System and methods providing enhanced security model
First Claim
Patent Images
1. A method to facilitate data item security, comprising:
- defining at least one security policy for a hierarchical data structure;
defining at least one security region for the hierarchical data structure;
determining whether the hierarchical data structure is a tree structure or a directed acyclic graph (DAG);
determining how the at least one security policy is to be applied to an item within the security region when the item inherits more than one access control list (ACL); and
applying the at least one security policy to the hierarchical data structure from the security region.
3 Assignments
0 Petitions
Accused Products
Abstract
The present invention relates to a system and methodology to facilitate security for data items residing within (or associated with) a hierarchical database or storage structure. A database security system is provided having a hierarchical data structure associated with one or more data items. The system includes a security component that applies a security policy to the data items from a global location or region associated with a database. Various components and processes are employed to enable explicit and/or inherited security properties to be received by and propagated to the data items depending on the type of data structure encountered or processed.
23 Citations
8 Claims
-
1. A method to facilitate data item security, comprising:
-
defining at least one security policy for a hierarchical data structure; defining at least one security region for the hierarchical data structure; determining whether the hierarchical data structure is a tree structure or a directed acyclic graph (DAG); determining how the at least one security policy is to be applied to an item within the security region when the item inherits more than one access control list (ACL); and applying the at least one security policy to the hierarchical data structure from the security region. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
Specification