TECHNIQUE OF CONTROLLING ACCESS TO DATABASE

• US 20090187612A1
• Filed: 10/20/2008
• Published: 07/23/2009
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ohkawa, Masahiro, Sakaguchi, Akira, Kaijima, Soh
• Granted Patent: US 8,949,192 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/25 Integrating or interfacing systems involving database management systems
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor

Abstract

A method of controlling access to a database includes autonomously archiving data within a database from a first storage device into a second storage device, according to an archive condition; the archive condition being input in conjunction with the data and being associated with the data; accepting an input of an access command to the database; determining whether data to be accessed in response to the access command input has already been archived in the second storage device based on the access command and the archive condition; and accessing data included in the database or data archived in the second storage device according to the access command based on the determination.

Claims

1. A system for controlling access to a database, comprising:

a data archive module configured to automatically archive data in a database stored in a first storage device into a second storage device, said automatic archival of said data satisfying an archive condition;

said archive condition being input with said data and being associated with said data;

a command input module configured to accept an input of an access command to said database;

an archive determining module configured to determine whether data to be accessed in response to said access command has already been archived in said second storage device, based on said access command and said archive condition; and

an access module configured to access data included in said database or data archived in said second storage device according to said access command based on said determination made by said archive determining module.

2. The system of claim 1, further comprising a setting module configured to set access permissions for data already archived in said second storage device according to user status;

wherein access to data archived by said data archive module is made via a said access command;

said setting module analyzing said access command and determining that said access command lacks proper user status, then said access module does not access said archived data.

3. The system of claim 1, further comprising a control storage module configured to store control data,

wherein said data archive module stores said archive condition input to archive data in said second storage device in said control storage module, and

said access module determines whether data to be accessed in response to said access command satisfies said archive condition stored in said control storage module, based on said archive condition and said access command.

4. The system of claim 1, wherein said database stored in said first storage device comprises a first table,

said data archive module being configured to read and store a part of said first table as a new second table in said second storage device, and delete said part of said first table from said database.

5. The system of claim 4, wherein said access module accesses said database or said data already archived by rewriting designation of a table to be accessed in said access command from said first table to a table which is made by coupling said first table and said second table together.

6. The system of claim 4, further comprising a command cache storing an access command input in a past and a compiled command which is a command prepared by compiling said access command and issued to said database by said access module in association with each other.

7. The system of claim 6, wherein in accordance with further acceptance of an input of an archive condition to be satisfied by data to be additionally archived in said second storage device from said database, said data archive module further archives said data in said database which satisfies said archive condition in said second storage device, and clears said command cache.

8. A method of controlling access to a database, comprising:

autonomously archiving data within a database from a first storage device into a second storage device, according to an archive condition;

said archive condition being input in conjunction with said data and being associated with said data;

accepting an input of an access command to said database;

determining whether data to be accessed in response to said access command input has already been archived in said second storage device, based on said access command and said archive condition; and

accessing data included in said database or data archived in said second storage device according to said access command based on said determination.

9. The method of claim 8, further comprising:

setting access permissions for data already archived in said second storage device according to user status;

accessing data archived by a data archive module by inputting a said access command;

a setting module analyzing said access command;

if said setting module determines that said access command lacks proper user status, then an access module does not access said archived data.

10. The method of claim 9, further comprising

storing said archive condition in a control storage module configured to store control data;

determining whether data to be accessed in response to said access command satisfies said archive condition stored in said control storage module, based on said archive condition and said access command.

11. The method of claim 9, further comprising compiling and storing said access command in a command cache.

12. The method of claim 9, wherein archiving said data further comprises removing a part of a first table from said first storage device and placing said part in a second table in said second storage device.

13. The method of claim 12, further comprising accessing said database by said access module accesses by creating an access table based on said access command by coupling said first table and said second table together.

14. The method of claim 13, further comprising

preparing a compiled command by compiling said access command;

storing said access command and said compiled command in a command cache; and

issuing said compiled command to said database by said access module.

15. The method of claim 14, further comprising:

accepting an input of an archive condition;

said archive condition defining a criteria for moving designated data within said database to said second storage device;

archiving said designated data by said data archive module to said second storage device upon fulfillment of said criteria; and

clearing said command cache.

16. The method of claim 15, further comprising

determining whether data to be accessed in response to said access command satisfies a first preset check constraint;

if said first preset check constraint is satisfied, then

permitting access to said first table on condition that said first check constraint is satisfied;

determining whether data to be accessed in response to said access command satisfies a second preset check constraint;

if said second preset check constraint is satisfied, then

permitting access to said second table on condition that said second check constraint is satisfied.

17. The method of claim 16, further comprising:

accepting said archive condition by said data archive module;

archiving data designated by said archive condition upon fulfillment of said archive condition to said second storage device; and

then

setting a logical sum as said second check constraint and said condition input to additionally archive said data, newly as said second check constraint, and sets a logical sum of said condition already set as said first check constraint and negation of said condition input to additionally archive said data, newly as said first check constraint.

18. The method of claim 8, further comprising

setting a read only attribute to data segment archived in said second storage device based on a received instruction, and

inhibiting otherwise authorized access to said data segment until said read only attribute is set to said archived data.

19. The method of claim 8, further comprising a third storage device, wherein data from said first or second storage devices is archived in said third storage device, said data satisfying an archive condition.

20. A computer program product for controlling access to a database, the computer program product comprising:

a computer usable medium having computer usable program code embodied therewith, the computer usable program code comprising;

computer usable program code configured to store data in a database in a first storage device within a database, said data being accompanied by an archive condition, said archive condition defining at least one criterion to be met before archiving said data in a second storage device;

computer usable program code configured to accept an input of an access command to said database;

computer usable program code configured to determine whether data to be accessed in response to said access command input has already been archived in said second storage device, based on said access command and said archive condition; and

computer usable program code configured to access data included in said database or data archived in said second storage device according to said access command based on said determination made by said determining step.