View mechanism for data security, privacy and utilization

• US 8,239,396 B2
• Filed: 03/20/2009
• Issued: 08/07/2012
• Est. Priority Date: 03/20/2009
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Byun, Ji-Won, Chui, Chi Ching, Wong, Daniel M.
• Primary Examiner(s): Alam, Shahid
• Assistant Examiner(s): Pandya, Jagdish
• Application Number:
  US12/408,551
• Publication Number:
  US 20100241641A1
• Time in Patent Office: 1,236 Days
• Field of Search: 707/756, 707/757
• US Class Current: 707/757
• CPC Class Codes: G06F 16/24565 Triggers; Constraints
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

A machine-implemented method and machine-readable media for transforming sensitive data in a database is provided. Sensitive data in the database are transformed based on a query context of a query. The query may also be transformed. The transformed query may be applied against the transformed sensitive data to construct a query result. The query result with the transformed sensitive data represents a lenticular view. The lenticular view represents a modified form of the sensitive data that an end-user is allowed access to.

Claims

1. A computer-implemented method of controlling access to data in a database, comprising:

registering a plurality of transformation techniques for a particular column of a table in said database;

wherein at least two transformation techniques of said plurality of transformation techniques perform different transformations on actual values of said particular column;

after registering the plurality of transformation techniques, receiving a plurality of queries, each query of said plurality of queries being associated with a respective query context and referencing said particular column;

computing each query of said plurality of queries, wherein computing each query of said plurality of queries comprises;

based on the respective query context of said each query, selecting a transformation technique from the plurality of transformation techniques registered for said particular column; and

applying the selected transformation technique to the actual values in said particular column to generate transformed values to use for computing the query in lieu of the actual values in said particular column.

2. The computer-implemented method of claim 1, wherein said particular column stores a value from a first value domain, wherein each transformation technique of said plurality of transformation techniques transforms data to a second value domain different than said first value domain, wherein the method further includes:

rewriting said each query to reflect the second value domain of said selected transformation technique.

3. The computer-implemented method of claim 2,

wherein said each query contains a predicate referring to said particular column and to a value of said first value domain,

wherein the method further includes rewriting said predicate to refer to a value from said second value domain of said selected transformation technique.

4. The computer-implemented method of claim 1, wherein one or more query context information is associated with each transformation technique of said plurality of transformation techniques using rules;

wherein said rules are registered as part of registering said plurality of transformation techniques.

5. The computer-implemented method of claim 1, wherein a query result includes more data than said query result would have included if the actual values in said particular column are not transformed.

6. The computer-implemented method of claim 1, wherein selecting a transformation technique is performed by a kernel of a database server.

7. The computer-implemented method of claim 1, wherein said query context includes at least one of the identity of the end-user, the role of said end-user, and session attributes.

14. The non-transitory medium of claim 7, wherein said query context includes at least one of the identity of the end-user, the role of said end-user, and session attributes.

8. A non-transitory medium storing one or more sequences of instructions which, when executed by one or more processors, causes the one or more processors to perform:

registering a plurality of transformation techniques for a particular column of a table in said database;

wherein at least two transformation techniques of said plurality of transformation techniques perform different transformations on actual values of said particular column;

after registering the plurality of transformation techniques, receiving a plurality of queries, each query of said plurality of queries being associated with a respective query context and referencing said particular column;

computing each query of said plurality of queries, wherein computing each query of said plurality of queries comprises;

based on the respective query context of said each query, selecting a transformation technique from the plurality of transformation techniques registered for said particular column; and

applying the selected transformation technique to the actual values in said particular column to generate transformed values to use for computing the query in lieu of the actual values in said particular column.

9. The non-transitory medium of claim 8, wherein said particular column stores a value from a first value domain, wherein each transformation technique of said plurality of transformation techniques transforms data to a second value domain different than said first value domain, wherein the one or more sequences of instructions further comprise instructions which, when executed by one or more processors, causes the one or more processors to perform:

rewriting said each query to reflect the second value domain of said selected transformation technique.

10. The non-transitory medium of claim 9,

wherein said each query contains a predicate referring to said particular column and to a value of said first value domain,

wherein the one or more sequences of instructions further comprise instructions which, when executed by one or more processors, causes the one or more processors to perform rewriting said predicate to refer to a value from said second value domain of said selected transformation technique.

11. The non-transitory medium of claim 8, wherein one or more query context information is associated with each transformation technique of said plurality of transformation techniques using rules;

wherein said rules are registered as part of registering said plurality of transformation techniques.

12. The non-transitory medium of claim 8, wherein a query result includes more data than said query result would have included if the actual values in said particular column are not transformed.

13. The non-transitory medium of claim 8, wherein selecting a transformation technique is performed by a kernel of a database server.