Compensation for security procedures in different database management systems

• US 5,943,671 A
• Filed: 09/25/1997
• Issued: 08/24/1999
• Est. Priority Date: 09/29/1994
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Yun, Kleewein, James C., Lin, Eileen T.
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): HOMERE, JEAN RAYMOND
• Application Number:
  US08/937,771
• Time in Patent Office: 698 Days
• Field of Search: 707/4, 707/9, 707/10, 707/102, 395/200.31, 395/200.53, 395/200.57
• US Class Current: 1/1
• CPC Class Codes: G06F 16/256 in federated or virtual databases
• CPC Class Codes: Y10S 707/99934 Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99952 Coherency, e.g. same view to multiple users
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

A system, method and computer program product for providing a common interface to a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among the plurality of heterogeneous database management systems. The system compensates for security log-in procedure differences between the heterogeneous database management systems.

Claims

1. A method for providing a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, comprising the steps of:

(a) receiving a local user identification when a user logs into said client;

(b) receiving a database statement issued by said client;

(c) identifying which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

(d) selecting one of said identified data sources;

(e) determining whether a record associated with said user and said selected database instance exists in a log-in table;

(f) if a record associated with said user and said selected data source exists in said log-in table, then logging into said selected data source using information contained in said record; and

(g) if a record associated with said user and said selected data source does not exist in said log-in table, then logging into said selected data source using said local user identification.

2. The method of claim 1, wherein step (a) further comprises the step of receiving a local password when said user logs into said client, and wherein step (g) further comprises the step of logging into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.

3. The method of claim 1, further comprising the step of:

(h) performing steps (d)-(g) for each of said identified data sources.

4. A method for providing a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, comprising the step of:

(1) logging a user into a database instance transparently after a user logs into said client to thereby compensate for differences in security log-in procedures between said heterogeneous database management systems, wherein the logging step further includes the steps of;

(a) receiving a local user identification when a user logs into said client;

(b) receiving a database statement issued by said client;

(c) identifvig which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

(d) selecting one of said identified data sources;

(e) determining whether a record associated with said user and said selected database instance exists in a log-in table;

(f) if a record associated with said user and said selected data source exists in said log-in table, then logging into said selected data source using information contained in said record; and

(g) if a record associated with said user and said selected data source does not exist in said log-in table, then logging into said selected data source using said local user identification.

5. The method of claim 4 wherein step (a) further comprises the step of receiving a local password when said user logs into said client, and wherein step (g) further comprises the step of logging into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.

6. The method of claim 4, further comprising the step of:

(h) performing steps (d)-(g) for each of said identified data sources.

7. A system for providing a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, comprising:

first means for receiving a local user identification when a user logs into said client;

second means for receiving a database statement issued by said client;

third means for identifying which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

fourth means for selecting one of said identified data sources;

fifth means for determining whether a record associated with said user and said selected database instance exists in a log-in table;

sixth means for logging into said selected data source using information contained in said record if a record associated with said user and said selected data source exists in said log-in table; and

seventh means for logging into said selected data source using said local user identification if a record associated with said user and said selected data source does not exist in said log-in table.

8. The system of claim 7, wherein said first means further comprises means for receiving a local password when said user logs into said client, and wherein said seventh means further comprises means for logging into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.

9. A system for providing a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, comprising:

an interface module that logs a user into a database instance transparently after a user logs into said client to thereby compensate for differences in security log-in procedures between said heterogeneous database management systems, wherein said interface module comprises;

first means for receiving a local user identification when a user logs into said client;

second means for receiving a database statement issued by said client;

third means for identifying which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

fourth means for selecting one of said identified data sources;

fifth means for determining whether a record associated with said user and said selected database instance exists in a log-in table;

sixth means for logging into said selected data source using information contained in said record if a record associated with said user and said selected data source exists in said log-in table; and

seventh means for logging into said selected data source using said local user identification if a record associated with said user and said selected data source does not exist in said log-in table.

10. The system of claim 9, wherein said first means further comprises means for receiving a local password when said user logs into said client, and wherein said seventh means further comprises means for logging into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.

11. A computer program product for use with a computer system, said computer program product comprising:

a computer usable medium having computer readable program code means embodied in said medium for causing the computer system to provide a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, said computer readable program code means comprising;

first computer readable program code means for enabling the computer system to log a user into a database instance transparently after a user logs into said client to thereby compensate for differences in security log-in procedures between said heterogeneous database management, wherein said first computer readable program code means comprises;

first computer readable program code means for enabling the computer system to receive a local user identification when a user logs into said client;

second computer readable program code means for enabling the computer system to receive a database statement issued by said client;

third computer readable program code means for enabling the computer system to identify which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

fourth computer readable program code means for enabling the computer system to select one of said identified data sources;

fifth computer readable program code means for enabling the computer system to determine whether a record associated with said user and said selected database instance exists in a log-in table;

sixth computer readable program code means for enabling the computer system to log into said selected data source using information contained in said record if a record associated with said user and said selected data source exists in said log-in table; and

seventh computer readable program code means for enabling the computer system to log into said selected data source using said local user identification if a record associated with said user and said selected data source does not exist in said log-in table.

12. The computer program product of claim 11, wherein said first computer readable program code means further comprises computer readable program code means for enabling the computer to receive a local password when said user logs into said client, and wherein said second computer readable program code means further comprises computer readable program code means for enabling the computer to log into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.

13. A computer program product for use with a computer system, said computer program product comprising:

a computer usable medium having computer readable program code means embodied in said medium for causing the computer system to provide a common interface for logging a user onto a plurality of heterogeneous database management systems, wherein data associated with a client is distributed among said plurality of heterogeneous database management systems, said computer readable program code means comprising;

first computer readable program code means for enabling the computer system to receive a local user identification when a user logs into said client;

second computer readable program code means for enabling the computer system to receive a database statement issued by said client;

third computer readable program code means for enabling the computer system to identify which of a plurality of data sources instantiated from said heterogeneous database management systems are needed to process said database statement;

fourth computer readable program code means for enabling the computer system to select one of said identified data sources;

fifth computer readable program code means for enabling the computer system to determine whether a record associated with said user and said selected database instance exists in a log-in table;

sixth computer readable program code means for enabling the computer system to log into said selected data source using information contained in said record if a record associated with said user and said selected data source exists in said log-in table; and

seventh computer readable program code means for enabling the computer system to log into said selected data source using said local user identification if a record associated with said user and said selected data source does not exist in said log-in table.

14. The computer program product of claim 13, wherein said first computer readable program code means further comprises computer readable program code means for enabling the computer to receive a local password when said user logs into said client, and wherein said second computer readable program code means further comprises computer readable program code means for enabling the computer to log into said selected data source using said local password if said record associated with said user and said selected data source does not exist in said log-in table.