International Business Machines Corporation

Irene C Liu

Curt Lee Cotner

Gerald George Kiernan

Yao-Ching Stephen Chen

Walid Rjaibi

Timothy Jon Vincent

Thomas Abel Beavin

Regina J Liu

Dengfeng Gao

Gregory R Stager

David J Kuang

Xun Li

Liyan Zhou

Eric L Alton

Joyce A Taylor

Harley W Boughton

Yuping Ding

According to one embodiment of the present invention, a system processes a database query, and comprises a computer system including at least one processor. The system identifies one or more expressions within the database query utilizing a database object with value masking. Masking requirements are determined for each identified expression and the database object utilized by that identified expression is replicated to provide masked and actual versions of that database object in response to the masking requirements for that expression including masked values and actual values of that database object. The value masking of the database object is applied to the identified expressions within the database query based on the determined masking requirements to produce search results with masked values for the database query. Embodiments of the present invention further include a method and computer program product for processing a database query in substantially the same manner described above.

Query transformation for masking data within database objects

Provided are techniques for creating one or more fine-grained access control rules that are associated with a base table. A materialized query table is created from the base table without applying the one or more fine-grained access control rules associated with the base table when obtaining data from the base table. A fine-grained access control protection indicator is turned on for the materialized query table. In response to receiving a direct access request to the materialized query table in a query referencing the materialized query table, access is provided to the data in the materialized query table by applying one or more fine-grained access control rules associated directly with the materialized query table to the data in the materialized query table before returning the data.

Managing materialized query tables (MQTS) over fine-grained access control (FGAC) protected tables

Growing community of inventors

San Jose, CA, United States of America

Irene C Liu