Patent · US Expired

System and method for providing safe SQL-level access to a database

US5713018A · kind A · utility

37Cited by
8References
6Claims
0Family size

Assignee

Inventor

Key dates

Filing dateSep 27, 1995
Grant dateJan 27, 1998
Priority date
Expiry dateSep 27, 2015

Classification

  • Technology area (CPC Y)Emerging Cross-Sectional Technologies
  • CPC primaryY10S707/99939
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

A distributed computer system has an information server and a plurality of client computers coupled by one or more communication paths to the information server. The information server includes a database management system (DBMS) with an interface procedure for receiving and responding to SQL statements from client computers. At least one client computer has a database access procedure for sending SQL statements to the DBMS in the information server. The database access procedure includes embedded encrypted SQL statements, representing a predefined subset of a predefined full set of SQL statements recognized as legal SQL statements by the DBMS. For instance, the predefined subset of SQL statement might include only SQL statements for reading data in the DBMS, but not include SQL statements for modifying and adding data to the DBMS. Each of the SQL statements sent by the database access procedure to the DBMS includes a corresponding one of the encrypted SQL statements. The DBMS in the information server includes an interface procedure for processing all SQL statements received from client computers, including a decoding procedure for decoding the encrypted SQL statement included in …

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.