Source: http://www.google.com/patents/US8086615?dq=6,049,612
Timestamp: 2013-12-20 07:51:43
Document Index: 449190814

Matched Legal Cases: ['Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60']

Patent US8086615 - Security data redaction - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsIn accordance with one embodiment of the present invention, there are provided mechanisms and methods for securing access to data. These mechanisms and methods for securing access to data make it possible for systems to have improved control over accesses to information by redacting responses made by...http://www.google.com/patents/US8086615?utm_source=gb-gplus-sharePatent US8086615 - Security data redactionAdvanced Patent SearchPublication numberUS8086615 B2Publication typeGrantApplication numberUS 11/341,836Publication dateDec 27, 2011Filing dateJan 27, 2006Priority dateMar 28, 2005Also published asUS20060277220Publication number11341836, 341836, US 8086615 B2, US 8086615B2, US-B2-8086615, US8086615 B2, US8086615B2InventorsPaul B. Patrick, Naveen GuptaOriginal AssigneeOracle International CorporationExport CitationBiBTeX, EndNote, RefManPatent Citations (105), Non-Patent Citations (16), Referenced by (2), Classifications (7), Legal Events (4) External Links: USPTO, USPTO Assignment, EspacenetSecurity data redactionUS 8086615 B2Abstract In accordance with one embodiment of the present invention, there are provided mechanisms and methods for securing access to data. These mechanisms and methods for securing access to data make it possible for systems to have improved control over accesses to information by redacting responses made by services based upon access policies. Requestors may be users, proxies or automated entities. This ability of a system to redact responses to queries or requests for services in accordance with access policies makes it possible to attain improved security in computing systems over conventional access control mechanisms that control based upon privileges for accessing a file, an account, a storage device or a machine upon which the information is stored.
1. A method for securing access to data, the method comprising:
receiving a request from a requestor to access a plurality of data access services, said request associated with a service model, and said request including filter parameters
wherein the service model provides a plurality of structured views of data in a format specific to the requestor, and wherein data returned to the requestor is mapped to one of the plurality of structured views associated with the requestor, and
wherein the filter parameters accompany the request and determine the data included in a result set;
accessing an authorization policy upon receiving the request to identify which of the plurality of data access services are available to the requestor, wherein the authorization policy includes one or more rules that are used to permit access to the plurality of data access services based on the requestor;
accessing, based on the requestor, the plurality of data access services for which access is permitted by the authorization policy;
receiving a combined filtered result set, the combined result set including the results from accessing the plurality of data access services, wherein the results from each of the plurality of data access services is filtered based on the filter parameters, and wherein each portion of the combined filtered result set is assigned a minimum level of access required to access the portion;
determining a level of access assigned to the requestor;
inspecting the combined filtered result set and determining, for each portion of the combined filtered result set, whether the requestor is permitted to access said portion of the combined filtered result set by comparing the minimum level of access associated with each portion in the combined filtered result set with the requestor's level of access;
redacting said portion from the combined filtered result set if the requestor is not permitted by the level of access to access said portion of the combined filtered result set, wherein said redacting is performed after the combined filtered result set is received from the plurality of data access services;
retaining said portion within the combined filtered result set if the requestor is permitted to access said portion of the combined filtered result set based on the level of access assigned to the requestor;
presenting to the requestor at least one of the plurality of structured views of the combined filtered result set, wherein each portion that is not permitted to be accessed by the requestor is redacted from the result set, and wherein the at least one of the plurality of different views presented is based upon a determination of which of the plurality of data access services are relevant to the requestor.
2. The method of claim 1, wherein providing access to the result set further comprises:
providing the result set according to access policies if the requestor is permitted by the access policies to access only a portion of the result set.
determining whether the requestor is making an authorized request to access datasets that the plurality of data access services access.
4. The method of claim 1, wherein service includes at least one of a network based application, a web server resident application, a web portal, a search engine, a photographic, audio or video information storage application, an e-Commerce application, a backup application, a storage application, a sales/revenue planning, marketing, forecasting, accounting, inventory management application.
determining a portion of the result set to be passed back to the requestor based on filter parameters accompanying with a request to access the plurality of data access services from the requestor.
reformatting queries to improve performance based on execution time, resource use, efficiency and other performance criteria.
comparing a security level associated with information in the result set received from the plurality of data access services and the requestor's permitted access policy security level.
mapping the result set into a special format suited for the requestor, wherein the special format is one of a plurality of formats, and wherein each one of the plurality of formats is associated with one of different requestors.
9. The method of claim 1, wherein as the level of access assigned to the requestor increases, the amount of information in the result set available to the requestor also increases.
10. The method of claim 1, wherein the level of access is associated with a condition that varies with time, said condition including a market activity level.
11. A non-transitory computer-readable storage medium carrying one or more sequences of instructions for securing access to data, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:
12. The non-transitory computer-readable medium as recited in claim 11, wherein the instructions for carrying out the step of providing access to the result set include instructions for carrying out the steps of:
13. The non-transitory computer-readable medium as recited in claim 11, further comprising instructions, which when executed by the one or more processors cause the one or more processors to carry out the steps of:
14. The non-transitory computer-readable medium as recited in claim 11, wherein service includes at least one of a network based application, a web server resident application, a web portal, a search engine, a photographic, audio or video information storage application, an e-Commerce application, a backup application, a storage application, a sales/revenue planning, marketing, forecasting, accounting, inventory management application.
15. The non-transitory computer-readable medium as recited in claim 11, further comprising instructions, which when executed by the one or more processors cause the one or more processors to carry out the steps of:
16. The non-transitory computer-readable medium as recited in claim 11, further comprising instructions, which when executed by the one or more processors cause the one or more processors to carry out the steps of:
17. The non-transitory computer-readable medium as recited in claim 11, further comprising instructions, which when executed by the one or more processors cause the one or more processors to carry out the steps of:
18. The non-transitory computer-readable medium as recited in claim 11, further comprising instructions, which when executed by the one or more processors cause the one or more processors to carry out the steps of:
19. The non-transitory computer-readable medium as recited in claim 11, wherein as the level of access assigned to the requestor increases, the amount of information in the result set available to the requestor also increases.
20. The non-transitory computer-readable medium as recited in claim 11, wherein the level of access is associated with a condition that varies with time, said condition including a market activity level.
21. An apparatus for securing access to data, the apparatus comprising:
presenting to the requestor at least one of the plurality of structured views of the combined filtered result set, wherein each portion that is not permitted to be accessed by the requestor is redacted from the result set, and wherein the at least one of the plurality of different views presented is based upon a determination of which of the plurality of data access services are relevant to the requestor. Description
CLAIM TO PRIORITY The present application claims the benefit of:
U.S. Patent Application No. 60/665,696, entitled SECURITY DATA REDACTION, by Paul Patrick and Naveen Gupta, filed Mar. 28, 2005.
United States Provisional Patent Application No. 60/665,908 entitled �LIQUID DATA SERVICES,� filed on Mar. 28, 2005;
United States Provisional Patent Application No. 60/666,079 entitled �MODELING FOR DATA SERVICES,� filed on Mar. 29, 2005;
United States Provisional Patent Application No. 60/665,768 entitled �USING QUERY PLANS FOR BUILDING AND PERFORMANCE TUNING SERVICES,� filed on Mar. 28, 2005;
United States Provisional Patent Application No. 60/665,696 entitled �SECURITY DATA REDACTION,� filed on Mar. 28, 2005;
United States Provisional Patent Application No. 60/665,667 entitled �DATA REDACTION POLICIES,� filed on Mar. 28, 2005;
United States Provisional Patent Application No. 60/665,944 entitled �SMART SERVICES,� filed on Mar. 29, 2005;
United States Provisional Patent Application No. 60/665,943 entitled �AD HOC QUERIES FOR SERVICES,� filed on Mar. 29, 2005; and
United States Provisional Patent Application No. 60/665,964 entitled �SQL INTERFACE FOR SERVICES,� filed on Mar. 29, 2005.
FIELD OF THE INVENTION The current invention relates generally to securing access to data, and more particularly to a mechanism for security data redaction.
BACKGROUND Increasingly, enterprises are looking for ways to simplify access and organization of Information Technology (IT) services. One mechanism for providing such IT simplification is Service Oriented Architecture (SOA). Application of SOA principles promises faster development cycles, increased reusability and better change tolerance for software components.
Unfortunately, enterprises that implement SOA often find that the start-up complexities of SOA delays, if not derails, the expected return on investment. While SOA simplifies the complexity of an IT environment, organizations lack sufficient experience with SOA technology required for a quick, trouble-free implementation. Compounding this experience gap, graphical tools for implementing SOA are not readily available, so that data services for use in SOA environments often must be hand-coded. For enterprise-class portal and Web applications, for example, a majority of application development time can be spent on managing data access. A number of factors make data programming difficult and time-consuming, including data access control. Accordingly, there exists a continued need for improved mechanisms for security data redaction in implementing SOA type initiatives.
One problem that arises is controlling access to data by different individuals. One conventional approach includes controlling individual's access to data storage constructs, i.e., files, databases and so forth, using a scheme of access permissions. For example, a user may be granted some combination of read, write, modify and delete authority for a particular file, database or other data storage construct. Such conventional approaches, however, require the user to be cleared for the entire content of the data storage construct.
Another conventional approach includes controlling access to the services by individuals. A problem with such approaches, however, arises from the coarseness of the approaches' granularity�an individual is either permitted to use the service or denied access to the service. Some implementations have sought to ameliorate this drawback by establishing classes of access, i.e., user, administrator and so forth, each class having access to a specific set of functions in the service. Each of these conventional approaches, however, suffers the same limitation�an individual granted access to the service, or the data storage construct, has access to the entirety of the data.
BRIEF DESCRIPTION OF THE DRAWINGS FIGS. 1A-1B are functional block diagrams illustrating an example computing environment in which techniques for data redaction may be implemented in one embodiment.
FIG. 2A is an operational flow diagram illustrating a high level overview of a technique for securing access to data of one embodiment of the present invention.
FIG. 2B is an operational flow diagram illustrating a high level overview of a technique for receiving data under a secured environment of one embodiment of the present invention.
FIG. 2C is an operational flow diagram of an example redaction based technique for securing data, which may be used in conjunction with the technique illustrated in FIG. 2A.
FIGS. 3A-3B are operational flow diagrams illustrating a high level overview of examples of data redaction techniques in various embodiments of the present invention.
FIGS. 4A-4B are diagrams illustrating a high level overview of example service output data corresponding to the examples illustrated in FIGS. 3A-3B.
DETAILED DESCRIPTION In accordance with embodiments of the present invention, there are provided mechanisms and methods for securing access to data. These mechanisms and methods for securing access to data make it possible for systems to have improved control over accesses to information by redacting responses made by services. In an example embodiment, redaction is based upon access policies associated with a requester. Requestors may be users, proxies or automated entities. This ability of a system to redact responses to queries or requests from services in accordance with access policies or the like makes it possible to attain improved security in computing systems over conventional access control mechanisms that control based upon privileges to access a file, an account, a storage device or a machine upon which the information is stored. In other example embodiments, access to information may be controlled in accordance with access policies based upon any quantity, indication or other detectable state with which dissemination of information can be coordinated, including without limitation, market activity, severity of weather, seriousness of infractions on a criminal record, member status in a shopping club and the like.
In one embodiment, a method for securing access to data is provided. The method includes accessing at least one service on behalf of a requestor. A result set is received from the at least one service. Only that portion of the result set that the requestor is permitted to access is provided to the requestor. A Liquid Data framework, for example, can map the portion of the result set provided to the requestor to a view associated with the requestor. The result set received from the service or services may be redacted in accordance with access policies, if the policy permits the requestor to access only a portion of the result set, or can be provided in its entirety if the policy permits the requestor to access all of the result set or may be blocked entirely if the policy does not permit the requestor to access any of the result set.
While the present invention is described herein with reference to example embodiments for controlling access to data using data redaction based upon access policies associated with the requestor, the present invention is not so limited, and in fact, the access control techniques provided by embodiments of the present invention are broadly applicable to a wide variety of situations in which control over information dissemination is desirable. By way of example, and not intended to be limiting, various embodiments can provide: less personal information about juvenile offenders than adults; less detailed information about each trade when market trading volume increases; more detailed weather information when the weather is hazardous to travel; more special product offerings to members having premium status with shopping clubs than regular members; more detailed criminal record information for suspected felons than for individuals with less serious infractions in their criminal record; and so forth.
As used herein, the term service is intended to be broadly construed to include any application, program or process resident on one or more computing devices capable of providing services to a requestor or other recipient, including without limitation network based applications, web based server resident applications, web portals, search engines, photographic, audio or video information storage applications, e-Commerce applications, backup or other storage applications, sales/revenue planning, marketing, forecasting, accounting, inventory management applications and other business applications and other contemplated computer implemented services. The term result set is intended to be broadly construed to include any result provided by one or more services. Result sets may include multiple entries into a single document, file, communication or other data construct. As used herein, the term view is intended to be broadly construed to include any mechanism that provides a presentation of data and/or services in a format suited for a particular application, service, client or process. The presentation may be virtualized, filtered, molded, or shaped. For example, data returned by services to a particular application (or other service acting as a requester or client) can be mapped to a view associated with that application (or service). Embodiments can provide multiple views of available services to enable organizations to compartmentalize or streamline access to services, increasing the security of the organization's IT infrastructure.
Access policies (or �authorization policies�, �security policies� or �policies�) dynamically identify resources (e.g., J2EE resources, an XML document, a section of an XML document, services, information returned by services, etc.) for which access is controlled, entities allowed to access each resource, and constraints that apply to each requestor or group of requestors that attempt to access the resource. A policy can be based on role(s) such that it determines which role(s) are permitted to access a resource under certain conditions. (In various embodiments, roles can be defined to dynamically associate users and/or groups of users based on some criteria. For example, a system administrator role might include all users having a certain skill level and only during certain times of day (e.g., after 5:00 pm)).
In one embodiment, a policy can be specified as follows (wherein items in square brackets indicate alternatives; italic font indicates optional items):
[GRANT, DENY] (action, resource, subject) IF (constraint condition)1 . . . IF (constraint condition)N;
GRANT permits a specified action. DENY revokes it; Action is the name of a resource or resource attribute to grant or deny access to; Resource is the name of the resource that this policy will be associated with; Subject is the name of one or more users, groups and/or roles that are granted/denied the action. A special subject called any denotes that any user, group and role is potentially a subject; and IF (constraint condition) is one or more optional conditions placed on the action. Conditions can include one or more arithmetic and logical functions and expressions involving attributes of resources or other entities in the system, such as requestor attributes, group membership, dynamic attributes (e.g., time, date, location), and other suitable information. FIGS. 1A-1B are functional block diagrams illustrating an example computing environment in which techniques for data redaction may be implemented in one embodiment. As shown in FIG. 1A, a liquid data framework 104 is used to provide a mechanism by which a set of applications, or application portals 94, 96, 98, 100 and 102, can integrate with, or otherwise access in a tightly couple manner, a plurality of services. Such services may include a Materials Requirements and Planning (MRP) system 112, a purchasing system 114, a third-party relational database system 116, a sales forecast system 118 and a variety of other data-related services 120. Although not shown in FIG. 1A for clarity, in one embodiment, one or more of the services may interact with one or more other services through the liquid data framework 104 as well.
Internally, the liquid data framework 104 employs a liquid data integration engine 110 to process requests from the set of portals to the services. The liquid data integration engine 110 allows access to a wide variety of services, including data storage services, server-based or peer-based applications, Web services and other services capable of being delivered by one or more computational devices are contemplated in various embodiments. A services model 108 provides a structured view of the available services to the application portals 94, 96, 98, 100 and 102. In one embodiment, the services model 108 provides a plurality of views 106 that may be filtered, molded, or shaped views of data and/or services into a format specifically suited for each portal application 94, 96, 98, 100 and 102. In one embodiment, data returned by services to a particular application (or other service acting as a requestor or client) is mapped to the view 106 associated with that application (or service) by liquid data framework 104. Embodiments providing multiple views of available services can enable organizations to compartmentalize or streamline access to services, thereby increasing the security of the organization's IT infrastructure. In one embodiment, services model 108 may be stored in a repository 122 of service models. Embodiments providing multiple services models can enable organizations to increase the flexibility in changing or adapting the organization's IT infrastructure by lessening dependence on service implementations.
FIG. 1B is a high level schematic of a liquid data integration engine 110 illustrated in FIG. 1A with reference to one example embodiment. As shown in FIG. 1B, the liquid data integration engine 110 includes an interface processing layer 140, a query compilation layer 150 and a query execution layer 160. The interface layer 140 includes a request processor 142, which takes the request 10 and processes this request into an XML query 50. Interface layer 140 also includes access control mechanism 144, which determines based upon a plurality of policies 20 whether the client, portal application, service or other process making the request 10 is authorized to access the resources and services required to satisfy the request. Provided that the client, application, service or other process is authorized to make the request 10, the interface layer sends the XML query 50 to the query compilation layer 150.
Within the query compilation layer 150, a query parsing and analysis mechanism 152 receives the query 50 from the client applications, parses the query and sends the results of the parsing to a query rewrite optimizer 154. The query rewrite optimizer 154 determines whether the query can be rewritten in order to improve performance of servicing the query based upon one or more of execution time, resource use, efficiency or other performance criteria. The query rewrite optimizer 154 may rewrite or reformat the query based upon input from one or more of a source description 40 and a function description 30 if it is determined that performance may be enhanced by doing so. A runtime query plan generator 156 generates a query plan for the query provided by the query rewrite optimizer 154 based upon input from one or more of the source description 40 and the function description 30.
The query compilation layer 150 passes the query plan output from the runtime query plan generator 156 to a runtime query engine 162 in the query execution layer 160. The runtime query engine 162 is coupled with one or more functions 70 that may be used in conjunction with formulating queries and fetch requests to sources 52, which are passed on to the appropriate service(s). The service responds to the queries and fetch requests 52 with results from sources 54. The runtime query engine 162 of the query execution layer 160 translates the results into a format usable by the client or portal application, such as without limitation XML, in order to form the XML query results 56.
Before responses or results 56 are passed back to the client or portal application making the request, a query result filter 146 in the interface layer 140 determines based upon filter parameters 90 what portion of the results will be passed back to the client or portal application, forming a filtered query response 58. Although not shown in FIG. 1B for clarity, filter parameters 90 may accompany service request 10 in one embodiment. Further, query result filter 146 also determines based upon access policies implementing security levels 80 what portions of the filtered query response 58 a requestor is permitted to access and may redact the filtered query response accordingly. Although not shown in FIG. 1B for clarity, access policies implementing security levels 80 may be stored with policies 20 in one embodiment. Techniques for providing a requestor with only that portion of the information that the requestor is permitted access based upon a policy implemented by query result filter 170 will be described below in greater detail with reference to FIGS. 2A-2C. When properly formed, the response is returned to the calling client or portal application.
FIG. 2A is an operational flow diagram illustrating a high level overview of a technique for securing access to data of one embodiment of the present invention. The technique for securing access to data shown in FIG. 2A is operable with an application sending data, such as Materials Requirements and Planning (MRP) system 112, an purchasing system 114, a third-party relational database system 116, sales forecast system 118, or a variety of other data-related services 120 of FIG. 1A, for example. As shown in FIG. 2A, at least one service is accessed on behalf of a requester (block 202). A result set is received from one or more services (block 204). Only that portion of the result set that the requester is permitted to access is provided to the requestor (block 206). Liquid data framework 104 can map the portion of the result set provided to the requestor to a view associated with the requestor. In one embodiment, the method illustrated by blocks 202-206 may be advantageously disposed in the interface processing layer 140, query compilation layer 150 and query execution layer 160 of FIG. 1B.
FIG. 2B is an operational flow diagram illustrating a high level overview of a technique for receiving data under a secured environment of one embodiment of the present invention. The technique for receiving data under a secured environment shown in FIG. 2B is operable with an application sending data, such as applications 94, 96, 98, 100 and 102 of FIG. 1A, for example or a service, such as Materials Requirements and Planning (MRP) system 112, an purchasing system 114, a third-party relational database system 116, sales forecast system 118, or a variety of other data-related services 120 of FIG. 1A. As shown in FIG. 2B, a request to access one or more services is sent to a server (block 212). A portion of a result set of the service(s) is received (block 214) from the server. The server has prepared the portion of the result set of the service(s) according to the server's determination of a subset of the result set that is permitted to be provided responsive to the request.
FIG. 2C is an operational flow diagram of an example redaction based technique for securing data, which may be used in conjunction with the technique illustrated in FIG. 2A. As shown in FIG. 2C, whether the requestor has a policy has a policy associated with it that permits access to all of the result set is determined (block 222). If not, then the result set received from the service is redacted in accordance with access policies associated with the requester (block 224). In any event, the result set is then provided in accordance with the access policies associated with the requestor (block 226).
Some of the features and benefits of the present invention will be illustrated with reference to FIGS. 3A-3B, which are operational flow diagrams illustrating some example embodiments implementing example applications. FIGS. 4A-4B are diagrams illustrating example service output data corresponding to the examples illustrated in FIGS. 3A-3B. The reader will appreciate that these examples are for illustrative purposes only and not intended to be limiting.
In a first example, an embodiment employing processing illustrated by FIG. 3A controls access to information based upon a policy by comparing a security level associated with the information and a requestor's permitted access. When used in conjunction with example service output information illustrated by FIG. 4A, which is the input to the processing of FIG. 3A, the embodiment illustrated by FIG. 3A enables access to more sensitive information about suspected violators to be restricted to requestors granted greater authority by access policies. As shown in FIG. 3A, data is accessed from the result set received from one or more services (block 302). If the security level associated with the data is greater than the requestor's permitted access (block 304), then the data is redacted (block 306) from the result set. Otherwise, the data remains in the result set. If more data is to be processed (block 308), more data is accessed (block 302).
In the example service output data illustrated by FIG. 4A, the result set 400 a output by a service includes an indication of security level 402. The security level indication 402 indicates that the information following the indicator is accessible to a requestor having access under a policy that includes at least �green� level information. As shown in FIG. 4A, result set 400 a includes data for various suspects, including data corresponding to a first suspect, �John Doe.� The data for the first suspect includes information about the suspect beginning with a name and address 404. Since the security level was set to �green� by security level indication 402, the suspect name and address 404 are accessible to requestors permitted by an access policy to access at least �green� level information. A conviction record 406 is also available to requestors permitted access to at least �green� level by an access policy.
A second security level indication 408 indicates that subsequent information requires an access policy permitting access to at least �yellow�. Thus, the arrests data 410 requires requesters to be permitted by access policies to access at least �yellow� level information in order to view this information. A third security level indication 412 indicates that subsequent information requires an access policy permitting access to at least �red�, requiring even further permission to access the juvenile record data block 414. A fourth security level indication 416 returns the security level back to �green�. Thus, information that is restricted by court order and information that is highly prejudicial to a suspect may be included in the same document 400 a with information suitable for general access. In this manner, access policies permitting greater access permissions may be required in order to view more sensitive information even though the information is included in the same document 400 a in the illustrated embodiment. While colors are used as indicators to demonstrate the functioning of this embodiment, the present invention is not limited to using colors as security level indicators.
Turning again to FIG. 3A, the security level associated with each data 404, 406, 410 and 414 is compared to the requestor's permitted access policy security level (block 304), and redacted (block 306) from the result set if the requestor does not have sufficient access for that particular data. Accordingly, in the foregoing example, as the requestor's access level increases, the amount of information available to the requestor also increases. In the next example, a reduction in the amount of information available to the requester as market activity increases is effected using policies keyed to market activity.
In a second example, an embodiment employing processing illustrated by FIG. 3B controls access to information based upon a policy by comparing a market activity level associated with the information and a present market activity. When used in conjunction with example service output information illustrated by FIG. 4B, which is the input to the processing of FIG. 3B, the embodiment illustrated by FIG. 3B enables access to less information about a stock to as the trading activity level of the market increases. As shown in FIG. 3B, data is accessed from the result set received from one or more services (block 312). If the present market activity level is less than or equal to the market activity level associated with the data (block 314), then no further action is taken and the data remains in the result set. Otherwise, the data is redacted (block 316) from the result set. If more data is to be processed (block 318), then more data is accessed (block 312).
In the example output data illustrated by FIG. 4B, the result set 400 b includes an indication of market activity level 422. The market activity level 422 indicates that the information is accessible to any requestor even when the market activity is �high�. As shown in FIG. 4B, result set 400 b includes data for various stocks, such as data corresponding to a first stock. The data for the first stock includes information about the stock beginning with a name and �ticker� symbol 424. Since the market activity level is set to �high� by market activity level indication 422, the name and symbol 424 are accessible to users even when the market activity level is high. A last trade price 426 is also available to users at any time. A second market activity level indication 428 indicates that subsequent information requires a market activity of at least �med� to be redacted. Thus, the high and low price data block 430 will be shown if the market activity level is less than �med�. A third market activity level indication 432 indicates that subsequent information about trading volume is included (i.e., not redacted) if market activity is less than �low�, requiring an even slower trading day for the contents of volume data block 434 to be displayed. In this manner, successively greater amounts of information may be omitted when trading volume increases even though the information is included in the same document 400 b in the illustrated embodiment.
Turning again to FIG. 3B, the market activity level associated with each data 424, 426, 430 and 434 is compared to the present market activity level (block 314), and redacted (block 316) from the result set if the market activity level equals or exceeds the indicated maximum market activity level for that data. Accordingly, in the foregoing example, as the market's activity level increases, the amount of information available to the requestor decreases.
Included in the programming (software) of the general/specialized computer or microprocessor are software modules for implementing the teachings of the present invention, including, but not limited to providing mechanisms and methods for securing data as discussed herein.
FIG. 5 illustrates an exemplary processing system 500, which can comprise one or more of the elements of FIGS. 1A and 1B. Turning now to FIG. 5, an exemplary computing system is illustrated that may comprise one or more of the components of FIGS. 1A and 1B. While other alternatives might be utilized, it will be presumed for clarity sake that components of the systems of FIGS. 1A and 1B are implemented in hardware, software or some combination by one or more computing systems consistent therewith, unless otherwise indicated.
System 500 also includes a computer readable storage media reader 505 coupled to a computer readable storage medium 506, such as a storage/memory device or hard or removable storage/memory media; such devices or media are further indicated separately as storage 508 and memory 509, which may include hard disk variants, floppy/compact disk variants, digital versatile disk (�DVD�) variants, smart cards, read only memory, random access memory, cache memory, and so on, in accordance with the requirements of a particular application. One or more suitable communication interfaces 507 may also be included, such as a modem, DSL, infrared, RF or other suitable transceiver, and so on for providing inter-device communication directly or via one or more suitable private or public networks or other components that may include but are not limited to those already discussed.
Working memory 510 further includes operating system (�OS�) 511 elements and other programs 512, such as one or more of application programs, mobile code, data, and so on for implementing system 500 components that might be stored or loaded therein during use. The particular OS or OSs may vary in accordance with a particular device, features or other aspects in accordance with a particular application (e.g. Windows, WindowsCE, Mac, Linux, Unix or Palm OS variants, a cell phone OS, a proprietary OS, Symbian, and so on). Various programming languages or other tools can also be utilized, such as those compatible with C variants (e.g., C++, C#), the Java 2 Platform, Enterprise Edition (�J2EE�) or other programming languages in accordance with the requirements of a particular application. Other programs 512 may further, for example, include one or more of activity systems, education managers, education integrators, or interface, security, other synchronization, other browser or groupware code, and so on, including but not limited to those discussed elsewhere herein.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5335345Apr 11, 1990Aug 2, 1994Bell Communications Research, Inc.Dynamic query optimization using partial informationUS5481700Dec 16, 1991Jan 2, 1996The Mitre CorporationApparatus for design of a multilevel secure database management system based on a multilevel logic programming systemUS5544355Jun 14, 1993Aug 6, 1996Hewlett-Packard CompanyMethod and apparatus for query optimization in a relational database system having foreign functionsUS5701453Jul 1, 1993Dec 23, 1997Informix Software, Inc.Logical schema to allow access to a relational database without using knowledge of the database structureUS5764973Sep 13, 1995Jun 9, 1998Enterworks.Com, Inc.System for generating structured query language statements and integrating legacy systemsUS5797128May 14, 1997Aug 18, 1998Sun Microsystems, Inc.System and method for implementing a hierarchical policy for computer system administrationUS5802518 *Jun 4, 1996Sep 1, 1998Multex Systems, Inc.Information delivery system and methodUS5826268Dec 23, 1996Oct 20, 1998Ontos, Inc.Secure multilevel object oriented database management systemUS5872928May 25, 1995Feb 16, 1999Cabletron Systems, Inc.Method and apparatus for defining and enforcing policies for configuration management in communications networksUS5940289Aug 27, 1997Aug 17, 1999Hitachi, Ltd.Parallel database system retrieval method of a relational database management system using initial data retrieval query and subsequent sub-data utilization query processing for minimizing query timeUS5941947Aug 18, 1995Aug 24, 1999Microsoft CorporationSystem and method for controlling access to data entities in a computer networkUS6005571Sep 30, 1997Dec 21, 1999Softline, Inc.Graphical user interface for managing security in a database systemUS6023510 *Dec 24, 1997Feb 8, 2000Philips Electronics North America CorporationMethod of secure anonymous query by electronic messages transported via a public network and method of responseUS6052531Mar 25, 1998Apr 18, 2000Symantec CorporationMulti-tiered incremental software updatingUS6158010Feb 12, 1999Dec 5, 2000Crosslogix, Inc.System and method for maintaining security in a distributed computer networkUS6175837Jun 29, 1998Jan 16, 2001Sun Microsystems, Inc.Object-relational mapping toll that processes viewsUS6178505Mar 4, 1998Jan 23, 2001Internet Dynamics, Inc.Secure delivery of information in a networkUS6226635Aug 14, 1998May 1, 2001Microsoft CorporationLayered query managementUS6243747Feb 12, 1999Jun 5, 2001Cabletron Systems, Inc.Method and apparatus for defining and enforcing policies for configuration management in communications networksUS6256741Oct 13, 2000Jul 3, 2001At&T Corp.Specifying security protocols and policy constraints in distributed systemsUS6292900Nov 30, 1998Sep 18, 2001Sun Microsystems, Inc.Multilevel security attribute passing methods, apparatuses, and computer program products in a streamUS6321336Mar 13, 1998Nov 20, 2001Secure Computing CorporationSystem and method for redirecting network traffic to provide secure communicationUS6335972Nov 14, 1997Jan 1, 2002International Business Machines CorporationFramework-based cryptographic key recovery systemUS6336114Sep 3, 1998Jan 1, 2002Westcorp Software Systems, Inc.System and method for restricting access to a data table within a databaseUS6374256Jun 29, 1998Apr 16, 2002Sun Microsystems, Inc.Method and apparatus for creating indexes in a relational database corresponding to classes in an object-oriented applicationUS6412070Sep 21, 1998Jun 25, 2002Microsoft CorporationExtensible security system and method for controlling access to objects in a computing environmentUS6466932Mar 16, 1999Oct 15, 2002Microsoft CorporationSystem and method for implementing group policyUS6484261Dec 11, 1998Nov 19, 2002Cisco Technology, Inc.Graphical network security policy managementUS6505188Jun 15, 2000Jan 7, 2003Ncr CorporationVirtual join index for relational databasesUS6510513Jan 13, 1999Jan 21, 2003Microsoft CorporationSecurity services and policy enforcement for electronic dataUS6539380Apr 17, 2000Mar 25, 2003M-Systems Flash Disk Pioneers Ltd.Device, system and method for data access controlUS6542993Mar 12, 1999Apr 1, 2003Lucent Technologies Inc.Security management system and methodUS6578037Jun 7, 2000Jun 10, 2003Oracle CorporationPartitioned access control to a databaseUS6651249Dec 22, 1999Nov 18, 2003Symantec CorporationMulti-tiered incremental software updatingUS6658432Jun 20, 2001Dec 2, 2003Microstrategy, Inc.Method and system for providing business intelligence web content with reduced client-side processingUS6715077Mar 22, 2000Mar 30, 2004International Business Machines CorporationSystem and method to support varying maximum cryptographic strength for common data security architecture (CDSA) applicationsUS6757822May 31, 2000Jun 29, 2004Networks Associates Technology, Inc.System, method and computer program product for secure communications using a security service provider managerUS6772332Dec 23, 1998Aug 3, 2004Secure Computing CorporationSystem and method for providing secure internetwork services via an assured pipelineUS6792537Jan 14, 2000Sep 14, 2004Sun Microsystems, Inc.Mechanism for determining restrictions to impose on an implementation of a serviceUS6801229Apr 6, 2001Oct 5, 2004PlumbdesignSystem for creation of visual representation of dataUS6807636Feb 13, 2002Oct 19, 2004Hitachi Computer Products (America), Inc.Methods and apparatus for facilitating security in a networkUS6820082Apr 3, 2000Nov 16, 2004Allegis CorporationRule based database security system and methodUS6823362Oct 16, 2001Nov 23, 2004Hewlett-Packard Development Company, L.P.Effectively and efficiently updating content files among duplicate content serversUS6832313Jun 1, 2000Dec 14, 2004Fujitsu Services LimitedMigration from in-clear to encrypted working over a communications linkUS6854035Oct 5, 2001Feb 8, 2005International Business Machines CorporationStorage area network methods and apparatus for display and management of a hierarchical file system extension policyUS6862594Aug 31, 2000Mar 1, 2005Sun Microsystems, Inc.Method and apparatus to discover services using flexible search criteriaUS6873988Jul 9, 2002Mar 29, 2005Check Point Software Technologies, Inc.System and methods providing anti-virus cooperative enforcementUS6931549May 25, 2000Aug 16, 2005Stamps.ComMethod and apparatus for secure data storage and retrievalUS6941471Jan 17, 2001Sep 6, 2005Hewlett-Packard Development Company, L.P.Security policy applied to common data security architectureUS6970445Jun 11, 2002Nov 29, 2005Flarion Technologies, Inc.Methods and apparatus for supporting session signaling and mobility management in a communications systemUS6978379May 26, 2000Dec 20, 2005Hewlett-Packard Development Company, L.P.Configuring computer systemsUS7003578Apr 26, 2001Feb 21, 2006Hewlett-Packard Development Company, L.P.Method and system for controlling a policy-based networkUS7080224Nov 3, 2003Jul 18, 2006Hitachi, Ltd.Data processing method with restricted data arrangement, storage area management method, and data processing systemUS7093283Feb 15, 2002Aug 15, 2006Cisco Technology, Inc.Method and apparatus for deploying configuration instructions to security devices in order to implement a security policy on a networkUS7181513May 31, 2002Feb 20, 2007America Online, Inc.Restricting access to requested resourcesUS7185332Oct 8, 2003Feb 27, 2007Symantec CorporationMulti-tiered incremental software updatingUS7216125 *Sep 17, 2002May 8, 2007International Business Machines CorporationMethods and apparatus for pre-filtered access control in computing systemsUS7219140Jun 26, 2002May 15, 2007Dennis Craig MarlConfiguration and management systems for mobile and embedded devicesUS7234168Jun 13, 2002Jun 19, 2007Mcafee, Inc.Hierarchy-based method and apparatus for detecting attacks on a computer systemUS7257597Sep 3, 2002Aug 14, 2007Siebel Systems, Inc.Table substitutionUS7272625Jun 28, 1999Sep 18, 2007Sonicwall, Inc.Generalized policy serverUS7293010Apr 15, 2005Nov 6, 2007Ontoprise GmbhEnterprise information integration platformUS7293080Feb 4, 2003Nov 6, 2007Cisco Technology, Inc.Automatically discovering management information about services in a communication networkUS7296292Dec 15, 2000Nov 13, 2007International Business Machines CorporationMethod and apparatus in an application framework system for providing a port and network hardware resource firewall for distributed applicationsUS7337170Jan 18, 2005Feb 26, 2008International Business Machines CorporationSystem and method for planning and generating queries for multi-dimensional analysis using domain models and data federationUS7395255Sep 13, 2002Jul 1, 2008General Motors CorporationData management system having a common database infrastructureUS7466334Sep 17, 2002Dec 16, 2008Commfore CorporationMethod and system for recording and indexing audio and video conference calls allowing topic-based notification and navigation of recordingsUS20010007133Jan 22, 2001Jul 5, 2001Mark MoriconiSystem and method for maintaining security in a distributed computer networkUS20010023421Dec 15, 2000Sep 20, 2001International Business Machines CorporationAccess control system, access control method, storage medium and program transmission apparatusUS20020016777Mar 7, 2001Feb 7, 2002International Business Machines CorporationAutomated trust negotiationUS20020073088 *Sep 4, 2001Jun 13, 2002Beckmann William H.System and method for personalization implemented on multiple networks and multiple interfacesUS20020091975Dec 6, 2001Jul 11, 2002Digital Doors, Inc.Data security system and method for separation of user communitiesUS20020099699Feb 6, 2002Jul 25, 2002Toshiki KindoInformation filtering system and information filtering methodUS20020138726May 22, 2001Sep 26, 2002Sames David L.Method and apparatus for securely and dynamically modifying security policy configurations in a distributed systemUS20020166052May 4, 2001Nov 7, 2002Microsoft CorporationSystem and methods for caching in connection with authorization in a computer systemUS20020169954Jun 22, 2001Nov 14, 2002Bandini Jean-Christophe DenisMethod and system for e-mail message transmissionUS20020169975May 10, 2001Nov 14, 2002Gordon GoodSecurity policy management for network devicesUS20020178119May 24, 2001Nov 28, 2002International Business Machines CorporationMethod and system for a role-based access control model with active rolesUS20030014394Mar 22, 2001Jan 16, 2003Shinji FujiwaraCell-level data access control using user-defined functionsUS20030084030Oct 25, 2001May 1, 2003International Business Machines CorporationMethod and apparatus for optimizing queries in a logically partitioned computer systemUS20030093581Nov 9, 2001May 15, 2003Adc Dsl Systems, Inc.Telecommunications system architectureUS20030097443Nov 21, 2001May 22, 2003Richard GillettSystems and methods for delivering content over a networkUS20030110073Apr 5, 2001Jun 12, 2003Briel John VData management systemUS20030115484Sep 13, 2002Jun 19, 2003Moriconi Mark S.System and method for incrementally distributing a security policy in a computer networkUS20030126236Jun 26, 2002Jul 3, 2003Marl Dennis CraigConfiguration and management systems for mobile and embedded devicesUS20030126464Dec 4, 2001Jul 3, 2003Mcdaniel Patrick D.Method and system for determining and enforcing security policy in a communication sessionUS20030131245Jan 6, 2003Jul 10, 2003Michael LindermanCommunication security systemUS20030154401Feb 13, 2002Aug 14, 2003Hartman Bret A.Methods and apparatus for facilitating security in a networkUS20030182577Mar 22, 2002Sep 25, 2003Sun Microsystems, Inc.System and method for testing telematics softwareUS20030204719May 28, 2003Oct 30, 2003Kavado, Inc.Application layer security method and systemUS20030212673Mar 3, 2003Nov 13, 2003Sundar KadayamSystem and method for retrieving and organizing information from disparate computer network information sourcesUS20030217033May 17, 2002Nov 20, 2003Zigmund SandlerDatabase system and methodsUS20030229501Jun 3, 2002Dec 11, 2003Copeland Bruce WayneSystems and methods for efficient policy distributionUS20030236782May 7, 2003Dec 25, 2003Oracle International CorporationDynamic generation of optimizer hintsUS20030236977Jan 9, 2003Dec 25, 2003Levas Robert GeorgeMethod and system for providing secure access to applicationsUS20040010719Jun 11, 2003Jan 15, 2004AlcatelMethod, a portal system, a portal server, a personalized access policy server, a firewall and computer software products for dynamically granting and denying network resourcesUS20040034767Jun 4, 2003Feb 19, 2004Philip RobinsonApplication level securityUS20040034774Aug 15, 2002Feb 19, 2004Le Saint Eric F.System and method for privilege delegation and controlUS20040044651Aug 29, 2002Mar 4, 2004International Business Machines CorporationEstimation of input/output requirements for table probe in join processingUS20040054675Sep 13, 2002Mar 18, 2004Li Dennis Fuk-KuenData management system having a common database infrastructureUS20040088286 *Oct 31, 2002May 6, 2004Hackleman David E.System and method for enhancing network-based collaborationUS20040088313Nov 4, 2002May 6, 2004Medical Research ConsultantsKnowledge management systemUS20040098606Nov 18, 2002May 20, 2004International Business Machines CorporationSystem, method and program product for operating a grid of service providers based on a service policyUS20040107360Mar 13, 2003Jun 3, 2004Zone Labs, Inc.System and Methodology for Policy EnforcementUS20050289144 *Jun 29, 2004Dec 29, 2005International Business Machines CorporationTechniques for sharing persistently stored query results between multiple users* Cited by examinerNon-Patent CitationsReference1Beatty, "Service Data Objects", IBM Corp. and BEA Systems, Inc., version 1.0, Nov. 2003, retrieved from http://ftpna2.bea.com/pub/downloads/commonj/Commonj-SDO-Specification-v1.0.pdf on Sep. 4, 2008.2Chun-Hsian et al. "UML Based Hardware/Software Co-Design Platform for Dynamically Partially Reconfigurable Network Security Systems", Computer Systems Architecture Conference, 2008, ACSAC 2008, 13.sup.th Asia-Pacific, Aug. 4-6, 2008, pp. 1-8.3Foldoc, Dictionary Definition: "API", dated Feb. 1995, retrieved from .4Foldoc, Dictionary Definition: "API", dated Feb. 1995, retrieved from <http://foldoc.org/>.5Gennick, J., "SQL in, XML out," Oracle Magazine, May/Jun. 2003, pp. 1-5, http://www.oracle.com/technology/oramag/oracle/03-may/o33xml.html.6Hasan et al., Open Issues in Parallel Query Optimization, SIGMOD Record, vol. 25, No. 3, Sep. 1996, pp. 28-33.7International Search Report for PCT/US06/10451, dated Oct. 19, 2007, 8 pages.8Issarny et al. "Software Architecture for Mobile Distributed Computing", Software Architecture, 2004, WICSA 2004, Proceedings, Fourth Working IEEE/IFIP Conference on Jun. 12-15, 2004, pp. 201-210.9Liu et al. "Active Security Support for Active Networks" Systems, Man, and Cybernetics, Part C: Applications and Reviews, IEEE Transactions on vol. 33, Issue 4, Nov. 2003 pp. 432-435.10Office Action dated Apr. 30, 2009 in connection with U.S. Appl. No. 11/222,280, filed Sep. 8, 2005 (21 pages).11Office Action dated Sep. 29, 2009 in connection with U.S. Appl. No. 11/222,287, filed Sep. 8, 2005 (22 pages).12Oracle Corporation, Oracle8i Concepts, Release 8.1.5, Optimization of Joins [http://web.archive.org/web/20040914100026/http://www.camden.rutgers.edu/HELP/Documentation/Oracle/server.815/a67781/c20c-joi.htm], Aug. 18, 2009, 17 pages.13Oracle Corporation, Oracle8i Concepts, Release 8.1.5, Optimization of Joins [http://web.archive.org/web/20040914100026/http://www.camden.rutgers.edu/HELP/Documentation/Oracle/server.815/a67781/c20c�joi.htm], Aug. 18, 2009, 17 pages.14Ryutov, T., Neuman, C., Kim, D., "Dynamic Authorization and Intrusion Response in Distributed Systems," DARPA, Apr. 2003, vol. 1, pp. 50-61.15Webopedia.com. Dictionary Definition: "API", retrieved Oct. 2008, retrieved from .16Webopedia.com. Dictionary Definition: "API", retrieved Oct. 2008, retrieved from <http://www.webopedia.com/TERM/A/API.html>.Referenced byCiting PatentFiling datePublication dateApplicantTitleUS8214877 *May 22, 2007Jul 3, 2012Troux TechnologiesSystem and method for the implementation of policiesUS8234223Apr 28, 2005Jul 31, 2012Troux Technologies, Inc.Method and system for calculating cost of an asset using a data model* Cited by examinerClassifications U.S. Classification707/754, 463/43International ClassificationA63F9/24Cooperative ClassificationG06F21/6218, G06F21/6227European ClassificationG06F21/62B1, G06F21/62BLegal EventsDateCodeEventDescriptionApr 3, 2012CCCertificate of correctionOct 15, 2010ASAssignmentOwner name: ORACLE INTERNATIONAL CORPORATION, CALIFORNIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:BEA SYSTEMS, INC.;REEL/FRAME:025192/0244Effective date: 20101008Aug 28, 2006ASAssignmentOwner name: NEUROTECH S.A., FRANCEFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:CYTO THERAPEUTICS, INC.;REEL/FRAME:018248/0807Effective date: 19991229Jul 14, 2006ASAssignmentOwner name: BEA SYSTEMS, INC., CALIFORNIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:PATRICK, PAUL B.;GUPTA, NAVEEN;REEL/FRAME:017949/0616;SIGNING DATES FROM 20060421 TO 20060706Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:PATRICK, PAUL B.;GUPTA, NAVEEN;SIGNING DATES FROM 20060421 TO 20060706;REEL/FRAME:017949/0616RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google