WO2018126387A1 - Database sharing management system - Google Patents
Database sharing management system Download PDFInfo
- Publication number
- WO2018126387A1 WO2018126387A1 PCT/CN2017/070247 CN2017070247W WO2018126387A1 WO 2018126387 A1 WO2018126387 A1 WO 2018126387A1 CN 2017070247 W CN2017070247 W CN 2017070247W WO 2018126387 A1 WO2018126387 A1 WO 2018126387A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- user
- module
- management system
- database
- list
- Prior art date
Links
- 238000010586 diagram Methods 0.000 description 6
- 238000000034 method Methods 0.000 description 4
- 230000004048 modification Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 238000004883 computer application Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/40—Network security protocols
Definitions
- the present invention relates to the field of database access control, and in particular to a database sharing management system based on user rights.
- Database is an important part of modern computer applications, and it is a tool for people to effectively store, share and process data.
- Database sharing technology abstracts the process of communicating with the outside of the database and simplifies the process of client access to the database by providing a shared interface.
- the data in the database may be more confidential. If the user's access to the database is not managed effectively, and the user is allowed to obtain the desired data at will, the security of the database is not guaranteed.
- the present invention provides a database sharing management system, comprising: a transceiver module configured to receive a read request from a user and send a read result to the user, wherein the read request includes an account of the user And a shared resource module configured to store user rights information including a shared resource list, a privacy resource list, and a corresponding user list; a matching module coupled to the transceiver module and the shared permission module, configured to The read request with the user The privilege information is matched and the matching result is generated; and the processing module is coupled to the matching module, configured to acquire the target resource in the database according to the matching result, and send the read result to the Transceiver module.
- the matching module is configured to: verify whether the user's account and password are correct; if correct, confirm whether the target resource is in the shared resource list; if the target resource is in the shared resource list And generating the matching result to indicate that the read request matches the user right information.
- the matching module is further configured to: if the target resource is in the shared privacy list, continue to determine whether the user is in the user list corresponding to the target resource; and if the user In the user list, the matching result is generated to indicate that the read request matches the user rights information.
- the database sharing management system further includes: a setting module coupled to the sharing permission module, configured to set the user rights information including the shared resource list, the privacy resource list, and the corresponding user list.
- a setting module coupled to the sharing permission module, configured to set the user rights information including the shared resource list, the privacy resource list, and the corresponding user list.
- the setting module is further configured to set a resource usage time in the shared resource list.
- the processing module starts timing when the read result is sent, and after the resource usage time expires, the user no longer has permission to read the target resource.
- the setting module is further coupled to a server for receiving a setup instruction from the server.
- the database sharing management system may further include: a storage module coupled to the processing module, configured to store a read history related to the read request.
- the user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
- the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
- the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.
- FIG. 1 is a block diagram of a database sharing management system in accordance with an embodiment of the present invention.
- FIG. 2 is a block diagram of a database sharing management system in accordance with another embodiment of the present invention.
- FIG. 3 is a block diagram of a database sharing management system in accordance with yet another embodiment of the present invention.
- the database sharing management system 100 includes a transceiver module 102, a matching module 104, a sharing authority module 106, and a processing module 108.
- the transceiver module 104 can be configured to receive a read request from a user and send a read result to the user, wherein the read request includes the user's account, password, and target resource.
- the transceiver module 104 can include a receiving unit for receiving a read request of the user (eg, the user's account, password, and target resource), and a sending unit for transmitting the read result to the user (eg, the read is successful) Or read failure, and read information related to the target resource).
- the sharing authority module 106 is configured to store user rights information including a shared resource list, a privacy resource list, and a corresponding user list.
- database resources can be divided into shared resources and privacy resources. Two groups.
- a shared resource refers to a resource in a database that is exposed to the outside, and a private resource refers to a resource that can be read only by a specific user (for example, a database creator).
- the user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
- the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
- the matching module 104 is coupled to the transceiver module 102 and the shared rights module 106, and is configured to match the read request in the transceiver module 102 with the user rights information in the share permission module 106. And produce a matching result (for example, a matching success or a matching failure).
- the matching module 104 can be configured to: verify whether the user's account and password are correct; if correct, confirm whether the target resource is in the shared resource list; if the target resource is in the shared resource list, The matching result is generated to indicate that the read request matches the user rights information.
- the matching module 104 may be further configured to: if the target resource is in the shared privacy list, continue to determine whether the user is in the user list corresponding to the target resource; and if the user is In the user list, the matching result is generated to indicate that the read request matches the user authority information.
- the processing module 108 is coupled to the matching module, and is configured to acquire the target resource in the database according to the matching result, and send the read result correspondingly (for example, a read success or a read failure, and The read information about the target resource is sent to the transceiver module 102.
- FIG. 2 is a block diagram of a database sharing management system 200 in accordance with another embodiment of the present invention.
- the database sharing management system 200 of FIG. 2 is similar to the database sharing management system 100 of FIG. 1 except for the setting module 210. For the sake of simplicity, similar parts are not described here.
- the setting module 210 is coupled to the sharing authority module 106, and is configurable to set user rights information including a shared resource list, a privacy resource list, and a corresponding user list.
- the setting module 210 is further configured to set a resource usage time in the shared resource list (for example) For example, 30 minutes).
- the processing module 108 begins timing when the read result is sent, and after the resource usage time expires, the user no longer has permission to read the target resource.
- the setup module 210 is also coupled to a server (not shown) for receiving setup instructions from the server.
- FIG. 3 is a block diagram of a database sharing management system 300 in accordance with yet another embodiment of the present invention.
- the database sharing management system 300 of FIG. 3 is similar to the database sharing management system 200 of FIG. 2 except for the storage module 310. For the sake of simplicity, similar parts are not described here.
- a storage module 310 is coupled to the processing module 108 and is configured to store a read history associated with the read request.
- the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Storage Device Security (AREA)
Abstract
Description
本发明涉及数据库访问控制领域,并且特别涉及一种基于用户权限的数据库共享管理系统。The present invention relates to the field of database access control, and in particular to a database sharing management system based on user rights.
数据库是现代计算机应用的一个重要组成部分,是人们有效地进行数据存储、共享和处理的工具。Database is an important part of modern computer applications, and it is a tool for people to effectively store, share and process data.
数据库共享技术将数据库外部与其通信的过程抽象化,通过提供共享接口,简化了客户端访问数据库的过程。Database sharing technology abstracts the process of communicating with the outside of the database and simplifies the process of client access to the database by providing a shared interface.
然而,数据库中的数据可能是比较机密的。如果不对用户访问数据库的权限进行有效管理,而允许用户随意获取想要的数据,则数据库的安全得不到保障。However, the data in the database may be more confidential. If the user's access to the database is not managed effectively, and the user is allowed to obtain the desired data at will, the security of the database is not guaranteed.
因此,需要一种改进的基于用户权限的数据库共享管理系统。Therefore, there is a need for an improved database sharing management system based on user rights.
发明内容Summary of the invention
本发明的目的在于提供一种改进的数据库共享管理系统。It is an object of the present invention to provide an improved database sharing management system.
为实现本目的,本发明提供一种数据库共享管理系统,包括:收发模块,配置为接收用户的读取请求并且向所述用户发送读取结果,其中所述读取请求包括所述用户的账户、密码、和目标资源;共享权限模块,配置为存储包括共享资源列表、隐私资源列表、以及对应用户列表的用户权限信息;匹配模块,耦合于所述收发模块和所述共享权限模块,配置为将所述读取请求与所述用户 权限信息匹配,并产生匹配结果;以及处理模块,耦合于所述匹配模块,配置为根据所述匹配结果来获取所述数据库中的所述目标资源,并相应发送所述读取结果给所述收发模块。To achieve the object, the present invention provides a database sharing management system, comprising: a transceiver module configured to receive a read request from a user and send a read result to the user, wherein the read request includes an account of the user And a shared resource module configured to store user rights information including a shared resource list, a privacy resource list, and a corresponding user list; a matching module coupled to the transceiver module and the shared permission module, configured to The read request with the user The privilege information is matched and the matching result is generated; and the processing module is coupled to the matching module, configured to acquire the target resource in the database according to the matching result, and send the read result to the Transceiver module.
优选地,所述匹配模块配置为:检验所述用户的账户和密码是否正确;如果正确,则确认所述目标资源是否在所述共享资源列表中;如果所述目标资源在所述共享资源列表中,则产生所述匹配结果来指示所述读取请求与所述用户权限信息匹配。Preferably, the matching module is configured to: verify whether the user's account and password are correct; if correct, confirm whether the target resource is in the shared resource list; if the target resource is in the shared resource list And generating the matching result to indicate that the read request matches the user right information.
优选地,所述匹配模块还配置为:如果所述目标资源在所述共享隐私列表中,则继续确定所述用户是否在对应于所述目标资源的所述用户列表中;以及如果所述用户在所述用户列表中,则产生所述匹配结果来指示所述读取请求与所述用户权限信息匹配。Preferably, the matching module is further configured to: if the target resource is in the shared privacy list, continue to determine whether the user is in the user list corresponding to the target resource; and if the user In the user list, the matching result is generated to indicate that the read request matches the user rights information.
优选地,数据库共享管理系统还包括:设置模块,耦合于所述共享权限模块,配置为设置包括所述共享资源列表、所述隐私资源列表、以及所述对应用户列表的所述用户权限信息。Preferably, the database sharing management system further includes: a setting module coupled to the sharing permission module, configured to set the user rights information including the shared resource list, the privacy resource list, and the corresponding user list.
优选地,所述设置模块还可配置为设置所述共享资源列表中的资源使用时间。Preferably, the setting module is further configured to set a resource usage time in the shared resource list.
优选地,所述处理模块在发送所述读取结果时开始计时,并且在所述资源使用时间到期之后,所述用户不再有权限读取所述目标资源。Preferably, the processing module starts timing when the read result is sent, and after the resource usage time expires, the user no longer has permission to read the target resource.
优选地,所述设置模块还耦合于服务器,用于接收来自所述服务器的设置指令。Preferably, the setting module is further coupled to a server for receiving a setup instruction from the server.
优选地,所述数据库共享管理系统还可包括:存储模块,耦合于所述处理模块,配置为存储与所述读取请求有关的读取历史记录。Preferably, the database sharing management system may further include: a storage module coupled to the processing module, configured to store a read history related to the read request.
优选地,所述用户权限信息包括管理员权限信息,如果所述匹配结果指示所述用户为管理员,则所述用户具有对所有数据库资源的共享权限。Preferably, the user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
优选地,所述用户权限信息包括创建者权限信息,如果所述匹配结果指示所述用户为创建者,则所述用户具有对所有数据库资源的修改和共享权限。 Preferably, the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
有利地,本发明所提供的数据库共享管理系统能够有效管理对数据库中的共享数据的操作。Advantageously, the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.
为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.
图1所示是根据本发明实施例的数据库共享管理系统的框图。1 is a block diagram of a database sharing management system in accordance with an embodiment of the present invention.
图2所示是根据本发明另一实施例的数据库共享管理系统的框图。2 is a block diagram of a database sharing management system in accordance with another embodiment of the present invention.
图3所示是根据本发明又一实施例的数据库共享管理系统的框图。3 is a block diagram of a database sharing management system in accordance with yet another embodiment of the present invention.
为了使本发明的目的、技术方案及优点更加清楚明白,以下结合附图及实施例,对本发明进行进一步详细说明。应当理解,此处所描述的具体实施例仅仅用以解释本发明,并不用于限定本发明。The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
图1所示是根据本发明实施例的数据库共享管理系统100的框图。如图1所示,数据库共享管理系统100包括:收发模块102、匹配模块104、共享权限模块106、以及处理模块108。1 is a block diagram of a database
在一个实施例中,收发模块104可配置为接收用户的读取请求并且向用户发送读取结果,其中所述读取请求包括用户的账户、密码、和目标资源。例如,收发模块104可包括接收单元,用于接收用户的读取请求(例如,用户的账户、密码、和目标资源);以及发送单元,用于向用户发送读取结果(例如,读取成功或读取失败,以及读取的与目标资源有关的信息)。In one embodiment, the
共享权限模块106,配置为存储包括共享资源列表、隐私资源列表、以及对应用户列表的用户权限信息。例如,数据库资源可分为共享资源和隐私资源
两组。共享资源指对外部公开的数据库中的资源,而隐私资源指只有特定用户(例如,数据库创建者)才可以读取的资源。The
所述用户权限信息包括管理员权限信息,如果所述匹配结果指示所述用户为管理员,则所述用户具有对所有数据库资源的共享权限。The user rights information includes administrator rights information, and if the matching result indicates that the user is an administrator, the user has sharing rights to all database resources.
此外,所述用户权限信息包括创建者权限信息,如果所述匹配结果指示所述用户为创建者,则所述用户具有对所有数据库资源的修改和共享权限。In addition, the user rights information includes creator rights information, and if the matching result indicates that the user is a creator, the user has modification and sharing rights to all database resources.
匹配模块104耦合于所述收发模块102和所述共享权限模块106,可配置为将所述收发模块102中的所述读取请求与所述共享权限模块106中的所述用户权限信息匹配,并产生匹配结果(例如,匹配成功或匹配失败)。The
所述匹配模块104可配置为:检验用户的账户和密码是否正确;如果正确,则确认所述目标资源是否在所述共享资源列表中;如果所述目标资源在所述共享资源列表中,则产生所述匹配结果来指示所述读取请求与所述用户权限信息匹配。The
所述匹配模块104还可配置为:如果所述目标资源在所述共享隐私列表中,则继续确定所述用户是否在对应于所述目标资源的所述用户列表中;以及如果所述用户在所述用户列表中,则产生所述匹配结果来指示所述读取请求与所述用户权限信息匹配。The
处理模块108耦合于所述匹配模块,可配置为根据所述匹配结果来获取所述数据库中的所述目标资源,并相应发送所述读取结果(例如,读取成功或读取失败,以及读取的与目标资源有关的信息)给所述收发模块102。The
图2所示是根据本发明另一实施例的数据库共享管理系统200的框图。除了设置模块210之外,图2中的数据库共享管理系统200类似于图1中的数据库共享管理系统100。为简约起见,相似部分不另赘述。2 is a block diagram of a database
设置模块210耦合于所述共享权限模块106,可配置为设置包括共享资源列表、隐私资源列表、以及对应用户列表的用户权限信息。The
所述设置模块210还配置为设置所述共享资源列表中的资源使用时间(例
如,30分钟)。所述处理模块108在发送所述读取结果时开始计时,并且在所述资源使用时间到期之后,所述用户不再有权限读取所述目标资源。The
所述设置模块210还耦合于服务器(未示出),用于接收来自所述服务器的设置指令。The
图3所示是根据本发明又一实施例的数据库共享管理系统300的框图。除了存储模块310之外,图3中的数据库共享管理系统300类似于图2中的数据库共享管理系统200。为简约起见,相似部分不另赘述。3 is a block diagram of a database
存储模块310耦合于所述处理模块108,配置为存储与所述读取请求有关的读取历史记录。A
有利地,本发明所提供的数据库共享管理系统能够有效管理对数据库中的共享数据的操作。Advantageously, the database sharing management system provided by the present invention is capable of efficiently managing operations on shared data in a database.
以上所述仅为本发明的较佳实施例而已,并不用以限制本发明,凡在本发明的精神和原则之内所作的任何修改、等同替换和改进等,均应包含在本发明的保护范围之内。 The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. Within the scope.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/CN2017/070247 WO2018126387A1 (en) | 2017-01-05 | 2017-01-05 | Database sharing management system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/CN2017/070247 WO2018126387A1 (en) | 2017-01-05 | 2017-01-05 | Database sharing management system |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2018126387A1 true WO2018126387A1 (en) | 2018-07-12 |
Family
ID=62788879
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2017/070247 WO2018126387A1 (en) | 2017-01-05 | 2017-01-05 | Database sharing management system |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2018126387A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113162985A (en) * | 2021-03-25 | 2021-07-23 | 北京赛博云睿智能科技有限公司 | Lightweight containerized integration and hierarchical domain sharing method and system for edge resources |
CN118410113A (en) * | 2024-04-28 | 2024-07-30 | 中国水利水电科学研究院 | A multi-user, multi-level, multi-authority collaborative sharing method for hydrological models |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060095514A1 (en) * | 2004-10-20 | 2006-05-04 | Inbit, Inc. | Collaborative communication platforms |
CN101340460A (en) * | 2008-08-11 | 2009-01-07 | 深圳市戴文科技有限公司 | Information sharing and searching method, system, mobile terminal and server |
CN102231735A (en) * | 2011-06-22 | 2011-11-02 | 上海互联网软件有限公司 | Network information integration system and integration method thereof |
CN102333076A (en) * | 2011-07-21 | 2012-01-25 | 上海互联网软件有限公司 | File sharing system and method, and network information integration system and method |
-
2017
- 2017-01-05 WO PCT/CN2017/070247 patent/WO2018126387A1/en active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060095514A1 (en) * | 2004-10-20 | 2006-05-04 | Inbit, Inc. | Collaborative communication platforms |
CN101340460A (en) * | 2008-08-11 | 2009-01-07 | 深圳市戴文科技有限公司 | Information sharing and searching method, system, mobile terminal and server |
CN102231735A (en) * | 2011-06-22 | 2011-11-02 | 上海互联网软件有限公司 | Network information integration system and integration method thereof |
CN102333076A (en) * | 2011-07-21 | 2012-01-25 | 上海互联网软件有限公司 | File sharing system and method, and network information integration system and method |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113162985A (en) * | 2021-03-25 | 2021-07-23 | 北京赛博云睿智能科技有限公司 | Lightweight containerized integration and hierarchical domain sharing method and system for edge resources |
CN113162985B (en) * | 2021-03-25 | 2022-11-25 | 北京赛博云睿智能科技有限公司 | Edge resource lightweight containerization integration and hierarchical domain sharing method and system |
CN118410113A (en) * | 2024-04-28 | 2024-07-30 | 中国水利水电科学研究院 | A multi-user, multi-level, multi-authority collaborative sharing method for hydrological models |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN108293045B (en) | Single sign-on identity management between local and remote systems | |
KR102313859B1 (en) | Authority transfer system, control method therefor, and client | |
US8997197B2 (en) | Encryption-based data access management | |
US8838961B2 (en) | Security credential deployment in cloud environment | |
US9819672B1 (en) | Sharing access tokens with trusted users | |
CN102622311B (en) | USB (universal serial bus) mobile memory device access control method, USB mobile memory device access control device and USB mobile memory device access control system | |
US8621036B1 (en) | Secure file access using a file access server | |
US9626137B2 (en) | Image forming apparatus, server device, information processing method, and computer-readable storage medium | |
US20170223005A1 (en) | Local device authentication | |
US8863255B2 (en) | Security credential deployment in cloud environment | |
US9673979B1 (en) | Hierarchical, deterministic, one-time login tokens | |
US20190028478A1 (en) | Leveraging flexible distributed tokens in an access control system | |
CN109831435B (en) | Database operation method, system, proxy server and storage medium | |
US20130019281A1 (en) | Server Based Remote Authentication for BIOS | |
US20140189346A1 (en) | License server manager | |
CN106104558A (en) | Secure hardware for trusted apps across devices | |
CN105516059B (en) | A kind of resource access control method and device | |
CN114417287B (en) | Data processing method, system, device and storage medium | |
US10162950B2 (en) | Methods and apparatus for using credentials to access computing resources | |
WO2021260495A1 (en) | Secure management of a robotic process automation environment | |
WO2018126387A1 (en) | Database sharing management system | |
JP2018022501A (en) | Server system and method for controlling a plurality of service systems | |
US20110307708A1 (en) | Enabling access to removable hard disk drives | |
WO2018126388A1 (en) | Database sharing management method | |
WO2018126380A1 (en) | Database access control system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 17890347 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC , EPO FORM 1205A DATED 05.11.19. |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 17890347 Country of ref document: EP Kind code of ref document: A1 |