Method and apparatus for maintaining data integrity

• US 20030217164A1
• Filed: 05/17/2002
• Published: 11/20/2003
• Est. Priority Date: 05/17/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Cai, Jian, He, Xiaotan
• Granted Patent: US 7,039,649 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

Techniques are provided for controlling data access to maintain data integrity. A request is received to perform an action on a data element. The request is analyzed based on at least one data access rule associated with the data element. This analysis further utilizes a data structure model associated with the data element. The request is approved if the request satisfies the data access rule. The request is rejected if the request does not satisfy the data access rule.

Claims

1. A method comprising:

receiving a request to perform an action on a data element;

analyzing the request to perform an action based on at least one data access rule associated with the data element, wherein analyzing the request to perform an action further utilizes a data structure model associated with the data element;

approving the request to perform an action if the request satisfies the at least one access rule; and

rejecting the request to perform an action if the request is does not satisfy the at least one access rule.

2. The method of claim 1 wherein the data structure model maintains a status associated with each data element.

3. The method of claim 1 wherein the data structure model maintains a status associated with each data element, and wherein analyzing the request to perform an action includes analyzing a status associated with the data element.

4. The method of claim 1 wherein the data structure model maintains a status associated with each data element, and wherein approving the request to perform an action includes considering a status associated with the data element.

5. The method of claim 1 wherein the data structure model identifies relationships between the data element and at least one other data element.

6. The method of claim 1 wherein the data structure model identifies relationships between the data element and at least one other data element, and wherein approving the request to perform an action includes considering the relationship between the data element and the at least one other data element.

7. The method of claim 1 further comprising analyzing the request to perform an action based on a data structure model associated with the data element.

8. The method of claim 1 wherein the at least one data access rule is associated with a plurality of data elements.

9. The method of claim 1 wherein the at least one data access rule is associated with a data read operation.

10. The method of claim 1 wherein the at least one data access rule is associated with a data write operation.

11. The method of claim 1 wherein the at least one data access rule is associated with a data delete operation.

12. The method of claim 1 wherein the data element is a node in a data structure model.

13. The method of claim 1 wherein the request is a hypertext transfer protocol request message including information regarding the action to be performed.

14. The method of claim 1 wherein the request to perform an action is a hypertext transfer protocol request message including information regarding the data element on which the action is to be performed.

15. The method of claim 1 wherein rejecting the request further comprises:

determining a typical time period that a data element is unavailable during a data access operation; and

instructing the source of the request to resubmit the request to perform an action after the typical time period.

16. A method comprising:

receiving a hypertext transfer protocol (HTTP) request message including information relating to a requested action and a particular data element;

analyzing the requested action based on a set of data access rules associated with the data element;

executing the requested action if the requested action satisfies the set of data access rules; and

rejecting the requested action if the request does not satisfy the set of data access rules.

17. The method of claim 16 wherein the data access rules are analyzed with reference to a data structure model associated with the data element.

18. The method of claim 16 wherein analyzing the requested action is further based on relationships between the particular data element and at least one other data element.

19. The method of claim 16 wherein analyzing the requested action is further based on a status associated with the data element.

20. The method of claim 16 wherein executing the requested action includes changing a status of the particular data element to prevent other requested actions from being executed on the particular data element.

21. The method of claim 20 further comprising resetting the status of the particular data element after completing the requested action.

22. The method of claim 20 further comprising preventing modification of the particular data element for a period of time after completing the requested action.

23. A method comprising:

generating a request to perform an action on a data element;

communicating the request to perform an action to a data access controller, the data access controller being configured to analyze the request to perform an action based on at least one data access rule and a data structure model, wherein the data structure model is associated with the data element;

receiving an approval to perform the action if the request satisfies the at least one data access rule; and

receiving a rejection with respect to performing the action if the request does not satisfy the at least one data access rule.

24. The method of claim 23 wherein the data structure model maintains metadata associated with a set of data.

25. The method of claim 23 wherein the data structure model identifies a status associated with the data element.

26. The method of claim 23 wherein the data structure model identifies a status associated with the data element and further identifies relationships between the data element and a plurality of other data elements.

27. A computer-readable medium comprising:

instructions for causing one or more processors to receive a request to perform an action on a data element;

instructions for causing one or more processors to analyze the request to perform an action based on a plurality of data access rules and a data structure model, wherein the data structure model is associated with the data element;

instructions for causing one or more processors to approve the request to perform an action if the request satisfies the plurality of data access rules; and

instructions for causing one or more processors to reject the request to perform an action if the request does not satisfy the plurality of data access rules.

28. An apparatus comprising:

a data access controller configured to receive data access requests from a plurality of computing devices;

a permission verifier coupled to the data access controller and configured to determine whether to approve a particular data access request;

a data structure model coupled to the permission verifier, wherein the data structure model identifies relationships between a plurality of data elements; and

a plurality of data access rules accessible by the permission verifier, wherein the plurality of data access rules are applied by the permission verifier when determining whether to approve a particular data access request.

29. The apparatus of claim 28 further comprising a set of data coupled to the data structure model, wherein the data structure model identifies relationships between data elements in the set of data.

30. The apparatus of claim 29 wherein the data structure model periodically receives updated data structure information from the set of data.

31. An apparatus comprising:

means for receiving a request to perform an action related to a data element;

means for analyzing the request to perform an action based on a data access rule;

means for identifying a data structure model associated with the data element;

means for executing the request to perform an action if the request satisfies the data access rule; and

means for rejecting the request to perform an action if the request does not satisfy the data access rule.

32. The apparatus of claim 31 wherein the means for analyzing the request further utilizes the data structure model to analyze the request to perform an action.

33. The apparatus of claim 31 wherein the received request is a hypertext transfer protocol request message including information regarding the action and an identity of the data element on which the action is to be performed.