insert-only attribute, authorizing data insertion and access to data in the table of said database and not authorizing update of the table;
- if the table is associated with said insert-only attribute and said row deletion prohibiting period information, authorizing deletion of a row of the table of said database provided the time period during which the row of the table can not be deleted has expired;
- if the table is associated with said insert-only attribute and said row insertion date and time holding information, storing date and time information indicating the date and time a row is inserted into the table of said database;
- and
- disabling change of said insert-only attribute after said insert-only attribute is specified,
- wherein said attribute cannot be changed other than by a manager of an upper database level.
6 more elements
A database management apparatus for managing a database including a table, comprising:
- means for entering a database definition request identification information for specifying a database and access attribute information of said database,
- wherein said access attribute information includes tamper proof information regarding the table included in the database for protecting the database including the table from being falsely or erroneously updated wherein the set of tamper proof information associated with the table applies to all users of the database,
- wherein said tamper proof information defines whether the table is associated with an insert-only attribute which indicates that the table can not be updated, row deletion prohibiting period information which indicates a time period during which a row of the table can not be deleted, beginning at the time the row was inserted into the database, and row insertion date and time holding information which indicates the date and time a row is inserted into the table;
- and
- means for, if the table is associated with said insert-only attribute, authorizing data insertion and access to data in the table of said database and not authorizing update of the table, if the table is associated with said insert-only attribute and said row deletion prohibiting period information, authorizing deletion of a row of the table of said database provided the time period during which the row of the table can not be deleted has expired, if the table is associated with said insert-only attribute and said row insertion date and time holding information, storing date and time information indicating the date and time a row is inserted into the table of said database, and disabling change of said insert-only attribute after said insert-only attribute is specified,
- wherein said attribute cannot be changed other than by a manager on an upper database level.
3 more elements
A database management program, stored on a storage medium, for managing a database including a table, said database management program when executed cause a computer to perform the steps of:
- entering a database definition request including identification information for specifying a database and access attribute information of said database;
- wherein said access attribute information includes tamper proof information regarding the table included in the database for protecting the database including the table from being falsely or erroneously updated, wherein the set of tamper proof information associated with the table applies to all users of the database
- wherein said tamper proof information defines whether the table is associated with an insert-only attribute which indicates that the table can not be updated, row deletion prohibiting period information which indicates a time period during which a row of the table can not be deleted, beginning at the time the row was inserted into the database, and row insertion date and time holding information which indicates the date and time a row is inserted into the table;
- if the table is associated with said insert-only attribute, authorizing data insertion and access to data in the table of said database and not authorizing update of the table;
- if the table is associated with said insert-only attribute and said row deletion prohibiting period information, authorizing deletion of a row of the table of said database provided the time period during which the row of the table can not be deleted has expired;
- if the table is associated with said insert-only attribute and said row insertion date and time holding information, storing date and time information indicating the date and time a row is inserted into the table of said database;
- and
- disabling change of said attribute after said attribute is specified,
- wherein said attribute cannot be changed other than by a manager of an upper database level.
6 more elements
Dependencies are inferred from the claim text.