Back to results
US 9,436,730 B2Granted
Methods and systems for validating input data
AssigneeThe Boeing Compoany
InventorsMingyan Li, Changzhou Wang
Life of this patent
Estimating the term…
Abstract
Methods and systems for use in validating input data in a computing system. Input data associated with a destination software application, such as a database, is received at a computing system. The input data is forwarded to an intermediate software application, such as a web application. When the input includes one or more patterns, a query produced by the intermediate software application based on the input data is validated, such as by comparing the structure of the query to one or more expected query structures. If the validation succeeds, the query is forwarded to the destination software application. Otherwise, the query is discarded.
Claims14
A method for validating input data in a computing system, said method comprising:
- receiving, at a validation computing system, at least one input string from a client computing device;
- performing, by the validation computing system, a first validation step, wherein the first validation step includes comparing the at least one input string to a plurality of predetermined patterns;
- forwarding, by the validation computing system, the at least one input string to an application server, wherein the application server is configured to populate a query based on the at least one input string, the query associated with a database;
- receiving, by the validation computing system, the query from the application server;
- sending, by the validation computing system when the first validation step identifies that the at least one input string is valid, the query to the database for execution and returning a result of the executed query to the client computing device;
- performing, by the validation computing system when the first validation step identifies that the at least one input string is invalid, a second validation step, wherein the second validation step includes analyzing a structure of the query;
- sending, by the validation computing system when the second validation step identifies that the query is valid, the query to the database for execution and returning the result of the executed query to the client computing device;
- and
- discarding, by the validation computing system, the query when the second validation step identifies that the query is invalid.
6 more elements
A system for validating input data in a computing system, said system comprising:
- a storage device configured to store a plurality of predetermined patterns;
- a communications unit configured to receive at least one input string associated with a destination software application from a client computing device;
- and
- a processor unit coupled to said storage device and said communications unit, wherein said processor unit is programmed to:
- perform a first validation step, wherein the first validation step includes comparing the at least one input string to the plurality of predetermined patterns;
- forward the at least one input string to an intermediate software application, wherein the intermediate software application is configured to populate a query based on the at least one input string, the query associated with the destination software application;
- receive the query from the intermediate software application;
- send, when the first validation step identifies that the at least one input string is valid, the query to the destination software application for execution and return a result of the executed query to the client computing device;
- perform, when the first validation step identifies that the at least one input string is invalid, a second validation step, wherein the second validation step includes analyzing a structure of the query;
- send, when the second validation step identifies that the query is valid, the query to the destination software application for execution and return the result of the executed query to the client computing device;
- and
- discard the query when the second validation step identifies that the query is invalid.
9 more elements
One or more non-transitory computer-readable media having computer-executable components, said components when executed by at least one processor unit cause the processor unit to:
- receive at least one input string from a client computing device;
- perform a first validation step, wherein the first validation step includes comparing the at least one input string to a plurality of predetermined patterns;
- forward the at least one input string to an intermediate software application, wherein the intermediate software application is configured to populate a query based on the at least one input string, the query associated with a destination software application;
- receive the query from the intermediate software application;
- send, when the first validation step identifies that the at least one input string is valid, the query to the destination software application for execution and return a result of the executed query to the client computing device;
- perform, when the first validation step identifies that the at least one input string is invalid, a second validation step, wherein the second validation step includes analyzing a structure of the query;
- send, when the second validation step identifies that the query is valid, the query to the destination software application for execution and return the result of the executed query to the client computing device;
- and
- discard the query when the second validation step identifies that the query is invalid.
6 more elements
Dependencies are inferred from the claim text.