Method and apparatus for controlling data permissions

• US 9,866,565 B2
• Filed: 10/13/2015
• Issued: 01/09/2018
• Est. Priority Date: 10/13/2014
• Status: Active Grant

• Current Assignee: Alibaba Group Holding Ltd.
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Zeng, Yunxi, Long, Yong, Zhu, Dejin
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/881,882
• Publication Number:
  US 20160191535A1
• Time in Patent Office: 819 Days
• Field of Search: 726 3, 726 6, 707761, 707785, 707999002, 707999003, 707999004, 707999009, 7079991, 707708, 707755, 707756, 707791, 707802, 707822, 707828, 707999103, 707E17055, 705 711, 706 45, 709217, 709203, 709219, 709238, 715763, 455453
• CPC Class Codes: G06F 16/2477 Temporal data queries
• CPC Class Codes: G06F 16/288 Entity relationship models
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Methods and apparatus for controlling data permission are disclosed herein, and embodiments include generating a relational database that includes entity objects, corresponding user identifications and obligatory relationships of corresponding permission information. The obligatory relationships include time interval information. Some methods further include receiving a request to access an entity object, and the access request comprises identification of an accessing user and an accessing timestamp. The method further includes rendering the permission information of the corresponding entity object if the identification of the accessing user is substantially similar to the corresponding identification of the entity object and the accessing timestamp is within the time interval in response to the accessing request.

Claims

1. A method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object.

2. The method of claim 1, wherein the relational database to further include a plurality of entity object attributes that are associated with the plurality of entity objects such that each entity object is associated with one or more entity object attributes.

3. The method of claim 2, wherein the plurality of entity object attributes includes an entity object price.

4. The method of claim 1, wherein the relational database to further include a plurality of permission attributes that are associated with the plurality of permission codes such that each permission code is associated with a permission attribute, the plurality of permission attributes including free shipping.

5. The method of claim 1, wherein generating the relational database includes:

generating a first identification code;

associating the first identification code with an entity object;

associating a permission code with the first identification code;

determining an associated user identification; and

establishing an obligated relationship between the first identification code and the associated user identification in the relational database before the access request is received.

6. The method of claim 5, wherein determining the associated user identification includes:

receiving a plurality of inactive identification codes;

receiving an ID request to reserve an inactive identification code from the plurality of inactive identification codes, the ID request including registering user information;

converting an inactive identification code into the associated user identification; and

associating the associated user identification with the registering user information in response to the ID request.

7. The method of claim 1, wherein the relational database to further include a plurality of user attributes that are associated with the plurality of user identifications such that each user identification is associated with one or more user attributes.

8. The method of claim 5, wherein determining the associated user identification includes:

receiving multiple requests to obtain data of the first identification code from a plurality of requesting users, wherein the requests to obtain data include identifications of the requesting users; and

randomly selecting an identification of a requesting user from the identifications of the requesting users to use as the associated user identification in the relational database.

9. The method of claim 8, further comprising:

receiving a transfer request to transfer the first identification code, wherein the transfer request includes a transferor identification of a transferor that is transferring the permission code associated with the first identification code, and the transferee identification of the transferee that is accepting the permission code associated with the first identification code; and

updating, in accordance with the transfer request, a current user identification as the user identification of the transferee that is accepting the permission code.

10. The method of claim 1, further comprising:

generating a notice about a starting point of the active time interval of the obligatory relationship that includes the first entity object; and

allocating the notice to the first user identification before the access request is received.

11. The method of claim 1, further comprising discharging the obligatory relationship after the active time interval associated with the obligatory relationship has expired.

12. A method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,

wherein generating the relational database includes;

generating a first identification code;

allocating a permission code to the first identification code;

determining an associated user identification;

associating the associated user identification with the first identification code;

receiving a selected entity object selected from a set of multiple entity objects; and

associating the selected entity object with the first identification code as an obligated relation in the relational database.

13. The method of claim 12, wherein determining the associated user identification includes:

receiving a plurality of requests to obtain data of the first identification code, each of the plurality of requests including requesting user information;

randomly selecting a request from the plurality of requests; and

associating the associated user identification with the requesting user information of the randomly selected request.

14. The method of claim 13, further comprising:

receiving a transfer request to transfer the first identification code, wherein the transfer request includes a transferor identification of a transferor that is transferring the permission code and a transferee identification of a transferee that is accepting the permission code; and

updating a current user identification using the transferee identification in response to the transfer request.

15. A method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,

wherein generating the relational database includes;

obtaining a set of candidate entity objects that include associated attribute information;

calculating index values corresponding to each candidate entity object in accordance with the attribute information using an index rule; and

setting a highest candidate entity object having the highest index value calculated as an entity object.

16. An apparatus for accessing a database structure, the apparatus comprising:

a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

a receiver coupled to the relational database to receive an access request to access a first entity object, the access request including a requestor identification and a timestamp of the access request; and

a processor coupled to the receiver and the relational database, the processor to;

determine if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determine if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, grant the access request access to the first entity object.

17. The apparatus of claim 16, wherein the relational database to further include a plurality of entity object attributes that are associated with the plurality of entity objects such that each entity object is associated with one or more entity object attributes.

18. The apparatus of claim 16, wherein the plurality of entity object attributes includes an entity object price.

19. The apparatus of claim 16, wherein the relational database to further include a plurality of permission attributes that are associated with the plurality of permission codes such that each permission code is associated with a permission attribute, the plurality of permission attributes including free shipping.

20. The apparatus of claim 16, wherein the plurality of identification codes includes a first identification code that is associated with an entity object, a first permission code, and an associated user identification.

21. The apparatus of claim 20, wherein:

the receiver to receive an ID request to reserve an inactive identification code from a plurality of inactive identification codes, the ID request including registering user information;

the processor to convert an inactive identification code into the associated user identification, and to associate the associated user identification with the registering user information in response to the ID request.

22. The apparatus of claim 16, wherein the relational database to further include a plurality of user attributes that are associated with the plurality of user identifications such that each user identification is associated with one or more user attributes.

23. The apparatus of claim 20, wherein the processor to:

receive multiple requests to obtain data associated with the first identification code from a plurality of requesting users, wherein the requests to obtain data include identifications of the requesting users; and

randomly select one of the requesting users and use the selected requesting user as the associated user identification in the relational database.

24. The apparatus of claim 23, wherein:

the receiver to receive a transfer request to transfer the first identification code, wherein the transfer request includes a transferor identification of a transferor that is transferring possession of the permission code associated with the first identification code, and the transferee identification of the transferee that is accepting possession of the permission code associated with the first identification code; and

the processor to update a current user identification using the user identification of the transferee that is accepting possession of the permission code associated with the first identification code in response to the transfer request.

25. The apparatus of claim 16, wherein the processor to:

generate a notice regarding a starting point of the active time interval of the obligatory relationship that includes the first entity object; and

send the notice to the first user identification before the access request is received.

26. The apparatus of claim 16, wherein the processor to discharge the obligatory relationship after the active time interval associated with the obligatory relationship has expired.

27. An apparatus for accessing a database structure, the apparatus comprising:

a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

a receiver coupled to the relational database to receive an access request to access a first entity object, the access request including a requestor identification and a timestamp of the access request; and

a processor coupled to the receiver and the relational database, the processor to;

determine if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determine if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, grant the access request access to the first entity object,

wherein the processor to associate the first user identification with a first identification code, select an entity object for the first user identification; and

associate the selected entity object with the first identification code in the relational database.

28. The apparatus of claim 27, wherein:

the receiver to receive a plurality of requests to obtain data associated with the first identification code, each of the plurality of requests including requesting user information; and

the processor to randomly select one of the identifications of the requesting users to be used as a user identification in the relational database.

29. The apparatus of claim 28, wherein:

the receiver to receive a transfer request to transfer the first identification code, the transfer request including the user identification of the transferor that is transferring the permission information, and the user identification of the transferee that is accepting the permission information; and

the processor to update a current user identification using the user identification of the user identification that is accepting the permission information.

30. An apparatus for accessing a database structure, the apparatus comprising:

a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

a receiver coupled to the relational database to receive an access request to access a first entity object, the access request including a requestor identification and a timestamp of the access request; and

a processor coupled to the receiver and the relational database, the processor to;

determine if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determine if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, grant the access request access to the first entity object,

wherein the processor to further;

obtain a set of candidate entity objects that include associated attribute information;

calculate index data corresponding to each candidate entity object in accordance with the attribute information using an index rule; and

set the candidate entity object having a highest index data as an entity object.

31. A computer program product tangibly embodied in a computer-readable storage device and comprising instructions that when executed by a processor perform a method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object.

32. The method of claim 31, wherein the relational database to further include a plurality of entity object attributes that are associated with the plurality of entity objects such that each entity object is associated with one or more entity object attributes.

33. The method of claim 32, wherein the plurality of entity object attributes includes an entity object price.

34. The method of claim 31, wherein the relational database to further include a plurality of permission attributes that are associated with the plurality of permission codes such that each permission code is associated with a permission attribute, the plurality of permission attributes including free shipping.

35. The method of claim 31, wherein generating the relational database includes:

generating a first identification code;

associating the first identification code with an entity object;

associating a permission code with the first identification code;

determining an associated user identification; and

establishing an obligated relationship between the first identification code and the associated user identification in the relational database before the access request is received.

36. The method of claim 35, wherein determining the associated user identification includes:

receiving a plurality of inactive identification codes;

receiving an ID request to reserve an inactive identification code from the plurality of inactive identification codes, the ID request including registering user information;

converting an inactive identification code into the associated user identification; and

associating the associated user identification with the registering user information in response to the ID request.

37. The method of claim 31, wherein the relational database to further include a plurality of user attributes that are associated with the plurality of user identifications such that each user identification is associated with one or more user attributes.

38. The method of claim 35, wherein determining the associated user identification includes:

receiving multiple requests to obtain data of the first identification code from a plurality of requesting users, wherein the requests to obtain data comprise identifications of the requesting users; and

randomly selecting an identification of a requesting user from the identifications of the requesting users to use as the associated user identification in the relational database.

39. The method of claim 38, further comprising:

receiving a transfer request to transfer the first identification code, wherein the transfer request includes a transferor identification of a transferor that is transferring the permission code associated with the first identification code, and the transferee identification of the transferee that is accepting the permission code associated with the first identification code; and

updating, in accordance with the transfer request, a current user identification as the user identification of the transferee that is accepting the permission code.

44. The method of claim 31, further comprising:

generating a notice about a starting point of the active time interval of the obligatory relationship that includes the first entity object; and

allocating the notice to the first user identification before the access request is received.

45. The method of claim 31, further comprising discharging the obligatory relationship after the active time interval associated with the obligatory relationship has expired.

40. A computer program product tangibly embodied in a computer-readable storage device and comprising instructions that when executed by a processor perform a method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,

wherein generating the relational database includes;

generating a first identification code;

allocating a permission code to the first identification code;

determining an associated user identification;

associating the associated user identification with the first identification code;

receiving a selected entity object selected from a set of multiple entity objects; and

associating the selected entity object with the first identification code as an obligated relation in the relational database.

41. The method of claim 40, wherein determining the associated user identification includes:

receiving a plurality of requests to obtain data of the first identification code, each of the plurality of requests including requesting user information;

randomly selecting a request from the plurality of requests; and

associating the associated user identification with the requesting user information of the randomly selected request.

42. The method of claim 41, further comprising:

receiving a transfer request to transfer the first identification code, wherein the transfer request includes a transferor identification of a transferor that is transferring the permission code and a transferee identification of a transferee that is accepting the permission code; and

updating a current user identification using the transferee identification in response to the transfer request.

43. A computer program product tangibly embodied in a computer-readable storage device and comprising instructions that when executed by a processor perform a method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;

receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;

determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;

when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification; and

when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,

wherein generating the relational database includes;

obtaining a set of candidate entity objects that include associated attribute information;

calculating index values corresponding to each candidate entity object in accordance with the attribute information using an index rule; and

setting a highest candidate entity object having the highest index value calculated as an entity object.