International Business Machines Corporation

Nicole Finnie

Peter Bendel

Namik Hrle

Felix O Beier

Knut Stolze

Claus Kempfert

Einar Lueck

Jens Mueller

Christian W Hoerst

Johannes S Kern

Jens Müller

Christian W P Hoerst

The present disclosure relates to a method for processing queries in a database system having a first database engine and a second database engine. The method includes: encrypting at least one predefined column of a first instance of a first table, resulting in a second instance of the first table containing at least part of the data of the first table in encrypted format. It may be determined whether to execute a received query in the first database engine on the first instance of the first table or in the second database engine on the second instance of the first table, where the determination involves a comparison of the query with encryption information.

Transparent analytical query accelerator over encrypted data

Aspects of the invention include processing queries in a database system having a first database engine and a second database engine. A first instance of a first table is stored in the first database engine in plaintext. At one predefined column of the first table is encrypted, resulting in a set of encrypted columns, using a cascade encryption scheme that includes a set of ordered encryption methods. A subset of the set of columns is stored in a second instance of the first table in the second database engine. An encryption method of the cascade encryption scheme that allows a query operation of a received query on data encrypted with the identified encryption method is identified. The identified encryption method is used to rewrite the query, and the rewritten query is executed using the second instance of the first table.

Processing analytical queries over encrypted data using dynamical decryption

The present disclosure relates to a method for processing data in a database engine. The method includes storing a first instance of a first table in the database engine in plaintext. Encryption information about encryption methods and encryption keys of at least one predefined column of the first table may be maintained. In response to data changes in the column, first log entries for the data changes may be written in plaintext. The data changes may be encrypted by an encryption component using the encryption information. This results in encrypted data changes. Second log entries for the encrypted data changes may be written and applied to a second instance of the first table. The second instance of the first table is stored at a further database engine.

Data coherency between trusted DBMS and untrusted DBMS

The present disclosure relates to a method for processing queries in a database system having a first database engine and a second database engine. The method includes: storing a first instance of a first table in the first database engine in plaintext; encrypting at least one predefined column of the first table, resulting in a second instance of the first table containing at least part of the data of the first table in encrypted format. The second instance of the first table in the second database engine is stored in the second database engine. It may be determined whether to execute a received query in the first database engine on the first table or in the second database engine on the second instance of the first table, where the determination involves a comparison of the query with encryption information.

A method for executing a computational task in a data management system is provided. The method includes storing a first stored procedure in a first database management system (DBMS) including first data containers. The first stored procedure receives names of one or more of the first data containers to act as input or output data containers and includes first statements for triggering resolution of features of a respective first input or output data container. The method also includes storing a second stored procedure in a second DBMS including second data containers. The second stored procedure implements the computational task and operates on one or more of the second data containers. The method also includes receiving, by the first DBMS, a request from a client application to perform the computational task.

Task-execution in a DBMS using stored procedures

Securing invocation of stored procedures is provided herein. A first database management system (DBMS) can include a first database with first tables, a first user management module configured to manage privileges of database users (DB-users) of the first DBMS, and at least one first stored procedure. A second DBMS can include a second database with second tables, a second user management module configured to manage privileges of DB-users of the second DBMS, and at least one second stored procedure, the at least one second stored procedure configured to perform a computational task in the second DBMS. A synchronization mapping can map at least a portion of the first tables to respective ones of the second tables. Thus, a transfer of data of at least some of the first tables to the respective ones of the second tables in accordance with the synchronization-mapping can be performed.

Secure invocation of stored procedures in database management systems

In an approach for testing a software application on a target system, a computer provides a test framework being executed on a test framework system, the system being coupled with the target system via network and receives a test scenario by the test framework, the scenario including information regarding a software application to be tested, the target system on which said software application should be executed and regarding one or multiple protocols supported by the target system. The computer interprets information included in said scenario by said test framework and deriving properties associated with at least one software application to be generated based on said information interpretation. The computer then generates an executable software application in a programming language, said application being adapted to the target system by using said derived software application properties. The computer triggers execution of said application thereby obtaining test results, and evaluates said results.

Software test automation

A method includes storing a first stored procedure in a first database management module and a second stored procedure in a second database management module, receiving by the first database management module a request to run a computational task with the first stored procedure, receiving a request to perform the computational task and in response thereto causing a first query optimizer in the first database management module to automatically compute a query execution plan for the first stored procedure, using the query execution plan to identify all first data containers on the first database management module that provide input data for the requested computational task, identifying a list of names of all second data containers mapped to the identified first data containers, and performing the second stored procedure using the list of names. A corresponding computer program product and data management system are also disclosed herein.

Growing community of inventors

Boeblingen, Germany

Nicole Finnie