# US 9,882,718 B2 · Using a module for opening multiple databases

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,882,718 B2
- Document ID: US9882718B2
- Status: Granted
- Kind: B2
- Application number: 15/082,577
- Filed: 2016-03-28
- Published: 2016-07-21
- Granted: 2018-01-30
- Earliest claimed: 2009-11-30
- Assignees: Red Hat, Inc.
- Applicants: Red Hat, Inc.
- Inventors: Robert Relyea
- Web page: https://patentgrep.com/patent/US9882718B2

## CPC

- H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- G06F 21/602: {Providing cryptographic facilities or services}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/102: {Entity profiles}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04L 63/168: {above the transport layer}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A processing device is to determine that a module, executed from a memory by the processing device, is an initialized module in view of the module previously opening a first database. The processing device is to create a slot to open a second database using the initialized module.

## Claims

### Claim 1

A method comprising:
determining that a module, executed from a memory by a processing device, is an initialized module in view of the module previously opening a first database; and
causing, by the processing device, the initialized module to create a slot to open a second database for access by an application.

### Claim 2 (depends on 1)

The method of claim 1, further comprising identifying the second database from a request from the application to access data that is stored in the second database.

### Claim 3 (depends on 2)

The method of claim 2, wherein identifying the second database comprises:
receiving load data that identifies the second database, the load data being based on user-configurable policy information.

### Claim 4 (depends on 3)

The method of claim 3, wherein the user-configurable policy information is stored in a lightweight directory access protocol (LDAP)-based database.

### Claim 5 (depends on 3)

The method of claim 3, wherein the user-configurable policy information identifies the second database to be opened in view of at least one of: a server type, an application type, an application name, or user type.

### Claim 6 (depends on 3)

The method of claim 3, wherein receiving the load data comprises:
receiving an initialization request to access security data stored in a database;
opening a system database in response to receiving the initialization request, wherein the system database identifies a module database interface;
accessing, via the module database interface, user-configurable policy information stored in an LDAP-based database; and
obtaining the load data for opening the second database.

### Claim 7 (depends on 1)

The method of claim 1, wherein determining that the module is an initialized module comprises:
attempting to initialize the initialized module; and
receiving an error code indicating that the initialized module is initialized.

### Claim 8 (depends on 1)

The method of claim 1, wherein the initialized module comprises at least one of a soft-token module for opening a database storing security data or a Privacy Enhanced Mail (PEM) module for opening a database storing a PEM file.

### Claim 9 (depends on 1)

The method of claim 1, wherein the data comprises at least one of a key, a certificate, or a Privacy Enhanced Mail (PEM) file.

### Claim 10

A system comprising:
a memory; and
a processing device operatively coupled to the memory, the processing device to:
determine that a module, executed from the memory by the processing device, is an initialized module in view of the module previously opening a first database; and
cause the initialized module to create a slot to open a second database for access by an application.

### Claim 11 (depends on 10)

The system of claim 10, the processing device to identify the second database from a request from the application to access data that is stored in the second database.

### Claim 12 (depends on 10)

The system of claim 10, the processing device to receive load data that identifies the second database, the load data being based on user-configurable policy information.

### Claim 13 (depends on 12)

The system of claim 12, wherein the user-configurable policy information identifies the second database in view of at least one of: a server type, an application type, an application name, or a user type.

### Claim 14 (depends on 12)

The system of claim 12, the processing device to:
receive an initialization request to access security data stored in a database;
open a system database in response to receiving the initialization request, wherein the system database identifies a module database interface;
access, via the module database interface, user-configurable policy information stored in an LDAP-based database; and
obtain the load data for opening the second database.

### Claim 15 (depends on 10)

The system of claim 10, the processing device to:
attempt to initialize the initialized module; and
receive an error code indicating that the initialized module is initialized.

### Claim 16 (depends on 10)

The system of claim 10, wherein the data comprises at least one of a key, a certificate, or a Privacy Enhanced Mail (PEM) file.

### Claim 17

A non-transitory computer-readable medium having instructions encoded thereon which, when executed by a processing device, cause the processing device to:
determine that a module, executed from the memory by the processing device, is an initialized module in view of the module previously opening a first database; and
cause, by the processing device, the initialized module to create a slot to open a second database for access by an application.

### Claim 18 (depends on 17)

The non-transitory computer-readable medium of claim 17, the processing device to:
receive load data that identifies the second database, the load data being based on user-configurable policy information.

### Claim 19 (depends on 18)

The non-transitory computer-readable medium of claim 18, the processing device to:
receive an initialization request to access security data stored in a database;
open a system database in response to receiving the initialization request, wherein the system database identifies a module database interface;
access, via the module database interface, user-configurable policy information stored in an LDAP-based database; and
obtain the load data for opening the second database.

### Claim 20 (depends on 17)

The non-transitory computer-readable medium of claim 17, the processing device to:
attempt to initialize the initialized module; and
receive an error code indicating that the initialized module is initialized.
