SYSTEM AND METHOD OF ACCESS AND CONTROL MANAGEMENT BETWEEN MULTIPLE DATABASES

• US 20070192323A1
• Filed: 02/12/2007
• Published: 08/16/2007
• Est. Priority Date: 02/10/2006
• Status: Abandoned Application

• Current Assignee: Vertica Systems Incorporated (Open Text Corporation)
• Original Assignee: Vertica Systems Incorporated (Open Text Corporation)
• Inventors: MILLER, LANDON
• Application Number:
  US11/673,863
• Publication Number:
  US 20070192323A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/217 Database tuning G06F16/2282 takes precedence; database performance monitoring G06F11/3409
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

A system and method of automatic access and control management of databases within a system includes a data management computer system and interconnected local computer systems. An accessing system requests information from a target system by data management system. The database management determines whether or not the information request satisfies a predetermined shared information access stored in a lookup table. The data management system verifies the transmitted information by comparing it to the rule and redacts information if necessary and transmits the verified information to the accessing local computer system. The data management system rejects the information access request if determined that the predetermined rule is not satisfied. The data management system determines whether to update the predetermined rule if access is nondeterminable, and automatically updates the rule. The accessing computer system uses the verified information.

Claims

1. A method of automatic access and control management of databases within a system that includes a data management computer system and interconnected local computer systems, the method comprising the steps of:

requesting information from a target local computer system by an accessing local computer system, and the accessing system transmitting the information access request to the data management computer system via a communications network, wherein the accessing computer system is a local computer system that includes a processor and an associated database, and the target computer system is another local computer system that includes a processor and an associated database; and

determining, by the data management computer system, whether the information access request from the accessing system satisfies a predetermined rule controlling access to predetermined shared information stored in the target computer system database, or does not satisfy the predetermined rule, or if access is nondeterminable, wherein the predetermined rule is stored in a rules lookup table stored in a database associated with the data management computer system, and the data management system;

receiving the requested information transmitted by the target computer system database if the rules are satisfied and verifying the transmitted information by comparing the transmitted information to the predetermined rule and redacting information that does not compare to the rule and then transmitting the verified information Lo the accessing local computer system;

or

rejecting the information access request if determined that the predetermined rule is not satisfied;

or

determining whether to update the predetermined rule if access is nondeterminable, and automatically updating the rule by if determined to update the predetermined rule; and

using the verified information by the accessing computer system.

2. The method as set forth in claim 1, wherein the accessing local computer system and target local computer system are cooperatively working together on a project.

3. The method as set forth in claim 1 wherein the rules table includes predetermined hierarchical rules that identify a predetermined user associated with the accessing local computer system having access to predetermined shared information stored in the target local system database.

4. The method as set forth in claim 1 wherein said step of transmitting the verified information to the accessing local computer system database further includes the step of the data management system supplying the accessing system with a status report concerning the information transfer.

5. The method as set forth in claim 1 wherein said step of determining access further includes the step of updating the rules table in real time by modifying the rule in the rules table, creating a new rule and adding the new rule to the rules table, or deleting the rule from the rules table, and continuing to consider the information request using the updated rules table, by the data management system.

14. The system as set forth in claim 1 wherein the data management computer system automatically updates the rules table in real time by modifying the rule in the rules table, creating a new rule and adding the new rule to the rules table, or deleting the rule from the rules table.

6. A method of automatic access and control management of databases within a system that includes a data management computer system and interconnected local computer systems, the method comprising the steps of:

requesting information from a target local computer system by an accessing local computer system, and the accessing system transmitting the information access request to the data management computer system via a communications network, wherein the accessing computer system is a local computer system that includes a processor and an associated database, and the target computer system is another local computer system that includes a processor and an associated database; and

determining, by the data management computer system, whether the information access request from the accessing system satisfies a predetermined rule controlling access to predetermined shared information stored in the target computer system database, or does not satisfy the predetermined rule, or if access is nondeterminable, wherein the predetermined rule is stored in a rules lookup table stored in a database associated with the data management computer system that includes predetermined hierarchical rules that identify a predetermined user associated with the accessing local computer system having access to predetermined shared information stored in the target local system database, and the data management system;

receiving the requested information transmitted by the target computer system database if the rules are satisfied and verifying the transmitted information by comparing the transmitted information to the predetermined rule and redacting information that does not compare to the rule and then transmitting the verified information to the accessing local computer system;

or

rejecting the information access request if determined that the predetermined rule is not satisfied;

or

determining whether to update the predetermined rule if access is nondeterminable, and automatically updating the rule by if determined to update the predetermined rule by updating the rules table in real time by modifying the rule in the rules table, or creating a new rule and adding the new rule to the rules table, or deleting the rule from the rules table;

continuing to consider the information request using the updated rules table, by the data management system; and

using the verified information by the accessing computer system.

7. The method as set forth in claim 6, wherein the accessing local computer system and target local computer system are cooperatively working together on a project.

8. The method as set forth in claim 6 wherein said step of transmitting the verified information to the accessing local computer system database further includes the step of the data management system supplying the accessing system with a status report concerning the information transfer.

9. The method as set forth in claim 6 wherein said step of transmitting the verified information to the accessing local computer system database further includes the step of the data management system supplying the target local computer system with a status report concerning the information transfer.

10. A system of database management between groups working on a common project, comprising.

a data management computer system having a server and a database associated with the server;

an accessing local computer system having a processor and an associated database, wherein said local computer system is operatively in communication with data management computer system via a communications network;

a target local computer system having a processor and an associated database, wherein the target local computer system is operatively in communication with data management computer system via the communications network;

an executable access and control database management software program resident on the data management computer system server that requests information from the target local computer system by the accessing local computer system, and the accessing system transmits the information access request to the data management computer system via the communications network, determines whether the accessing system information access request satisfies a predetermined rule controlling access to predetermined shared information stored in the target computer system database, or does not satisfy the predetermined rule, or if access is nondeterminable, wherein the predetermined rule is maintained in a rules lookup table stored in the data management computer system database, and the data management system receives the requested information transmitted by the target computer system database if the rules are satisfied and verifies the transmitted information by comparing the transmitted information to the predetermined rule and redacting information that does not compare to the rule and then transmits the verified information to the accessing local computer system, or rejects the information access request if determined that the predetermined rule is not satisfied, or determines whether to update the predetermined rule if access is nondeterminable, and automatically updates the rule by if determined to update the predetermined rule so that the verified information can be used by the accessing local computer system.

11. The system as set forth in claim 10 wherein the rules table includes predetermined hierarchical rules that identify a predetermined user associated with the accessing local computer system having access to predetermined shared information stored in the target local system database.

12. The system as set forth in claim 10 wherein the data management system supplies the accessing system with a status report concerning the information transfer.

13. The system as set forth in claim 10 wherein the data management system supplies the target local computer system with a status report concerning the information transfer.