Patent ID: 8732856
Filing Date: 2014-05-20
Classification: G06F,H04L

Abstract:
1. A database system communicatively connected to a plurality of network domains, each network domain having a level of security and being isolated from the other network domains, the database system comprising: a shared-disk database comprising a plurality of database instances of the shared-disk database; a plurality of network domains, each network domain comprising at least one database instance of the plurality of database instances of the shared-disk database, wherein each database instance has a level of security based on the level of security of its network domain; wherein the shared-disk database comprises at least one partitioned data table, each of the at least one partitioned data table comprising a plurality of table partitions, each of the plurality of table partitions corresponding to a level of security; wherein each of the plurality of table partitions is configured to store units of data comprising a level of security, such that a specific unit of data is stored in a specific partition based on the level of security of the specific unit of data and the level of security of the specific partition; wherein at least one partition of the plurality of table partitions is stored on a different physical device based on the its level of security; access control security operable to provide access to a selected unit of data in the shared-disk database to a selected network domain based on a level of security of the selected network domain and based on a level of security of the selected unit of data; wherein the selected data unit is processed by a selected database instance with a level of security equal to or greater than that level of security of the selected network domain.