WO2018126380A1

WO2018126380A1 - Database access control system

Info

Publication number: WO2018126380A1
Application number: PCT/CN2017/070237
Authority: WO
Inventors: 王志全
Original assignee: 深圳市前海中康汇融信息技术有限公司
Priority date: 2017-01-05
Filing date: 2017-01-05
Publication date: 2018-07-12

Abstract

A database access control system (100), comprising: a transceiving module (102) configured to receive access request information of a user and send access result information to the user, wherein the access request information comprises a user account, password, and target resource; an access permission module (106) configured to store multiple access permission information items corresponding to multiple users, wherein the multiple access permission information items are stored in a form of a permission list of roles and resource permissions; a matching module (104) coupled to the transceiving module (102) and access permission module (106), and configured to match the access request information in the transceiving module (102) against the access permission information items in the access permission module (106) to generate a matching result; and a processing module (108) coupled to the matching module (104) and configured to acquire, according to the matching result, the target resource in the database, and send corresponding access result information to the transceiving module (102). The database access control system (100) of the present invention can effectively protect access security of a database.

Description

Database access control system

Technical field

The present invention relates to the field of database access control, and in particular to a database access control system based on user rights.

Background technique

Database is an important part of modern computer applications, and it is a tool for people to effectively store, share and process data.

The database access technology abstracts the process of communicating with the outside of the database, and simplifies the process of the client accessing the database by providing an access interface.

However, the data in the database may be more confidential. If the user's access to the database is not managed effectively, and the user is allowed to obtain the desired data at will, the security of the database is not guaranteed.

Therefore, there is a need for an improved database access control system based on user rights.

Summary of the invention

It is an object of the present invention to provide an improved database access control system.

To achieve the purpose, the present invention provides a database access control system, including: a transceiver module configured to receive access request information of a user and send access result information to the user, wherein the access request information includes a user's account, password, and a target resource; an access permission module configured to store a plurality of access rights information corresponding to a plurality of users, wherein the plurality of access rights information are stored in the form of a permission list of roles and resource rights; a matching module coupled to the Transceiver module and the access The privilege module is configured to match the access request information in the transceiver module with the access privilege information in the access privilege module, and generate a matching result; the processing module is coupled to the matching module, configured to be configured according to the Matching the result to obtain the target resource in the database, and correspondingly sending the access result information to the transceiver module.

Preferably, the processing module is configured to: if the matching result indicates that the access request information matches the access right information, acquire the target resource, and send the access that includes the target resource related information correspondingly The result information is sent to the transceiver module.

Preferably, the transceiver module includes: a receiving unit configured to receive the access request information of the user, where the access request information includes an account, a password, and a target resource of the user; and a sending unit configured to The user sends the access result information, wherein the access result information includes information related to the target resource.

Preferably, the database access control system further includes: a server coupled to the access permission module, configured to back up multiple access rights information corresponding to multiple users online.

Preferably, the database access control system further includes: a data storage module coupled to the processing module, configured to include a plurality of database resources of the target resource, the plurality of database resources forming a resource tree.

Preferably, the processing module is configured to: obtain the target resource from the resource tree search according to a domain name or a keyword.

Preferably, the plurality of access rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has access rights to all database resources.

Preferably, the plurality of access rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and access rights to all database resources.

Advantageously, the database access control system of the embodiment of the present invention can efficiently and quickly access target resources in the database, and perform access control according to the user's authority, thereby effectively securing the database.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a block diagram of a database access control system in accordance with an embodiment of the present invention.

2 is a block diagram of a database access control system in accordance with another embodiment of the present invention.

3 is a block diagram of a database access control system in accordance with yet another embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

1 is a block diagram of a database access control system 100 in accordance with an embodiment of the present invention. As shown in FIG. 1, the database access control system 100 can include a transceiver module 102, a matching module 104, an access authority module 106, and a processing module 108.

In one embodiment, the transceiver module 102 can be configured to receive the user's access request information and send the access result information to the user, wherein the access request information includes the user's account, password, and target resources.

Further, the transceiver module 102 may include: a receiving unit configured to receive the access request information of the user, where the access request information includes an account, a password, and a target resource of the user; and a sending unit configured to Transmitting the access result information to the user, wherein the access result information includes information related to the target resource.

In one embodiment, the access rights module 106 can be configured to store a plurality of access rights information corresponding to a plurality of users, wherein the plurality of access rights information is stored in the form of a rights list of roles and resource rights.

The plurality of access rights information may include administrator rights information, and if the matching result indicates that the user is an administrator, the user has access rights to all database resources.

In addition, the plurality of access rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and access rights to all database resources.

In one embodiment, the matching module 104 is coupled to the transceiver module 102 and the access rights module 106, and is configurable to access the access request information in the transceiver module 102 and the access rights module 106. The permission information matches and produces a matching result (for example, the match is successful or the match is unsuccessful).

In an embodiment, the processing module 108 is coupled to the matching module 104, configured to acquire the target resource in the database according to the matching result, and send the access result information to the transceiver module 102 correspondingly. .

Further, the processing module 108 may be configured to: if the matching result indicates that the access request information matches the access right information, acquire the target resource, and correspondingly send the information including the target resource related information The access result information is described to the transceiver module 102.

2 is a block diagram of a database access control system 200 in accordance with another embodiment of the present invention. The database access control system 200 of FIG. 2 is similar to the database access control system 100 of FIG. 1 except for the user 210 and the server 220. For the sake of simplicity, similar parts are not described here.

Server 220 may be coupled to the access rights module 106 and configured to back up multiple access rights information corresponding to a plurality of users (eg, user 210) online.

3 is a block diagram of a database access control system 300 in accordance with yet another embodiment of the present invention. The database access control system 300 of FIG. 3 is similar to the database access control system 100 of FIG. 1 except for the data storage module 310. For the sake of simplicity, similar parts are not described here.

Data storage module 310 can be coupled to the processing module 108, configured to include a plurality of database resources of the target resource, the plurality of database resources forming a resource tree.

Correspondingly, the processing module 108 can be configured to: obtain the target resource from the resource tree search according to a domain name or a keyword.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. Within the scope.

Claims

A database access control system comprising:

The transceiver module is configured to receive the access request information of the user and send the access result information to the user, where the access request information includes the account, the password, and the target resource of the user;

The access permission module is configured to store a plurality of access rights information corresponding to the plurality of users, wherein the plurality of access rights information are stored in the form of a permission list of roles and resource rights;

a matching module, coupled to the transceiver module and the access permission module, configured to match the access request information in the transceiver module with access permission information in the access permission module, and generate a matching result;

The processing module is coupled to the matching module, configured to acquire the target resource in the database according to the matching result, and correspondingly send the access result information to the transceiver module.
The database access control system according to claim 1, wherein the processing module is configured to: if the matching result indicates that the access request information matches the access right information, acquire the target resource, and And transmitting, by the transceiver module, the access result information that includes the target resource related information.
The database access control system according to claim 1, wherein the transceiver module comprises:

a receiving unit, configured to receive the access request information of the user, where the access request information includes an account, a password, and a target resource of the user;

And a sending unit, configured to send the access result information to the user, where the access result information includes information related to the target resource.
The database access control system of claim 1 further comprising:

a server, coupled to the access permission module, configured to perform online backup corresponding to multiple users Access rights information.
The database access control system of claim 1 further comprising:

And a data storage module coupled to the processing module, configured to include a plurality of database resources of the target resource, where the plurality of database resources form a resource tree.
The database access control system according to claim 5, wherein the processing module is configured to: obtain the target resource from the resource tree search according to a domain name or a keyword.
The database access control system according to claim 1, wherein the plurality of access authority information comprises administrator authority information, and if the matching result indicates that the user is an administrator, the user has all databases. Access to resources.
The database access control system according to claim 1, wherein said plurality of access authority information includes creator authority information, and if said matching result indicates that said user is a creator, said user has access to all databases Resource modification and access rights.