Patent ID: 7814075
Filing Date: 2010-10-12
Classification: G06F

Abstract:
1. A database system comprising: a processor to execute computer program instructions; a memory to store computer program instructions executable by the processor and data; and computer program instructions stored in the memory and executable to implement: a plurality of database objects stored in the memory, each database object having a level of security; an auditing system operable to monitor database operations that are attempted to be performed on the database objects, wherein the auditing system is operable to monitor the database operations based on: a plurality of security factors, each security factor representing a characteristic of a user of the database system, including a physical security factor type indicating a physical, network, or database characteristic of the user, an implementation security factor type indicating a user-defined, application, or certificate information characteristic of the user, or an environmental security factor type indicating a time-based characteristic of the user, a plurality of realms, each realm defining a privilege of the user of the database system relative to a schema of the database system, wherein each realm comprises a logical grouping of database schemas, and further comprises associations to at least some of the database schemas, at least some user accounts, and at least some database roles, and a plurality of auditing rules, each auditing rule defining a limitation on operation of the database system by the user based on at least some of the plurality of security factors, based on attributes of data to be operated on, including the level of security of the database object of the data to be operated on, and based on at least one of the plurality of realms; wherein an auditing rule triggers an audit event, alert, or notification upon success or failure of the auditing rule.