Patent ID: 7266702
Filing Date: 2007-09-04
Classification: G06F,Y10S

Abstract:
1. A method for managing security material in a database system comprising at least one database server, the method comprising steps of: in at least one dedicated security management master database, managing security material of said database system, the security material to be used for authentication of a plurality of application databases within the database system through a non-user-identification challenge-response phase; in the at least one dedicated security management master database, defining the security material to be used for authentication of a plurality of application databases within the database system, the security material comprising at least some content information derived from contents of an application program having authority to access any of the application databases; copying at least a partial copy of data of the dedicated security management master database to at least one dedicated security management replica database to manage at least part of the security material of said database system; in the at least one dedicated security management replica database, receiving from an application program an authorization request to access at least one of the application databases; sending at least one challenge as a response to the authorization request, the at least one challenge relating to the security material; in the at least one dedicated security management replica database, receiving, as a response to the challenge, data produced by the requesting application program using the content information of the application program; evaluating the received response to the challenge using the security material; and based on the result of the evaluation, authorizing the requesting application program to access the at least one application database or denying the requesting application program from accessing the at least one application database.