International Business Machines Corporation

Scott Ian Logan

Paul Miller Bird

Walid Rjaibi

Rakesh Agrawal

Gerald George Kiernan

Yao-Ching Stephen Chen

Tyrone W A Grandison

Allen William Luniewski

George Gerald Kiernan

A method and system for controlling access to data stored in a table of a database are provided. The method includes marking the table of the database as being protected with fine-grained access control (FGAC), creating a system authorization class for the table of the database, the system authorization class having a default row authorization that prevents access to all rows in the table, the system authorization class being unmodifiable, creating a user authorization class for the table of the database, the user authorization class having a default row authorization that prevents access to all rows in the table, the user authorization class being modifiable, and associating the system authorization class and the user authorization class with the table of the database.

Method and system for using fine-grained access control (FGAC) to control access to data in a database

A method of transforming relational database management systems into their privacy-preserving equivalents is provided. Language constructs allow fine grained access control (FGAC) restrictions to be specified on the access to data in a table at the level of a row, a column or a cell. Fine grained restrictions are a combination of access control and privacy policy restrictions, which ensure compliance with current privacy legislation mandates.

Extending relational database systems to automatically enforce privacy policies

Growing community of inventors

Don Mills, Canada

Scott Ian Logan