US5694590A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Apparatus and method for the detection of security violations in multilevel secure databases
Assignee: F Poszat HU LLC
•
Filing: 1992-02-28
•
Granted: 1997-12-02
•
Expires: 2012-02-28
Abstract
Abstract A tool for assisting an operator to detect security violations in a multilevel secure database. The database stores data classified at a plurality of security levels, where the different users of the database are cleared to different security levels and access the database through a multilevel secure database management system. Security constraints are represented in conceptual structures, rules, or frames, and operator communication with the constraint representation is provided by a user interface. An inference engine uses reasoning strategies on the security-constraint representations base to detect security violations in the database by inference.
Inventors
- 👤 Bhavani Marienne Thuraisingham
- 👤 William Rose Barlett Ford
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 09:58
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6227; G06F21/50; G06F21/55; G06F2221/00; G06F2221/21; G06F2221/2113; Y; Y10; Y10S; Y10S706/00; Y10S706/902; Y10S706/934; Y10S707/00; Y10S707/99931; Y10S707/99939; Y10S707/99941; Y10S707/99944; Y10S707/99945
Claims Analysis
Total Claims: 3
Claim 1
Independent Claim
236 words
Apparatus for detecting security violations by inference in a multilevel database application, comprising: a module whose design utilizes a) conceptual structures for representing the multilevel database application in which the conceptual structures comprise a collection of nodes to represent the entities of the application and links to represent the relationships between the entities, and b) first methods for reasoning with the conceptual structures, whereby security violations in the application are detected by inference and a modified representation of the multilevel database application is produced; a multilevel secure database management system that manages a multilevel database which stores the modified representation; and an expert system for reasoning with the modified representation and with information released by the multilevel secure database management system to the expert system, whereby additional security violations in the application are detected by inference; wherein the conceptual structures of the module comprise multilevel semantic nets and multilevel conceptual graphs, said multilevel semantic nets and multilevel conceptual graphs being derived from semantic nets and conceptual graphs by second methods, and the first methods comprise techniques for reasoning with multilevel semantic nets and multilevel conceptual graphs; and wherein the multilevel semantic nets comprise nodes and links at a plurality of security levels, the multilevel conceptual graphs comprise concepts and relationships at a plurality of security levels, and the first methods further comprise techniques for reasoning with the nodes and links and with the concepts and relationships.
Claim 2
Dependent Claim
236 words
Apparatus for detecting security violations by inference in a multilevel database application, comprising: a module whose design utilizes a) conceptual structures for representing the multilevel database application in which the conceptual structures comprise a collection of nodes to represent the entities of the application and links to represent the relationships between the entities, and b) first methods for reasoning with the conceptual structures, whereby security violations in the application are detected by inference and a modified representation of the multilevel database application is produced; a multilevel secure database management system that manages a multilevel database which stores the modified representation; and an expert system for reasoning with the modified representation and with information released by the multilevel secure database management system to the expert system, whereby additional security violations in the application are detected by inference; wherein the conceptual structures of the module comprise multilevel semantic nets and multilevel conceptual graphs, said multilevel semantic nets and multilevel conceptual graphs being derived from semantic nets and conceptual graphs by second methods, and the first methods comprise techniques for reasoning with multilevel semantic nets and multilevel conceptual graphs; and wherein the multilevel semantic nets comprise nodes and links at a plurality of security levels, the multilevel conceptual graphs comprise concepts and relationships at a plurality of security levels, and the first methods further comprise techniques for reasoning with the nodes and links and with the concepts and relationships.
Claim 3
Dependent Claim
131 words
Apparatus of claim 1 wherein the expert system comprises: a knowledge base which represents information as frames and rules, said information including a) the modified representation of the multilevel database application, b) information from the multilevel database, and c) activities of the multilevel secure database management system; a knowledge manager for managing the knowledge base; a truth maintenance system to maintain the consistency of the frames and rules of the knowledge base; an inference engine which reasons with the information of the knowledge base using third methods, whereby the additional security violations are detected by inference; a conflict and contention resolution system for resolving conflicts in the reasoning process of the third methods; and a user interface which provides an interface between a user, the knowledge manager and the inference engine.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-12-01 | 2001-06-02 | 2001-12-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-12-01 | 2005-06-02 | 2005-12-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-12-01 | 2009-06-02 | 2009-12-02 | $7700.00 | Window Closed / Lapsed |