Computer-implemented control of access to atomic data items

• US 6,052,688 A
• Filed: 03/17/1999
• Issued: 04/18/2000
• Est. Priority Date: 01/26/1995
• Status: Expired due to Term

• Current Assignee: RPX Corporation
• Original Assignee: Hans Verner Thorsen
• Inventors: Thorsen, Hans Verner
• Primary Examiner(s): HOMERE, JEAN RAYMOND
• Application Number:
  US09/271,266
• Time in Patent Office: 398 Days
• Field of Search: 707/2, 707/3, 707/9, 707/100, 707/102
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2445 Data retrieval commands; View definitions
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application
• CPC Class Codes: G06F 16/9024 Graphs; Linked lists G06F16/9027 takes precedence
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/948 Product or catalog
• CPC Class Codes: Y10S 707/955 Object-oriented
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

A method and a system for accessing data in a computer-based data processing system is described. The method comprises the steps of initiating and maintaining data access nodes in a variable access structure. Each access node is provided with references to other access nodes and/or to data items representing an object, each data item carrying only the amount of information which is relevant for its purpose. The data items or the references are provided with a time parameter thus enabling version control and the possibility to handle static or slowly changing data and frequently changed and updated data in a corresponding manner. The access nodes comprise access control parameters for access control from a safety point of view as well as for enabling different views of the access structure and underlying data and objects.

Claims

1. A computer implemented method, for use in a computer-based data processing and storage system, for obtaining a view of a database or a subset of a database, comprising the steps of:

storing references to data items or to groups of data items in data access nodes;

storing references to other data access nodes thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

initiating a view of said database or said subset of said database by either rearranging one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes or by retrieving references pointing at said data items of a selectable aspect, kind, or class.

2. The method of claim 1, further comprising the step of:

maintaining access control parameters for each of said data access nodes, the access control parameters defining access conditions to each of said access nodes or said references of each of said access nodes.

3. The method of claim 1, comprising the further step of providing each data item with a time parameter, wherein the time parameter is associated with or stored in connection with said data item and wherein said time parameter is the time at which said data item is read, said data item is stored or any other indicated time.

4. The method of claim 1, comprising the further step of updating variable data by creating a new data item in which the last data version is stored and by adding said new data item to a relevant group of related data items, whereby data items may be added at any rate enabled by the data processing system processing said data.

5. The method of claim 1, comprising the further step of associating data items upon retrieving, by means of a control structure comprising an application dependent specification and an access specification, by means of which communication with an access node is performed.

6. The method of claim 1, comprising the further step of controlling read and write operations and access to a data item or to an access node by means of access control parameters provided in the access node.

7. The method of claim 1, wherein the initiation of an access structure comprises the steps of:

initiating an instance of an access node data structure;

assigning said access node a node description and an identity code;

establishing references to other, already initiated access nodes according to a selectable initial configuration;

possibly establishing a reference to a data item or to a group of data items;

establishing access parameters, for each access node, for controlling access to information that is accessed via said access node; and

possibly repeating the aforementioned steps.

8. The method of claim 1, wherein an access node is realized by means of an active process, the initiation then including starting a process thereby controlling all communication with the access node.

9. The method of claim 8, comprising the further steps of:

storing a reference list in a first access node;

bringing the access node process into a waiting condition, wherein said access node process is waiting for a user call;

if a user calls the access node, then, by means of said access node process, starting a subprocess realizing a copy of the first access node, having characteristics inherited from the first access node process, for controlling access operations on the reference list and/or on a data item referred to by said first access node;

then again bringing the access node process into a waiting condition, waiting for further user calls.

10. The method of claim 9, comprising the further steps of:

by means of said subprocess;

checking that the identity and/or the address of the user computer unit is listed in a control file, and if said user computer is not listed then terminating the said subprocess;

else

checking that the identity of the user is listed in an access rights catalogue, and possibly checking a personal identity code and/or polling an access key, and if said user is not listed then terminating the subprocess;

else

allowing said user to communicate with said access node process; and

controlling said access to and communication of data and references contained in the access node by means of an access control parameters allowing different users different views of the access node and underlying objects.

11. The method of claim 9, comprising the further step of setting a timer controlling the time during which said subprocess is allowed to exist.

12. The method of claim 1, comprising the further step of adapting a data item referred to by an access node to represent the condition of an apparatus, whereby an output signal from said apparatus is detected and temporarily stored in said data item, and whereby said output signal is made available via said access node.

13. The method of claim 1, comprising the further step of controlling access to an apparatus, wherein an access node contains a reference, possibly via a data item, to a signal terminal of said apparatus at which an output signal from the apparatus is available or an input signal is inputtable.

14. The method of claim 1, comprising the further step of controlling an apparatus by creating apparatus control data, by storing temporarily said control data in a data item referred to by an access node, and by transferring the contents of said control data item to an control signal input terminal of said apparatus.

15. The method of claim 1, comprising the further steps of:

compiling user specific data item information, describing to which data items a user has access rights;

compiling for each data item, location and access information describing its location in the storage structure and access parameters necessary to retrieve said data item;

selecting data items to be associated; and

retrieving, by means of said data item information and said location and access information, the selected data items.

16. The method of claim 1, comprising the further steps of initiating a view of the access structure or underlying objects by:

defining an application view with a specification of requirements for wanted objects;

searching in the access structure for access nodes having references to objects matching an aspect of the specification of requirements;

saving access node identification of access nodes for matching objects; and

repeating search until the specifications of requirements or other search parameters are satisfied.

17. The method of claim 1, comprising the further steps of navigating through the access structure by:

setting navigation parameters for matching access node information with a specification of requirements for a selected view of objects;

calling a first access node giving user identity and view specification;

returning from the access node a subset of references to access nodes and/or objects that are relevant for the specified view;

calling second access nodes until a number of subsets of references to access nodes and/or objects coincide; and

possibly saving a logging of relevant access nodes.

18. A computer implemented method, for use in a computer-based data processing and storage system, for structuring access to data items, comprising the steps of:

storing references to data items or to groups of data items in data access nodes;

storing references to other data access nodes thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

rearranging one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes.

19. The method of claim 18, further comprising the step of:

maintaining access control parameters for each of said data access nodes, the access control parameters defining access conditions to each of said access nodes or said references of each of said access nodes.

20. The method of claim 18, comprising the further step of providing each data item with a time parameter, wherein the time parameter is associated with or stored in connection with said data item and wherein said time parameter is the time at which said data item is read, said data item is stored or any other indicated time.

21. The method of claim 18, comprising the further step of maintaining access control parameters for each access node, the access control parameters defining access conditions to said access node or said references of said access node.

22. The method of claim 18, comprising the further step of updating variable data by creating a new data item in which the last data version is stored and by adding said new data item to a relevant group of related data items, whereby data items may be added at any rate enabled by the data processing system processing said data.

23. The method of claim 18, comprising the further step of associating data items upon retrieving, by means of a control structure comprising an application dependent specification and an access specification, by means of which communication with an access node is performed.

24. The method of claim 18, comprising the further step of controlling read and write operations and access to a data item or to an access node by means of access control parameters provided in the access node.

25. The method of claim 18, wherein the initiation of an access structure comprises the steps of:

initiating an instance of an access node data structure;

assigning said access node a node description and an identity code;

establishing references to other, already initiated access nodes according to a selectable initial configuration;

possibly establishing a reference to a data item or to a group of data items;

establishing access parameters, for each access node, for controlling access to information that is accessed via said access node; and

possibly repeating the aforementioned steps.

26. The method of claim 18, wherein an access node is realized by means of an active process, the initiation then including starting a process thereby controlling all communication with the access node.

27. The method of claim 18, comprising the further step of adapting a data item referred to by an access node to represent the condition of an apparatus, whereby an output signal from said apparatus is detected and temporarily stored in said data item, and whereby said output signal is made available via said access node.

28. The method of claim 18, comprising the further step of controlling access to an apparatus, wherein an access node contains a reference, possibly via a data item, to a signal terminal of said apparatus at which an output signal from the apparatus is available or an input signal is inputtable.

29. The method of claim 18, comprising the further steps of:

storing a reference list in a first access node;

bringing the access node process into a waiting condition, wherein said access node process is waiting for a user call;

if a user calls the access node, then, by means of said access node process, starting a subprocess realizing a copy of the first access node, having characteristics inherited from the first access node process, for controlling access operations on the reference list and/or on a data item referred to by said first access node;

then again bringing the access node process into a waiting condition, waiting for further user calls.

30. The method of claim 29, comprising the further steps of:

by means of said subprocess;

checking that the identity and/or the address of the user computer unit is listed in a control file, and if said user computer is not listed then terminating the said subprocess;

else

checking that the identity of the user is listed in an access rights catalogue, and possibly checking a personal identity code and/or polling an access key, and if said user is not listed then terminating the subprocess;

else

allowing said user to communicate with said access node process; and

controlling said access to and communication of data and references contained in the access node by means of an access control parameters allowing different users different views of the access node and underlying objects.

31. The method as recited in claim 29, comprising the further step of setting a timer controlling the time during which said subprocess is allowed to exist.

32. The method of claim 18, comprising the further step of controlling an apparatus by creating apparatus control data, by storing temporarily said control data in a data item referred to by an access node, and by transferring the contents of said control data item to an control signal input terminal of said apparatus.

33. The method of claim 18, comprising the further steps of:

compiling user specific data item information, describing to which data items a user has access rights;

compiling for each data item, location and access information describing its location in the storage structure and access parameters necessary to retrieve said data item;

selecting data items to be associated; and

retrieving, by means of said data item information and said location and access information, the selected data items.

34. The method of claim 18, comprising the further steps of initiating a view of the access structure or underlying objects by:

defining an application view with a specification of requirements for wanted objects;

searching in the access structure for access nodes having references to objects matching an aspect of the specification of requirements;

saving access node identification of access nodes for matching objects; and

repeating search until the specifications of requirements or other search parameters are satisfied.

35. The method of claim 18, comprising the further steps of navigating through the access structure by:

setting navigation parameters for matching access node information with a specification of requirements for a selected view of objects;

calling a first access node giving user identity and view specification;

returning from the access node a subset of references to access nodes and/or objects that are relevant for the specified view;

calling second access nodes until a number of subsets of references to access nodes and/or objects coincide; and

possibly saving a logging of relevant access nodes.

36. A data processing system for obtaining a view of a database or a subset of a database, said system being provided with a data processing unit comprising a computer processor, a data storage medium, a data control program being executable by means of said data processing unit, and a communications interface, and comprising:

means for storing references in the data processing system to data items or to groups of data items, stored on the storage medium, in data access nodes;

means for storing references to other data access nodes in the data processing system thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

means for initiating a view of said database or said subset of said database by either rearranging one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes or by retrieving references pointing at said data items of a selectable aspect, kind, or class.

37. The system of claim 36, further comprising means for associating each access node with access control parameters for defining access conditions to said access nodes or to said references of said access nodes.

38. The system of claim 36, further comprising means for providing each data item with a time parameter, wherein said time parameters are stored in connection with or associated to said data items.

39. The system of claim 36, further comprising means for generating or initializing a process or a virtual processing unit for each access node.

40. The system of claim 36, further comprising means for generating or initializing links between each access node process or access node processing unit.

41. The system of claim 36, further comprising means for associating access nodes or data items of said access structure.

42. The system of claim 38, further comprising means for controlling access to access nodes depending on said access parameters.

43. The system of claim 36, further comprising means for navigating through the data access structure and searching for one or more access nodes or data items constituting a selectable view.

44. A data processing system for structuring access to data items, said system being provided with a data processing unit comprising a computer processor, a data storage medium, a data control program being executable by means of said data processing unit, and a communications interface, and comprising:

means for storing references to data items or to groups of data items, stored on the storage medium, in data access nodes;

means for storing references to other data access nodes thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

means for rearranging one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes.

45. The system of claim 44, further comprising means for associating each access node with access control parameters for defining access conditions to said access nodes or to said references of said access nodes.

46. The system of claim 44, further comprising means for providing each data item with a time parameter, wherein said time parameters are stored in connection with or associated to said data items.

47. The system of claim 44, further comprising means for generating or initializing a process or a virtual processing unit for each access node.

48. The system of claim 44, further comprising means for generating or initializing links between each access node process or access node processing unit.

49. The system of claim 44, further comprising means for associating access nodes or data items of said access structure.

50. The system of claim 44, further comprising means for controlling access to access nodes depending on said access parameters.

51. The system of claim 44, further comprising means for navigating through the data access structure and searching for one or more access nodes or data items constituting a selectable view.

52. A computer program product, for use with a data processing and storage system, for obtaining a view of a database or a subset of a database, the computer program product comprising:

a recording medium;

means, recorded on the recording medium, for directing the data processing and storage system to store references to data items or to groups of data items in data access nodes;

means, recorded on the recording medium, for directing the data processing and storage system to store references to other data access nodes thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

means, recorded on the recording medium, for directing the data processing and storage system to initiate a view of said database or said subset of said database by either rearranging one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes or by retrieving references pointing at said data items of a selectable aspect, kind, or class.

53. The computer program product of claim 52, further comprising means, recorded on the recording medium for directing the data processing and storage system to associate each access node with access control parameters for defining access conditions to said access nodes or to said references of said access nodes.

54. The computer program product of claim 52, further comprising means recorded on the recording medium for directing the data processing and storage system to provide each data item with a time parameter, wherein said time parameters are stored in connection with or associated to said data items.

55. The computer program product of claim 52, further comprising means, recorded on the recording medium, for directing the data processing and storage system to generate or initialize a process or a virtual processing unit for each access node.

56. The computer program product of claim 52, further comprising means, recorded on the recording medium, for directing the data processing and storage system to generate or initialize links between each access node process or access node processing unit.

57. The computer program product of claim 52, further comprising means, recorded on the recording medium, for directing the data processing and storage system to associate access nodes or data items of said access structure.

58. The computer program product of claim 52, further comprising means, recorded on the recording medium, for directing the data processing and storage system to control access to access nodes depending on or responsive to said access parameters.

59. A computer program product of claim 52, further comprising means, recorded on the recording medium, for directing the data processing and storage system to traverse, search or navigate through the data access structure, by means of which search for one or more access nodes or data items constituting a selectable view is performable.

60. A computer program product for structuring access to data items, the computer program product comprising:

a recording medium;

means, recorded on the recording medium, for directing the data processing and storage system to store references to data items or to groups of data items in data access nodes;

means, recorded on the recording medium, for directing the data processing and storage system to store references to other data access nodes thus arranging a first access structure of data access nodes, wherein a first access node is directly or indirectly linked to a second access node or to a data item referred to by a reference of said second node; and

means, recorded on the recording medium, for directing the data processing and storage system to rearrange one or more of said references to other data access nodes so as to arrange a second access structure of data access nodes.

61. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to associate each access node with access control parameters for defining access conditions to said access nodes or to said references of said access nodes.

62. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to provide each data item with a time parameter, wherein said time parameters are stored in connection with or associated to said data items.

63. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to generate or initialize a process or a virtual processing unit for each access node.

64. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to generate or initialize links between each access node process or access node processing unit.

65. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to associate access nodes or data items of said access structure.

66. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to control access to access nodes depending on or responsive to said access parameters.

67. The computer program product of claim 60, further comprising means, recorded on the recording medium, for directing the data processing and storage system to traverse, search or navigate through the data access structure, by means of which search for one or more access nodes or data items constituting a selectable view is performable.

68. A computer implemented method, for use in a computer-based data processing and storage system, for structuring access to data items, comprising the steps of:

storing a reference to a data item or to a group of data items in a first data access node;

storing a reference to a second data access node in said first data access node; and

storing references to data items or to groups of data items in said second data access node, wherein said first access node is linked to said second data access node independently of whether or not the data items referenced in said first or second access nodes are related to a same object.