International Business Machines Corporation

Jay Merrill Bruce

Marlene L Coates

Gary J Robinson

Geoffrey George Jackson

Guilherme Saueressig

Falk Reichbott

A database management system implements a role-oriented authorization scheme that facilitates operating system (OS) supported encrypted field access for a table in the database. A security model provides for various roles that have varying responsibilities and rights with respect to the database tables and the data supported therein. In this approach, data that is considered sensitive is encrypted. A system administrator role is authorized to create, update, and maintain a table but is not authorized to view sensitive field data, i.e., data stored in encrypted columns of the table. A security administrator role is authorized to define column masks with OS-enforced security access control to the sensitive field data. By separating (fencing) these responsibilities, the security model enforces end-to-end encryption across the entire database management system.

Role-oriented database record field security model

Systems, methods, and computer products that include an automated discovery process that discovers useful metadata objects from an intelligent starting point thereby generating at least one multidimensional model for OLAP analysis. Further, generation of the intelligent starting point may be derived by use of a multidimensional analysis program that analyzes the results of query mining and query analysis. The preferred embodiment of the present invention determines whether metadata useful for OLAP analysis exists by evaluating patterns found in the queries. In addition to using the starting point derived from the results of query mining and query analysis, the preferred embodiment of the present invention may also limit search parameters to narrow the scope of searching for an intelligent starting point and thereby both increase the probability of producing an accurate cube multidimensional model and increase the efficiency of determining the intelligent starting point.

Systems, methods, and computer program products that automatically discover metadata objects and generate multidimensional models

Systems, methods, and computer products that efficiently determine useful dimensions associated with a database when employing OLAP processing techniques. The present invention enables a user to see at a glance in which queries certain columns and tables are used. The present invention may be implemented with a query miner module that may include a query browser module that improves browsing through queries and their components over the past. The preferred embodiment of the present invention provides an easy to use graphical interface showing the queries, tables, and columns in a tree structure. Further, the preferred embodiment of the present invention presents information about relationships and dimensions associated with a database and about columns, tables, and queries to the user without discernable lag time between the user's request and the generated information.

Growing community of inventors

San Jose, CA, United States of America

Jay Merrill Bruce