Patent ID: 7171413
Filing Date: 2007-01-30
Classification: G06F,Y10S

Abstract:
1. In a networked client-server computer system having a plurality of users of the client-server system and including software performing database queries via a database management system (DBMS) for users of the system, a method of two-phase query security, the method comprising: receiving by the client system a query string from one of the plurality of users, the query string including references to database objects; transforming the received query string by the client system to an intermediate query string; performing a first phase query security by the client system including: transferring the intermediate query string, including the query parts and the marker parts, to the server system; performing access control checks in a second phase query security by the server system on the inserted security markers in the intermediate query string; and replacing each of the inserted security markers in the second phase query security by the server system with a corresponding security check string to enforce access control.