Back to results
US 8,027,993 B2Granted
Techniques for establishing and enforcing row level database security
AssigneeTeradota US, Inc.
InventorsDavid Holmes, Gary Christoph
Life of this patent
Estimating the term…
Abstract
Techniques for establishing and enforcing row level database security are presented. Qualifiers are used to uniquely identify particular rows of a database table. The qualifiers are selectively combined to generate a hash value. The hash value is associated with a user. The user is permitted to accesses selective rows of the database table in response to the rows represented in the hash value, which is associated with the user.
Claims11
A method, comprising:
- detecting an access attempt against a table of a database made by a user, the table includes row level security;
- acquiring a key that is associated with the user for the table, the key is a signature not specifically tied to any user including the user and the key is usable by other users the key is a hash value for identifying a particular combination of rows in the table for which access is being granted;
- acquiring qualifiers for a number of rows of the table via a column associated with the table having the qualifiers;
- reproducing the key using a selective combination of unique qualifier types;
- and
- identifying the selective rows from the selective combination of the unique qualifier types used to reproduce the key;
- and
- restricting the user's access to selective rows of the table in response to the key, the particular combination of rows identifies the selective rows, and the key provides the user and the other users having the key with access to the specific rows within the table.
5 more elements
A system comprising:
- a data access table residing in a database and accessible from a non-transitory machine-readable medium, the data access table includes a plurality of entries, and each entry having a user identifier and a key value;
- row level security service accessible in the machine-readable medium and to be processed by a machine, the row level security service is to access the data access table to determine when a particular row of a particular user table is accessible and viewable by a particular user in response to a particular key value noted in the data access table for a particular user identifier, the key value is a hash value that defines specific combination of rows for a specific table of the database for which access is permissible when the particular user or other users are associated with the key value and the key value represented as a signature that is independent of any user including the particular user and can be used and associated with the other users;
- and
- a key table residing in the database and accessible from the non-transitory machine-readable medium, wherein the key table includes a plurality of entries and each entry includes a selective combination of qualifier types, wherein each qualifier type identifies a particular row of a particular table, wherein the row level security service is to use the key table to identify selective rows of the particular user table that are viewable and accessible by the particular user.
1 more element
Dependencies are inferred from the claim text.