DATABASE FOR A CAPTURE SYSTEM

• US 20100191732A1
• Filed: 01/27/2009
• Published: 07/29/2010
• Est. Priority Date: 08/23/2004
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Broeker, Stephen, Lowe, Rick
• Granted Patent: US 8,560,534 B2
• Time in Patent Office: Days
• US Class Current: 707/737
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A tag database storing tags indexing captured object can be searched efficiently. In one embodiment, such a search begins by receiving a query for one or more objects captured by a capture system, and determining whether a query time range exceeds a time range of a set of fast tables. In one embodiment, the invention further includes searching the set of fast tables if the query time range does not exceed the time range of the fast tables, the set of fast tables containing tags having meta-data related to captured objects. In one embodiment, the invention further includes searching a set of hourly tables if the query time range does exceed the time range of the fast tables. In one embodiment, the present invention further includes searching a set of daily tables if the query time range also exceeds the time range of the hourly tables.

Claims

1. (canceled)

2. (canceled)

3. (canceled)

4. (canceled)

5. (canceled)

6. (canceled)

7. (canceled)

8. (canceled)

9. (canceled)

10. (canceled)

11. (canceled)

12. A computer implemented method comprising:

receiving a query for one or more objects captured by a capture system;

determining whether a query time range exceeds a time range of a set of fast tables; and

searching the set of fast tables if the query time range does not exceed the time range of the fast tables, the set of fast tables containing tags indexing captured objects in storage and having meta-data related to the captured objects.

13. The computer implemented method of claim 12, further comprising searching a set of hourly tables if the query time range does exceed the time range of the fast tables.

14. The computer implemented method of claim 13, further comprising searching a set of daily tables if the query time range also exceeds the time range of the hourly tables.

15. The computer implemented method of claim 14, wherein the fast tables have a finer granularity than the hourly tables, and the hourly tables have a finer granularity than the daily tables.

16. (canceled)

17. (canceled)

18. (canceled)

19. (canceled)

20. (canceled)

21. (canceled)

22. (canceled)

23. (canceled)

24. (canceled)

25. (canceled)

26. (canceled)

27. (canceled)