US 11,868,500 B2
Fine-grained access control of column-major relational database management systems
Pedro Miguel Barbas, Dunboyne (IE); Enzo Cialini, Hamilton (CA); David Kelly, Robertstown (IE); Qinlong Luo, Milton, GA (US); and Clara Liu, Markham (CA)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Mar. 24, 2021, as Appl. No. 17/211,229.
Prior Publication US 2022/0309180 A1, Sep. 29, 2022
Int. Cl. G06F 21/62 (2013.01); G06N 3/08 (2023.01); G06F 16/22 (2019.01); G06N 3/045 (2023.01)
CPC G06F 21/6227 (2013.01) [G06F 16/221 (2019.01); G06N 3/045 (2023.01); G06N 3/08 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-automated method for accessing objects in a segmented column-major database with fine-grained access control (FGAC) taking account of user-specific access restrictions to data entries in the objects, the method comprising:
providing an artificial neural network (ANN) structure of multiple ANNs, each storing an equally distributed segment map of segmented data entries of an object so as to permit reproduction of a row disposition of data entries in that object prior to segmentation;
receiving an access request from a user to access data in one or more objects stored in the segmented column-major database;
referencing the ANN structure to determine if any objects to be accessed by the access request are subject to access restrictions;
modifying the access request by referencing the ANN of each access-restricted object to generate a pseudo-view construct for that object that is limited to data entries that the user has permission to access, thereby to embed the FGAC in the access request; and
processing the modified access request based on the pseudo-view constructs to generate and return a result that takes account of the access restrictions to the user, wherein the processing comprises parsing the access request into a plurality of components, transforming the plurality of components into a compiler definition, and compiling the compiler definition to generate the result.