[go: up one dir, main page]

WO2018126387A1 - Système de gestion de partage de base de données - Google Patents

Système de gestion de partage de base de données Download PDF

Info

Publication number
WO2018126387A1
WO2018126387A1 PCT/CN2017/070247 CN2017070247W WO2018126387A1 WO 2018126387 A1 WO2018126387 A1 WO 2018126387A1 CN 2017070247 W CN2017070247 W CN 2017070247W WO 2018126387 A1 WO2018126387 A1 WO 2018126387A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
module
management system
database
list
Prior art date
Application number
PCT/CN2017/070247
Other languages
English (en)
Chinese (zh)
Inventor
王志全
Original Assignee
深圳市前海中康汇融信息技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳市前海中康汇融信息技术有限公司 filed Critical 深圳市前海中康汇融信息技术有限公司
Priority to PCT/CN2017/070247 priority Critical patent/WO2018126387A1/fr
Publication of WO2018126387A1 publication Critical patent/WO2018126387A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols

Definitions

  • the present invention relates to the field of database access control, and in particular to a database sharing management system based on user rights.
  • Database is an important part of modern computer applications, and it is a tool for people to effectively store, share and process data.
  • Database sharing technology abstracts the process of communicating with the outside of the database and simplifies the process of client access to the database by providing a shared interface.
  • the data in the database may be more confidential. If the user's access to the database is not managed effectively, and the user is allowed to obtain the desired data at will, the security of the database is not guaranteed.
  • the present invention provides a database sharing management system, comprising: a transceiver module configured to receive a read request from a user and send a read result to the user, wherein the read request includes an account of the user And a shared resource module configured to store user rights information including a shared resource list, a privacy resource list, and a corresponding user list; a matching module coupled to the transceiver module and the shared permission module, configured to The read request with the user The privilege information is matched and the matching result is generated; and the processing module is coupled to the matching module, configured to acquire the target resource in the database according to the matching result, and send the read result to the Transceiver module.
  • the matching module is configured to: verify whether the user's account and password are correct; if correct, confirm whether the target resource is in the shared resource list; if the target resource is in the shared resource list And generating the matching result to indicate that the read request matches the user right information.
  • the matching module is further configured to: if the target resource is in the shared privacy list, continue to determine whether the user is in the user list corresponding to the target resource; and if the user In the user list, the matching result is generated to indicate that the read request matches the user rights information.
  • the database sharing management system further includes: a setting module coupled to the sharing permission module, configured to set the user rights information including the shared resource list, the privacy resource list, and the corresponding user list.
  • a setting module coupled to the sharing permission module, configured to set the user rights information including the shared resource list, the privacy resource list, and the corresponding user list.
  • the setting module is further configured to set a resource usage time in the shared resource list.
  • the processing module starts timing when the read result is sent, and after the resource usage time expires, the user no longer has permission to read the target resource.
  • the setting module is further coupled to a server for receiving a setup instruction from the server.
  • the database sharing management system may further include: a storage module coupled to the processing module, configured to store a read history related to the read request.
  • the user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
  • the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
  • the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.
  • FIG. 1 is a block diagram of a database sharing management system in accordance with an embodiment of the present invention.
  • FIG. 2 is a block diagram of a database sharing management system in accordance with another embodiment of the present invention.
  • FIG. 3 is a block diagram of a database sharing management system in accordance with yet another embodiment of the present invention.
  • the database sharing management system 100 includes a transceiver module 102, a matching module 104, a sharing authority module 106, and a processing module 108.
  • the transceiver module 104 can be configured to receive a read request from a user and send a read result to the user, wherein the read request includes the user's account, password, and target resource.
  • the transceiver module 104 can include a receiving unit for receiving a read request of the user (eg, the user's account, password, and target resource), and a sending unit for transmitting the read result to the user (eg, the read is successful) Or read failure, and read information related to the target resource).
  • the sharing authority module 106 is configured to store user rights information including a shared resource list, a privacy resource list, and a corresponding user list.
  • database resources can be divided into shared resources and privacy resources. Two groups.
  • a shared resource refers to a resource in a database that is exposed to the outside, and a private resource refers to a resource that can be read only by a specific user (for example, a database creator).
  • the user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
  • the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
  • the matching module 104 is coupled to the transceiver module 102 and the shared rights module 106, and is configured to match the read request in the transceiver module 102 with the user rights information in the share permission module 106. And produce a matching result (for example, a matching success or a matching failure).
  • the matching module 104 can be configured to: verify whether the user's account and password are correct; if correct, confirm whether the target resource is in the shared resource list; if the target resource is in the shared resource list, The matching result is generated to indicate that the read request matches the user rights information.
  • the matching module 104 may be further configured to: if the target resource is in the shared privacy list, continue to determine whether the user is in the user list corresponding to the target resource; and if the user is In the user list, the matching result is generated to indicate that the read request matches the user authority information.
  • the processing module 108 is coupled to the matching module, and is configured to acquire the target resource in the database according to the matching result, and send the read result correspondingly (for example, a read success or a read failure, and The read information about the target resource is sent to the transceiver module 102.
  • FIG. 2 is a block diagram of a database sharing management system 200 in accordance with another embodiment of the present invention.
  • the database sharing management system 200 of FIG. 2 is similar to the database sharing management system 100 of FIG. 1 except for the setting module 210. For the sake of simplicity, similar parts are not described here.
  • the setting module 210 is coupled to the sharing authority module 106, and is configurable to set user rights information including a shared resource list, a privacy resource list, and a corresponding user list.
  • the setting module 210 is further configured to set a resource usage time in the shared resource list (for example) For example, 30 minutes).
  • the processing module 108 begins timing when the read result is sent, and after the resource usage time expires, the user no longer has permission to read the target resource.
  • the setup module 210 is also coupled to a server (not shown) for receiving setup instructions from the server.
  • FIG. 3 is a block diagram of a database sharing management system 300 in accordance with yet another embodiment of the present invention.
  • the database sharing management system 300 of FIG. 3 is similar to the database sharing management system 200 of FIG. 2 except for the storage module 310. For the sake of simplicity, similar parts are not described here.
  • a storage module 310 is coupled to the processing module 108 and is configured to store a read history associated with the read request.
  • the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

L'invention concerne un système de gestion de partage de base de données (100), comprenant : un module d'émission-réception (102) configuré pour recevoir une demande de lecture d'un utilisateur et envoyer à l'utilisateur un résultat de lecture, la demande de lecture comprenant un compte d'utilisateur, un mot de passe et une ressource cible ; un module d'autorisation de partage (106) configuré pour stocker des informations d'autorisation d'utilisateur comprenant une liste de ressources partagées, une liste de ressources privées et des listes d'utilisateurs correspondantes ; un module d'appariement (104) couplé au module d'émission-réception (102) et au module d'autorisation de partage (106), et configuré pour mettre en correspondance la demande de lecture avec les informations d'autorisation d'utilisateur pour générer un résultat de mise en correspondance ; et un module de traitement (108) couplé au module de mise en correspondance (104) et configuré pour acquérir, selon le résultat de mise en correspondance, la ressource cible dans la base de données, et envoyer un résultat de lecture correspondant au module d'émission-réception. Le système de gestion de partage de base de données (100) de la présente invention permet une gestion efficace d'opérations sur des données partagées dans une base de données.
PCT/CN2017/070247 2017-01-05 2017-01-05 Système de gestion de partage de base de données WO2018126387A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/070247 WO2018126387A1 (fr) 2017-01-05 2017-01-05 Système de gestion de partage de base de données

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/070247 WO2018126387A1 (fr) 2017-01-05 2017-01-05 Système de gestion de partage de base de données

Publications (1)

Publication Number Publication Date
WO2018126387A1 true WO2018126387A1 (fr) 2018-07-12

Family

ID=62788879

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/070247 WO2018126387A1 (fr) 2017-01-05 2017-01-05 Système de gestion de partage de base de données

Country Status (1)

Country Link
WO (1) WO2018126387A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113162985A (zh) * 2021-03-25 2021-07-23 北京赛博云睿智能科技有限公司 边缘资源轻量级容器化集成与分级分域共享方法及系统
CN118410113A (zh) * 2024-04-28 2024-07-30 中国水利水电科学研究院 一种多用户、多层级、多权限的水文模型协同共享方法

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060095514A1 (en) * 2004-10-20 2006-05-04 Inbit, Inc. Collaborative communication platforms
CN101340460A (zh) * 2008-08-11 2009-01-07 深圳市戴文科技有限公司 一种信息共享及查询方法、系统及移动终端和服务器
CN102231735A (zh) * 2011-06-22 2011-11-02 上海互联网软件有限公司 网络信息整合系统及其整合方法
CN102333076A (zh) * 2011-07-21 2012-01-25 上海互联网软件有限公司 文件共享系统及方法、网络信息整合系统及方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060095514A1 (en) * 2004-10-20 2006-05-04 Inbit, Inc. Collaborative communication platforms
CN101340460A (zh) * 2008-08-11 2009-01-07 深圳市戴文科技有限公司 一种信息共享及查询方法、系统及移动终端和服务器
CN102231735A (zh) * 2011-06-22 2011-11-02 上海互联网软件有限公司 网络信息整合系统及其整合方法
CN102333076A (zh) * 2011-07-21 2012-01-25 上海互联网软件有限公司 文件共享系统及方法、网络信息整合系统及方法

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113162985A (zh) * 2021-03-25 2021-07-23 北京赛博云睿智能科技有限公司 边缘资源轻量级容器化集成与分级分域共享方法及系统
CN113162985B (zh) * 2021-03-25 2022-11-25 北京赛博云睿智能科技有限公司 边缘资源轻量级容器化集成与分级分域共享方法及系统
CN118410113A (zh) * 2024-04-28 2024-07-30 中国水利水电科学研究院 一种多用户、多层级、多权限的水文模型协同共享方法

Similar Documents

Publication Publication Date Title
CN108293045B (zh) 本地和远程系统之间的单点登录身份管理
KR102313859B1 (ko) 권한 위양 시스템, 그 제어 방법 및 클라이언트
US8997197B2 (en) Encryption-based data access management
US8838961B2 (en) Security credential deployment in cloud environment
US9819672B1 (en) Sharing access tokens with trusted users
CN102622311B (zh) Usb移动存储设备访问控制方法、装置及系统
US10187373B1 (en) Hierarchical, deterministic, one-time login tokens
US8621036B1 (en) Secure file access using a file access server
US9626137B2 (en) Image forming apparatus, server device, information processing method, and computer-readable storage medium
US20170223005A1 (en) Local device authentication
US8863255B2 (en) Security credential deployment in cloud environment
US20190028478A1 (en) Leveraging flexible distributed tokens in an access control system
CN109831435B (zh) 一种数据库操作方法、系统及代理服务器和存储介质
US20130019281A1 (en) Server Based Remote Authentication for BIOS
US20140189346A1 (en) License server manager
CN106104558A (zh) 用于跨设备受信应用的安全硬件
CN105516059B (zh) 一种资源访问控制方法和装置
CN114417287B (zh) 数据处理方法、系统、设备及存储介质
US10162950B2 (en) Methods and apparatus for using credentials to access computing resources
WO2021260495A1 (fr) Gestion sécurisée d'un environnement d'automatisation de processus robotique
WO2018126387A1 (fr) Système de gestion de partage de base de données
JP2018022501A (ja) 複数のサービスシステムを制御するサーバシステム及び方法
US20110307708A1 (en) Enabling access to removable hard disk drives
WO2018126388A1 (fr) Procédé de gestion de partage de base de données
WO2018126380A1 (fr) Système de contrôle d'accès à une base de données

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17890347

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC , EPO FORM 1205A DATED 05.11.19.

122 Ep: pct application non-entry in european phase

Ref document number: 17890347

Country of ref document: EP

Kind code of ref document: A1