AUDITING OF SQL QUERIES USING SELECT TRIGGERS,申请号US201313767223-传众专利搜索

AUDITING OF SQL QUERIES USING SELECT TRIGGERS

申请公布号：US2014230070(A1)

申请号：US201313767223

申请日期：2013.02.14

申请公布日期：2014.08.14

申请人：

MICROSOFT CORPORATION

发明人：Ramamurthy Ravi;Kaushik Shriraghav;Fabbri Daniel

分类号：G06F21/60

主分类号：G06F21/60

地址：Redmond WA US

摘要：SQL query auditing technique embodiments are presented that involve auditing data in a relational database accessed during execution of a SQL search query via a query execution plan to detect and report access to sensitive data. In one embodiment, a computer is used for inputting a SELECT trigger which specifies the sensitive data resident in the relational database that is to be monitored for access during execution of the SQL search query. In addition, the SELECT trigger specifies an action that is to be taken once execution of the SQL search query is completed, if sensitive data was accessed. Then, during execution of the query execution plan, access to sensitive data is monitored, and whenever such access is detected, it is reported. Next, upon completion of the execution of the SQL search query, the action specified in the SELECT trigger is performed if access to sensitive data was reported.

主权项：1. A computer-implemented process for auditing data in a relational database accessed during execution of a SQL search query via a query execution plan to detect and report access to sensitive data, comprising: using a computer to perform the following process actions: inputting a SELECT trigger which specifies the sensitive data resident in said relational database that is to be monitored for access during execution of the SQL search query, and an action to be taken once execution of the SQL search query is completed if sensitive data has been accessed; during execution of the query execution plan, monitoring for access to said sensitive data, andwhenever access to sensitive data is detected, reporting the sensitive data access; and upon completion of the execution of the SQL search query, performing the action specified in the SELECT trigger whenever access to sensitive data was reported.