Patent ID: 8930382
Filing Date: 2015-01-06
Classification: G06F

Abstract:
1. A method for secure data access in a parallel processing system, the method comprising: providing a relational database having a first table and a second table, wherein the first table contains a first plurality of sensitive data and the second table contains a second plurality of sensitive data, wherein a sensitive attribute serves as a subset of a primary key for access to the first plurality of sensitive data stored on the first table, wherein the sensitive attribute serves as a subset of a primary key for access to the second plurality of sensitive data stored on the second table, wherein a user is authorized to access the first plurality of sensitive data and the second plurality of sensitive data in an unmasked format or in a masked format based on a plurality of predefined authentication credentials associated with the user, wherein the plurality of predefined authentication credentials are stored in a global variable associated with the user; generating a first security table having a plurality of entries mapping the first plurality of sensitive data associated with the sensitive attribute in the unmasked format to the first plurality of sensitive data associated with the sensitive attribute in the masked format; generating a second security table having a plurality of entries mapping the second plurality of sensitive data associated with the sensitive attribute in the masked format to the second plurality of sensitive data associated with the sensitive attribute in the unmasked format; and generating a security view joining the first security table to the second security table, wherein the security view grants the user access to the first plurality of sensitive data and the second plurality of sensitive data in the unmasked format only or in the masked format only based on the global variable associated with the user matching the sensitive attribute.