Microsoft Technology Licensing, LLC

Steven Richard Gott

Tanmoy Dutta

Raghav Kaushik

Dilli Dorai Minnal Arumugam

Raul Garcia

Ruslan Pavlovich Ovechkin

Nitish Gupta

Nikolas Christopher Ogg

Yueren Wang

Andreas Wolter

Elnata Degefa

Roger Lynn Wolter

Pankaj Prabhakar Naik

Girish Chander

Ziquan Li

Clifford T Dibble

Rakesh Khanduja

Shafi Ahmad

Methods for centralized access control for cloud relational database management system resources are performed by systems and devices. The methods utilize a central policy storage, managed externally to database servers, which stores external policies for access to internal database resources at up to fine granularity. Database servers in the processing system each receive external access policies that correspond to users of the system by push or pull operations from the central policy storage, and store the external access policies in a cache of the database servers for databases. For resource access, access conditions are determined via policy engines of database servers based on an external access policy in the cache that corresponds to a user, responsive to a resource access request from a device of the user specifying the internal resource. Data associated with the resource is provided to the user based on the access condition being met.

Centralized access control for cloud relational database management system resources

In one embodiment, an object in a database schema may be verified as having a valid digital signature associated with a trusted entity. An application may be permitted access to the object of the database schema only when the object of the database schema is verified to have a valid digital signature associated with the trusted entity. In another embodiment, an object in a database schema may be verified as having a digital signature associated with at least one trusted entity. An application may be permitted access to the object of the database schema only when the digital signature for the object is verified to be associated with the at least one trusted entity.

Schema signing

Provided are systems and methods that facilitate providing permission to entities of a database. A system includes a component that authorizes a principal of a containing entity to grant a permission to that entity, and a component that grants the permission to the containing entity, the grantee of the permission inherits a set of permissions to one or more entities contained by the containing entity. When a permission is granted to a parent in a hierarchy of a relational database, the permission is inherited by the child nodes. Also provided is a method for transferring ownership of entities in a relational database. The method includes a two-part handshake that can be audited to avoid repudiation issues.

Specification of a hierarchical authorization model for a DBMS&#x2014;SQL language extensions

Growing community of inventors

Bellevue, WA, United States of America

Steven Richard Gott