Metadata in directory service systems and methods

• US 7,634,513 B2
• Filed: 06/20/2002
• Issued: 12/15/2009
• Est. Priority Date: 09/01/1994
• Status: Expired due to Fees

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Harvey, Richard Hans
• Primary Examiner(s): Fleurantin; Jean B
• Application Number:
  US10/174,824
• Publication Number:
  US 20030105749A1
• Time in Patent Office: 2,735 Days
• Field of Search: 707 1- 10, 707100-1041, 707200-206, 715/229, 717120-123, 717168-173, 717174-178
• US Class Current: 1/1
• CPC Class Codes: G06F 16/284 Relational databases
• CPC Class Codes: G06F 16/288 Entity relationship models
• CPC Class Codes: G06F 16/289 Object oriented databases
• CPC Class Codes: H04L 61/4517 using open systems interconnection [OSI] directories, e.g. X.500
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99934 Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99954 Version management

Abstract

A method and apparatus for implementing directory services, such as X.500 and LDAP in a SQL environment, and for providing a desired level of indexing, extensibility and scalability. In the directory service system, a plurality of objects are defined to be hierarchical, and the relationships among objects follow a tree structure where each object has a parent object and except for a root, each parent can have zero or more children. The database comprises at least one table having a plurality of rows and columns and stores a plurality of data items, each having a value, each being related to one of a plurality of data types and each having attributes defined by the directory. The attributes of the directory are arranged in a row-per-data type and value format, resulting in a representation identified as meta-data, wherein values are represented per row by

• • data type: identifying one of said plurality of data types,
  • syntax: identifying the nature of the data type, and
  • value: identifying the data value.

In the application of metadata to directory services, such as X.500 or LDAP, a ‘PROPERTY table’ is provided in which object name and parent name is added to the ‘principal design’. Other arrangements of tables and attributes provide for the achievement of the system goals.

Claims

1. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries, each entry representing an object and each entry having at least one attribute, each attribute being related to one of a plurality of attribute types and each attribute having an attribute value;

wherein the database comprises;

a first column adapted to store the attribute types;

a second column adapted to store attribute syntaxes, wherein each attribute syntax identifies treatment for an attribute value in an entry associated with the attribute syntax, the treatment based on one or more syntax rules;

a third column adapted to store the attribute values;

a fourth column adapted to store one or more distinguished value identifiers corresponding to one or more of the plurality of attributes, wherein each distinguished value identifier indicates whether the corresponding attribute value is used to name a corresponding entry; and

a fifth column adapted to store aliases, wherein each alias correlates two or more of the plurality of entries, each alias pointing from a first entry to a correlated entry by providing an alternative name for that entry and identifying that the first entry is an alias of the correlated entry.

2. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries, each entry representing an object and each entry having at least one attribute, each attribute being related to one of a plurality of attribute types, and each attribute having an attribute value;

wherein a single table of the database comprises;

a first column adapted to store the attribute types;

a second column adapted to store attribute syntaxes, wherein each attribute syntax identifies treatment for an attribute value in an entry associated with the attribute syntax, the treatment based on one or more syntax rules; and

a third column adapted to store the attribute values.

3. The software of claim 2, wherein:

each of the attributes is related to a specified entry, each entry representing an object and each entry identified by an object name; and

the database further comprises a fourth column adapted to store the object names.

4. The software of claim 3, wherein:

a plurality of the entries are defined in a hierarchical structure and have at least one parent entry, each parent entry representing a parent object and each parent entry identified by a parent name; and

the database further comprises a fifth column adapted to store the parent names.

5. The software of claim 3, wherein:

a plurality of the entries are defined in a tree structure such that each entry is one or more of a child, a parent, and a root; and

each child has one or more parents.

6. The software of claim 2, wherein the database supports the Structured Query Language (SQL).

7. A computer-implemented method for managing a directory service system, the method comprising:

using one or more processors to attributes of a directory in a database adapted to store a plurality of entries, each entry representing an object and each entry having at least one attribute, each attribute being related to one of a plurality of attribute types, and each attribute having an attribute value;

wherein the database comprises;

a first column adapted to store the attribute types;

a second column adapted to store attribute syntaxes, wherein each attribute syntax identifies treatment for an attribute value in an entry associated with the attribute syntax, the treatment based on one or more syntax rules; and

a third column adapted to store the attribute values.

8. The method of claim 7, wherein:

each of the attributes is related to a specified entry, each entry representing an object and each entry identified by an object name; and

the database further comprises a fourth column adapted to store the object names.

9. The method of claim 8, wherein:

a plurality of the entries are defined in a hierarchical structure and have at least one parent entry, each parent entry representing a parent object and each parent entry identified by a parent name; and

the database further comprises a fifth column adapted to store the parent names.

10. The method of claim 8, wherein:

a plurality of the entries are defined in a tree structure such that each entry is one or more of a child, a parent, and a root; and

each child has one or more parents.

11. The method of claim 7, wherein the database supports the Structured Query Language (SQL).

12. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries;

each entry representing an object, each entry having at least one entry identifier, and each entry having at least one attribute;

each attribute having at least one attribute identifier;

wherein the database comprises;

a first table adapted to store the entry identifiers and the attribute identifiers; and

a second table adapted to store one or more attribute syntaxes for correlated attribute identifiers in the first table, wherein each attribute syntax identifies treatment for an attribute value in an entry associated with the attribute syntax, the treatment based on one or more syntax rules.

13. The software of claim 12, wherein the entry identifiers correlate the plurality of entries with hierarchy information for those entries.

14. The software of claim 12, wherein the database supports the Structured Query Language (SQL).

15. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries;

each entry representing an object, each entry having at least one entry identifier, and each entry having at least one attribute;

each attribute having at least one attribute identifier;

wherein the database comprises;

a first table adapted to store the entry identifiers and the attribute identifiers; and

a second table adapted to store;

the attribute value as a plurality of attribute value fragments for correlated attribute identifiers in the first table, wherein the attribute value occupies a plurality of rows in the second table, wherein each multiple attribute value fragment is stored in a separate one of the plurality of rows in the second table and combine to define a single attribute value; and

a plurality of fragment identifiers to index the plurality of attribute value fragments.

16. The software of claim 15, wherein the attribute value defined by the multiple attribute value fragments is a binary-large-object (BLOB).

17. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries, each entry representing an object and each entry having at least one attribute, the database comprising a table adapted to store a plurality of entries and a plurality of aliases, wherein each alias correlates two or more entries, and wherein each alias points from a first entry to a correlated entry by providing an alternative name for the first entry and identifies that the first entry is an alias of the correlated entry.

18. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries, each entry representing an object and each entry having at least one attribute, the database comprising a table adapted to store a plurality of entry identifiers and a plurality of alias identifiers, wherein each entry identifier correlates an associated object with hierarchy information for the associated object, and wherein each alias identifier correlates two or more entry identifiers, each alias identifier pointing from a first entry identifier to a correlated entry identifier by providing an alternative name for the first entry identifier.

19. Software for use in implementing a directory services system, the software comprising a program of instructions encoded on a computer readable memory and when executed using one or more processors, operable to:

using one or more processors to arrange attributes of a directory in a database adapted to store a plurality of entries, each entry having a plurality of attributes, each attribute having an attribute value;

wherein the database comprises a table comprising;

a first column adapted to store the attribute values;

a second column adapted to store one or more distinguished value identifiers corresponding to one or more of the attributes values, wherein each distinguished value identifier indicates whether the corresponding attribute value is used to name the corresponding entry; and

a third column adapted to store attribute syntaxes, wherein each attribute syntax identifies treatment for the corresponding attribute value in the corresponding entry associated with the attribute syntax, the treatment based on one or more syntax rules.

20. The software of claim 19, wherein the one or more distinguished value identifiers comprise binary characters.

21. The software of claim 19, wherein the one or more distinguished value identifiers comprise integers.

22. The software of claim 19, wherein at least one of the one or more entries is named by a plurality of attribute values.