Data security system and method

• US 5,751,949 A
• Filed: 05/23/1995
• Issued: 05/12/1998
• Est. Priority Date: 05/23/1995
• Status: Expired due to Term

• Current Assignee: Tekla PEHR LLC (Intellectual Ventures LLC)
• Original Assignee: MCI Incorporated (Verizon Communications Inc.)
• Inventors: Thomson, Robert David, Geiwitz, Roger
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Wright, Norman M.
• Application Number:
  US08/447,650
• Time in Patent Office: 1,085 Days
• Field of Search: 395/187.01, 395/186, 395/188.01, 380/4, 380/25, 380/23, 364/286.4, 364/286.5, 364/286.6
• US Class Current: 726/4
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

A security system and method are provided for securing user access to server tables having data arranged in rows and columns. The server table is contained in a server computer which is accessible by a plurality of user terminals joined thereto. The server computer includes relational database software for creating and maintaining tables, including the server table, and views defining subsets of the tables. A security table is stored in the computer for identifying authorized user access to preselected rows of the server table for pre-identified users. An access view is stored in the computer for automatically joining the security and server tables to limit user access to the server table to the preselected rows thereof based on the security table. A single security table may therefore be used and is readily updated by merely deleting, adding, or updating entries.

Claims

1. A security system for providing user authorized access to a server table having data arranged in rows and columns comprising:

a server computer for storing said server table;

a plurality of user terminals operatively joined to said computer for providing access to said server table;

relational database software stored in said computer and operable by an administrator for creating and maintaining tables, including said server table, and views defining subsets of said tables;

a security table stored in said computer for identifying authorized user access to preselected rows of said server table for pre-identified users; and

an access view stored in said computer for joining said security and server tables to limit user access to said server table to said preselected rows thereof based on said security table.

2. A security system according to claim 1 further comprising:

a preselected user identification ID associated with a given user;

a row label associated with each row of said server table; and

wherein;

said security table includes a column of preselected user ID'"'"'s and a corresponding column of authorized-access row labels for said user ID'"'"'s, respectively; and

said access view is configured to allow user access to authorized rows of said server table based on said user ID'"'"'s and row labels.

3. A security system according to claim 2 further comprising a plurality of said server tables and a respective plurality of said views for allowing row access to each of said server tables based on a respective one of said views configured therefor.

4. A security system according to claim 3 wherein:

said server tables have different row labels;

said security table includes a plurality of columns for said different row labels corresponding to said user ID'"'"'s; and

said views are configured for respective ones of said row labels.

5. A security system according to claim 3 wherein said security table includes a single record per row label per user ID.

6. A security system according to claim 5 wherein said security table includes duplicate user ID'"'"'s with different row labels, respectively.

7. A security system according to claim 3 wherein said relational database software is configured to allow user read access solely to said views and said security table, and no direct access to said server tables.

8. A method of securing access to a server table having data arranged in rows and columns and stored in a server computer configured with relational database software for creating and maintaining tables, including said server table, and views defining subsets of said tables, said method comprising:

creating a security table in said computer for authorizing user access to preselected rows of said server table for pre-identified users; and

creating an access view in said computer for automatically joining said security table and said server table to limit user access to said server table to preselected rows thereof based on said security table.

9. A method according to claim 8 further comprising allowing user access to said server table solely through said access view.

10. A method according to claim 9 further comprising:

providing a preselected user ID associated with a given user;

providing a row label associated with each row of said server table;

providing in said server table a column of preselected user ID'"'"'s and a corresponding column of authorized-access row labels for said user ID'"'"'s, respectively; and

providing in said access view authorization to allow user access to authorized rows of said server table based on said user ID'"'"'s and row labels.

11. A method according to claim 10 wherein said security table includes a single record per row label per user ID.

12. A method according to claim 11 wherein said security table includes duplicate user ID'"'"'s with different row labels, respectively.

13. A method according to claim 12 further comprising updating said security table by adding or deleting user ID and respective row label entries therein.