PATENT CLAIM ANALYSIS

Application Number: 16050172
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2018-12
Patent Classification: ["726", "022000"]

Abstract:
Securing invocation of stored procedures is provided herein. A first database management system (DBMS) can include a first database with first tables, a first user management module configured to manage privileges of database users (DB-users) of the first DBMS, and at least one first stored procedure. A second DBMS can include a second database with second tables, a second user management module configured to manage privileges of DB-users of the second DBMS, and at least one second stored procedure, the at least one second stored procedure configured to perform a computational task in the second DBMS. A synchronization mapping can map at least a portion of the first tables to respective ones of the second tables. Thus, a transfer of data of at least some of the first tables to the respective ones of the second tables in accordance with the synchronization-mapping can be performed.

Claim (Index 19):
A computer program product, the computer program product comprising a computer readable storage medium having program instructions for secure invocation of stored procedures embodied therewith, the program instructions executable by a processor to cause the processor to perform:\n receiving a request for performing a computational task from a client application, the request being a request of a first DB-user of a first DBMS; identifying in response to receiving the request for performing the computational task, one or more of a plurality of first tables to act as input or output tables for a first stored procedure; determining for each of the one or more of the plurality of first tables, if the first DB-user has read or write permissions for said one or more of the plurality of first tables for generating privilege information of the first DB-user; granting, user privileges to a second DB-user with respect to respective ones of second tables mapped by a synchronization mapping to at least a portion of the plurality of first tables, the user privileges being granted in accordance with the privilege information of the first DB-user; executing the at least one second stored procedure to prohibit access to any one of the second tables for which a second DB-user lacks privileges; installing a describe stored procedure in the second DBMS, the describe stored procedure being a non-trusted stored procedure; creating the second DB-user in the second DBMS, the second DB-user not having access to any one of the second tables and being permitted to call the describe stored procedure; calling the describe stored procedure to provide parameter values of the request as input for the describe stored procedure; parsing, via the describe stored procedure, the provided parameter values; outputting a list of the identified first table names and corresponding roles as an input or output table in a generic syntax; and transferring the list and the corresponding roles from the second DBMS to the first DBMS to enable the first DBMS or the at least one first stored procedure to identify the privilege information of the first DB-user with respect to the one or more of the plurality of first tables.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 95.0
- Lexical Diversity: 2.85714
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['16050209', '14951936', '15270301', '14715662', '15398956']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.305071128481823
- 35 USC 102 Novelty (BERT): 0.5190997289173935
- Combined Prediction Score: 0.32647398852538
- Mean Citation Score: 267.980234
- Max Citation Score: 348.0476
- Similarity Product: 342.1530021621228

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test