Ontos, Inc.

Paul A Martel

Craig S Harris

Craig R Leckband

Marvin Schaefer

Sandra A Wade

Winslow R Cuthbert

Antoun J Kanawati

A secure multilevel object oriented database management system which maintains data confidentiality and optimizes data integrity. All requests for database operations are mediated through an access validation monitor (AVM). The AVM is responsible for performing the following duties: applying mandatory and discretionary access control rules for each request it services to ensure the request is allowable; constructing views of multilevel objects ensuring that the clearance level of the subject making the request dominates the classification of the data being requested; managing data update requests so as to allow polyinstantiation only upon receiving explicit requests from the subject, the explicit request being accomplished through an update to the associated semantic vector (Semantic vectors are employed to maintain data integrity); detecting erroneous polyinstantiation attempts and flagging such errors to the requesting subject; and managing the creation of new multilevel objects, and enforces entity integrity constraints. The AVM constructs the requesting subject's view of a multilevel object at a particular security level by computing a value for each property of the object. Each property value of the object if determined by inspecting the object's semantic vector. The semantic vector indicates, for each property of a multilevel object and at every populated level of said object, whether the property's value is dynamic (i.e., derived from an instantiation stored at the nearest populated dominated sensitivity level of the object where the semantic vector mark such property static).

Secure multilevel object oriented database management system

A method and apparatus for accessing and effectively integrating non-object oriented data stores with object applications. An integrating environment is implemented wherein an application using a distributed object database and object database management system (ODBMS) is provided with an interface to external data stores in a manner so as to effect location transparency. The application, accessing data via the ODBMS, can manipulate data in foreign data stores which include external data that is mapped and converted into objects for use by object applications. A storage management application program interface ('SM API'), effects a functional interface for handling objects, referencing objects, implementing iteration and indexing of objects, and implementing object transaction and cache handling. The SM API is part of a modular architecture that includes an external storage manager which implements classes that provide the foundation for engaging external data stores, and which maps and converts external data into objects that can be manipulated by an application using the ODBMS.

Object oriented data store integration environment for integration of

A system for generating globally unique identifiers for objects in a distributed object oriented database. In one embodiment the system comprises at least two processors connected by means of a network to a processor executing a server process which provides globally unique identifiers for objects throughout the network. Each processor on the network may execute one or more client processes, each of which may run transactions against the database. Each such client process transmits a request to the server process which provides the globally unique identifiers when that client process requires a globally unique object identifier for objects which the requesting client process is creating. In response to the request, the server which provides globally unique identifiers transmits a range of globally unique object identifiers to the requesting client process. The requesting client process then allocates object identifiers from this range of globally unique object identifiers to the objects it is creating. Upon completion of the allocation of the globally unique object identifiers to the objects which have been created, the requesting client process then returns any unused globally unique object identifiers to the server for use by other client processes.

Growing community of inventors

Fitchburg, MA, United States of America

Paul A Martel