Patent US5899991A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5899991A Expired / Lapsed US ⏱️ 0.0 years remaining

Modeling technique for system access control and management

Assignee: Teleran Technologies Inc
•
Filing: 1997-05-12
•
Granted: 1999-05-04
•
Expires: 2017-05-12
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract An access and control system for use in a computer network provides for a rule making algorithm which models a database in advance and prevents queries which could result in exceptional processing requirements. As queries are entered during the life of the system, a learning algorithm updates the rules. The rules may be applied at the point of entry as well as the database.

Inventors

  • 👤 Robert Karch

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-07 16:16
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6227; G06F16/00; G06F16/20; G06F16/24; G06F16/245; G06F16/2455; G06F16/24564; G06F16/2457; G06F16/24575; G06F21/50; G06F21/55; G06F21/604; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99932; Y10S707/99933; Y10S707/99935

Claims Analysis

Total Claims: 31
Claim 1
Independent Claim 75 words
A method of controlling system access comprising the steps of: providing a plurality of terminals for a plurality of users to access said system; modeling said system in advance of any users accessing said system; said modeling accepting as input parameters derived from said system to be accessed; determining, in response to said step of modeling, which particular types of system access will result in degraded system performance; and preventing such types of system access.
Claim 2
Independent Claim 75 words
A method of controlling system access comprising the steps of: providing a plurality of terminals for a plurality of users to access said system; modeling said system in advance of any users accessing said system; said modeling accepting as input parameters derived from said system to be accessed; determining, in response to said step of modeling, which particular types of system access will result in degraded system performance; and preventing such types of system access.
Claim 3
Dependent Claim 75 words
The method of claim 1 further comprising the steps of: storing, in response to said step of determining, a set of rules indicative of which types of system access will be permitted and which types of system access will not be permitted; examining a particular type of system access requested; concluding, based upon said stored rules, that a particular system access should be prevented; and recording said particular type of system access to be prevented.
Claim 4
Dependent Claim 21 words
The method of claim 2 wherein said prevented type of system access or said stored rules are displayed to an operator.
Claim 5
Independent Claim 37 words
The method of claims 1, 2, or 3 wherein system access generates a result, and wherein said result is examined to determine whether said result causes too many of a plurality of database records to be retrieved.
Claim 6
Dependent Claim 16 words
The method of claim 1, 2, or 3 wherein said rules are implemented at said terminal.
Claim 7
Dependent Claim 11 words
The method of claim 2 wherein said rules are updated periodically.
Claim 8
Dependent Claim 18 words
The method of claim 6 wherein transactions causing excessive system loading results in said rules being promptly updated.
Claim 9
Dependent Claim 14 words
The method of claim 5 wherein said rules are updated after predetermined time periods.
Claim 10
Dependent Claim 17 words
The method of claim 5 wherein said rules are updated after a predetermined number of system accesses.
Claim 11
Dependent Claim 17 words
The method of claim 1 further comprising the step of: preventing said particular types of system access.
Claim 12
Independent Claim 97 words
A method of controlling system access by using rules, the method comprising the steps of: determining via a computerized induction process, properties of database queries which result in high resource utilization retrieving data from a database; generating, in response to said step of determining, a set of rules to prevent queries which have said properties; filtering said rules through a computer program to determine if any of said rules are inapplicable; and discarding in response to said filtering step at least one of said rules which requires that a query having said property should not be allowed.
Claim 13
Independent Claim 97 words
A method of controlling system access by using rules, the method comprising the steps of: determining via a computerized induction process, properties of database queries which result in high resource utilization retrieving data from a database; generating, in response to said step of determining, a set of rules to prevent queries which have said properties; filtering said rules through a computer program to determine if any of said rules are inapplicable; and discarding in response to said filtering step at least one of said rules which requires that a query having said property should not be allowed.
Claim 14
Independent Claim 56 words
A method of controlling system access comprising: forming a set of rules which govern whether particular transactions in said system will or will notbe permitted; weighing rules depending upon system conditions, several of said rules potentially conflicting with each other; and applying a weighted average of the rules to determine if system access will be permitted.
Claim 15
Independent Claim 56 words
A method of controlling system access comprising: forming a set of rules which govern whether particular transactions in said system will or will notbe permitted; weighing rules depending upon system conditions, several of said rules potentially conflicting with each other; and applying a weighted average of the rules to determine if system access will be permitted.
Claim 16
Independent Claim 82 words
A method of controlling access to a multi-user computer system comprising the steps of: (a) modeling a database contained in said computer; (b) determining, from said step of modeling, database queries which will generate excessive loading; (c) ascertaining, after database queries which generate excessive loading are transacted, additional queries which generate excessive loading and which where not determined in step (b); and (d) controlling access to said system by rules based upon both said step of ascertaining and said step of determining.
Claim 17
Independent Claim 82 words
A method of controlling access to a multi-user computer system comprising the steps of: (a) modeling a database contained in said computer; (b) determining, from said step of modeling, database queries which will generate excessive loading; (c) ascertaining, after database queries which generate excessive loading are transacted, additional queries which generate excessive loading and which where not determined in step (b); and (d) controlling access to said system by rules based upon both said step of ascertaining and said step of determining.
Claim 18
Dependent Claim 23 words
The method of claim 12 wherein at least two of said steps a-d are performed on a computing device other than said computer.
Claim 19
Dependent Claim 29 words
The method of claim 13 wherein excessive loading includes one or more of the following: (i) CPU time, (ii) elapsed time, (iii) bandwidth, and (iv) number of items retrieved.
Claim 20
Independent Claim 66 words
A method of forming rules to govern and control data access to a database, said method comprising: recording the occurrence of a first transaction at a first time; recording the occurrence of a second transaction at a second time; preventing specified future data accesses to said database if said first and second times have a predetermined relationship with each other with respect to time and substance.
Claim 21
Independent Claim 66 words
A method of forming rules to govern and control data access to a database, said method comprising: recording the occurrence of a first transaction at a first time; recording the occurrence of a second transaction at a second time; preventing specified future data accesses to said database if said first and second times have a predetermined relationship with each other with respect to time and substance.
Claim 22
Independent Claim 83 words
A method of updating rules in a computer system, said computer system having a plurality of clients, said method comprising: applying, at least one of said clients, rules to objects contained within said clients; collecting results of said applications at said at least one of said clients of said rules to said objects said results being organized into samples; updating rules based upon said samples; and applying said updated rules to said objects at each of said at least one of said clients.
Claim 23
Independent Claim 83 words
A method of updating rules in a computer system, said computer system having a plurality of clients, said method comprising: applying, at least one of said clients, rules to objects contained within said clients; collecting results of said applications at said at least one of said clients of said rules to said objects said results being organized into samples; updating rules based upon said samples; and applying said updated rules to said objects at each of said at least one of said clients.
Claim 24
Dependent Claim 20 words
The method of claim 17 wherein said step of collecting comprises the step of transmitting samples to a central server.
Claim 25
Dependent Claim 20 words
The method of claim 17 or 18 wherein said step of updating comprises the step of utilizing a learning engine.
Claim 26
Dependent Claim 35 words
The method of claim 19 further comprising the steps of maintaining, at said central server, a database of all samples, and utilizing samples regarding a particular object to update rules governing such particular object types.
Claim 27
Dependent Claim 12 words
The method of claim 18 wherein said object is a database query.
Claim 28
Dependent Claim 35 words
The method of claim 21 further comprising the steps of maintaining, at said central server, a database of all samples, and utilizing samples regarding a particular object to update rules governing such particular object types.
Claim 29
Dependent Claim 25 words
The method of claim 21 wherein said rules are designed to prevent database queries from generating results with more than a predetermined amount of data.
Claim 30
Dependent Claim 35 words
The method of claim 18 further comprising the steps of maintaining, at said central server, a database of all samples, and utilizing samples regarding a particular object to update rules governing such particular object types.
Claim 31
Dependent Claim 35 words
The method of claim 18 wherein any client which transmits a sample to said central server is automatically scheduled to receive updates to rules governing objects of a type corresponding to objects within said sample.

References Cited (Backward Citations)

US5724569A Cited
US5412806A Cited
US5544355A Cited
US5590322A Cited
US5600831A Cited
US5546576A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2002-05-03 2002-11-02 2003-05-04 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2006-05-03 2006-11-02 2007-05-04 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2010-05-03 2010-11-02 2011-05-04 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag