Hitachi, Ltd.

Kentaro Kakui

Kyosuke Achiwa

Nobukazu Kondo

Tsunehiko Baba

Jumpei Okoshi

Toshihiko Kashiyama

Kazuhide Aikoh

Keiko Tanigawa

A policy determination unit acquires a rule for a request for accessing data based on a preset access control policy, and selects whether to acquire attribute information about an attribute of each record of the data from the outside of a database in which the data is stored. As a result, when selecting acquisition of the attribute information, the attribute information is acquired and the rule based on the attribute information is evaluated, and when selecting no acquisition of the attribute information, the database is caused to execute filtering of the data based on the rule. Then, based on the evaluation result of the rule or the filtering execution result, a record of the data corresponding to the access request is acquired from the database.

Data access control method, data access control apparatus, and data access control program

The computer system is connected to a DB that stores data acquired from a production system in which a plurality of machines operate, and includes a generation unit and a data search unit. The DB stores operation data and environment data. The generation unit generates, by analyzing schedule information including a production schedule of the plurality of products, first owner information for storing first access control data including an owner, the machines, and a first access period set based on operation time, and generates, based on the first owner information, second owner information for storing second access control data including the owner, a type of the environment data, and a second access period set based on the first access period. The data search unit controls accesses to the DB based on the first owner information and the second owner information.

Computer system and data access control method

A predetermined access control policy is generated with reference to a lineage table and a metadata table to be stored in a policy table, and an access control policy which should be applied or recommended to treated data is provided with reference to the policy table.

Data access control system and data access control method

A computer system manages a data lake storing collected data, which is obtained from a data source, a data catalog storing first catalog data, and an asset catalog storing second catalog data. The computer system comprises: a catalog generation module configured to generate the data catalog, and the asset catalog; and a catalog link generation module configured to associate, in a case where at least one of the data catalog or the asset catalog is generated by the catalog generation module, the asset catalog and the data catalog with each other by adding, as an access key, a value that is stored in the first catalog data stored in the data catalog to the second catalog data stored in the asset catalog.

Computer system and data management method

An analysis management server stores a factory A catalog group including a plurality of catalogs in factory A, an application destination catalog including a plurality of catalogs in factory B, and an application source analysis data correspondence table associating columns between a target table of factory A and a defect factor analysis table. A CPU is configured to: identify an unconnected catalog for which a catalog of factory B having an identical correspondence does not exist among the plurality of catalogs of factory A included in the application source analysis data correspondence table; identify an unconnected correspondence, which is a correspondence of the unconnected catalog in the application source analysis data correspondence table, sensor data of factory B, and an identical path correspondence which is a correspondence of a catalog on a path including the unconnected catalog; and display information of the unconnected correspondence and the identical path correspondence.

Data selection system and data selection method

Provided is a method of detecting a warning sign indicating the occurrence of a system failure targeting a plurality of varied information processing systems. A system for monitoring a plurality of monitored systems receives measured values regarding a plurality of indexes, designates, from a plurality of prediction models, a prediction model for predicting a future measured value from the measured value that was received regarding a reference index, predicts a predicted value of the reference index based on the designated prediction model, generates or updates a Bayesian network targeting the reference index and a target index, and calculates a probability that a measured value of the target index will become a predetermined value or fall within a predetermined value range.

Information processing system monitoring apparatus, monitoring method, and monitoring program

An object of the present invention is to improve the usage efficiency of a storage extent in a storage system using the Allocation on Use (AOU) technique. A controller in the storage system allocates a storage extent in an actual volume to an extent in a virtual volume accessed by a host computer, detects any decrease in necessity for maintaining that allocation, and cancels the allocation of the storage extent in the actual volume to the extent in the virtual volume based on the detection result.

Growing community of inventors

Tokyo, Japan

Kentaro Kakui