US 11,907,394 B1
Isolation and authorization for segregated command and query database resource access
Niv Rabin, Petach-Tikva (IL); Michael Balber, Petach-Tikva (IL); and Eli Shemesh, Petach-Tikva (IL)
Assigned to CyberArk Software Ltd., Petach-Tikva (IL)
Filed by CyberArk Software Ltd., Petach-Tikva (IL)
Filed on Dec. 13, 2022, as Appl. No. 18/080,273.
Int. Cl. G06F 21/62 (2013.01); G06F 21/60 (2013.01); G06F 21/31 (2013.01)
CPC G06F 21/6227 (2013.01) [G06F 21/31 (2013.01); G06F 21/604 (2013.01)] 30 Claims
OG exemplary drawing
 
1. A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for securely performing actions on a resource, the operations comprising:
receiving, from an entity associated with an organization, a request by the entity to perform a privileged action on a resource associated with the organization, the privileged action including either a query or write command, the request including a token associated with the entity;
providing a first indication of the request to a first handler configured to impersonate the entity associated with the organization, wherein the first handler is further configured to interact with a second handler; and
providing a second indication of the request to the second handler, the second handler being configured to perform the privileged action on the resource, the second handler including a query handler and a command handler, wherein:
when the privileged action includes a query, the second indication of the request is provided to the query handler and the query handler is configured to provide an indication of a result of the privileged action; and
when the privileged action includes a write command, the second indication of the request is provided to the command handler.