Patent Document ID: 10114972
Application ID: 14567508

Base Claim:
1. A method, comprising: determining that a received query comprising a plurality of selection predicates requests values of sensitive data stored in a secure database table of a database; determining that a first selection predicate of the plurality of selection predicates does not specify at least one of a plurality of specific values stored in the secured database table; evaluating a plurality of possible values for each selection predicate of the plurality of selection predicates other than the first selection predicate; determining that each of the plurality of possible values for each selection predicate is evaluated as a true value; computing a security score for the received query based on the first selection predicate of the received query not specifying the at least one of the plurality of specific values stored in the secured database table and that each of the plurality of possible values for each selection predicate other than the first selection predicate is evaluated as a true value; determining that the security score exceeds a security threshold value; and upon determining that the security score exceeds the security threshold value, performing, by a database management system (DBMS) executing on a computer processor, a predefined operation to restrict access to the requested values of the sensitive data.

---

Claim 8:
8. The method of claim 1 , further comprising: prior to computing the security score, determining that a second selection predicate of the plurality of selection predicates is an open-ended predicate, wherein the security score is further computed based on the determining that the second selection predicate is an open-ended predicate.