Patent application EP17177080A (EP), filed 2017-06-21
Publication number: EP3260997A1
Title: METHOD AND SYSTEM FOR ENFORCING USER POLICY ON DATABASE RECORDS
Abstract: A system and method are provided for enforcing user policies on database. In one aspect a user policy and/or enterprise policy is predefined and mapped to the column of the database. Further, the query is run through a query parsing module, the result is sent to a query analyzing module to analyze the sensitivity of each query. A query rewriting module rewrites the query and the rewritten query is sent to the database. A sensitive tree is generated using database metadata, which is used during query analysis and query re-writing. In cases the original query does not contain any set operators the rewritten query is executed on the database and results are displayed as per the user policy. The cases where the original query comprises set operators a function called merger is implemented in the database or at the proxy server and data is displayed as per the user policy.
IPC codes: G06F  17/    30            A I
G06F  21/    62            A I
Claims: number: 1
text: A system for enforcing user policy to control access of sensitive data stored in a database, wherein the system comprising:
number: 2
text: The system claimed in claim 1, wherein the sensitive tree generator module takes privacy preferences as input to determine the sensitivity of fields of the database which may be subsequently used in marking tree nodes.
number: 3
text: The system claimed in claim 1, wherein the user policy is mapped to the column(s) of the database.
number: 4
text: The system claimed in claim 1, wherein the sensitive tree is generated using database metadata.
number: 5
text: The system claimed in claim 1, wherein the system is configured to have merger function to resolve the query with set operators.
number: 6
text: A method for enforcing user policy to control access of sensitive data stored in a database, wherein the method comprising one or more steps of:
number: 7
text: The method claimed in claim 6, wherein the query comprises one or more sub-queries.
number: 8
text: The method claimed in claim 6, wherein the one or more preferences are access preferences.
number: 9
text: The method claimed in claim 6, wherein the preference policy is mapped to the column(s) of the database.
number: 10
text: The method claimed in claim 6, wherein the sensitive tree is generated using database metadata.
number: 11
text: The method claimed in claim 6, wherein the merger function to resolve the query with set operators.
number: 12
text: A computer readable medium storing instructions for enforcing user policy to control access of sensitive data stored in a database, the instructions comprise:
Office action: search_report, dated 2017-12-27
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US2011313981A1
ref_type: patent
severity: background
ref_id: US2010241641A1
ref_type: patent
severity: background
ref_id: US2009094193A1
ref_type: patent
severity: background
ref_id: US2010161677A1
ref_type: patent
severity: background
ref_id: US2009094193
ref_type: patent
severity: background
ref_id: US2010241641
ref_type: patent
severity: novelty_destroying
ref_id: US2011313981
ref_type: patent
severity: novelty_destroying
Final disposition: pending (2017-12-27)