Barbara Jewel Banks

US Patent:

7797342, Sep 14, 2010

Filed:

Aug 17, 2007

Appl. No.:

11/840306

Inventors:

Barbara J. Banks - Berkeley CA, US
Rajnish Kumar Chitkara - Fremont CA, US
Shiping Chen - Pleasanton CA, US

Assignee:

Sybase, Inc. - Dublin CA

International Classification:

G06F 17/30

US Classification:

707783, 707999002, 707999009, 707999107, 713166, 713190

Abstract:

A database system providing encrypted column data support with decrypt default functionality. In a database system, a method providing automated encryption support for column data comprises steps of: defining Structured Query Language (SQL) extensions for creating and managing column encryption keys and database tables with encrypted column data; receiving an SQL statement specifying creation of a column encryption key; receiving an SQL statement specifying creation of a database table having particular column data encrypted with the column encryption key; receiving an SQL statement specifying a default value to be provided in response to requests for the column data without decrypt permission; in response to a subsequent database operation requesting encrypted column data from a user with decrypt permission, automatically decrypting the column data; and in response to a subsequent database operation requesting the encrypted column data from a user without decrypt permission, returning the default value.

US Patent:

20060053112, Mar 9, 2006

Filed:

Oct 13, 2004

Appl. No.:

10/711929

Inventors:

Rajnish Chitkara - Fremont CA, US
Barbara Banks - Berkeley CA, US
Anita Patel - Castro Valley CA, US

Assignee:

SYBASE, INC. - Dublin CA

International Classification:

G06F 17/30

US Classification:

707009000

Abstract:

A database system providing SQL extensions for automated encryption and decryption of column data is described. In one embodiment, for example, in a database system, a method is described for providing automated encryption support for column data, the method comprises steps of: defining Structured Query Language (SQL) extensions for creating and managing column encryption keys, and for creating and managing database tables with encrypted column data; receiving an SQL statement specifying creation of a particular column encryption key; receiving an SQL statement specifying creation of a database table having particular column data encrypted with the particular column encryption key; and in response to a subsequent database operation that requires the particular column data that has been encrypted, automatically decrypting the particular column data for use by the database operation.

US Patent:

20100290623, Nov 18, 2010

Filed:

May 12, 2009

Appl. No.:

12/464617

Inventors:

Barbara Jane Banks - Berkeley CA, US
Rajnish Kumar Chitkara - Fremont CA, US
Shiping Chen - Pleasanton CA, US

Assignee:

Sybase, Inc. - Dublin CA

International Classification:

H04L 9/00
G06F 17/30

US Classification:

380277, 707E17005

Abstract:

System, method, computer program product embodiments and combinations and sub-combinations thereof for protection of encryption keys in a database are described herein. An embodiment includes a master key and a dual master key, both of which are used to encrypt encryption keys in a database. To access encrypted data, the master key and dual master key must be supplied to a database server by two separate entities, thus requiring dual control of the master and dual master keys. Furthermore, passwords for the master and dual master keys must be supplied separately and independently, thus requiring split knowledge to access the master and dual master keys. In another embodiment, a master key and a key encryption key derived from a user password is used for dual control. An embodiment also includes supplying the secrets for the master key and dual master key through server-private files.

US Patent:

20140188938, Jul 3, 2014

Filed:

Dec 28, 2012

Appl. No.:

13/729698

Inventors:

Barbara Banks - Berkeley CA, US
Rajnish Chitkara - Fremont CA, US

International Classification:

G06F 17/30

US Classification:

707783

Abstract:

Methods, systems and computer-readable storage mediums encoded with computer programs executed by one or more processors for conditional role activation in a database are disclosed. In an embodiment, a request to activate a role for a user of a database system is received, and a predicate for conditional activation of the role is determined. The conditions of the predicate are evaluated, and if the conditions of the predicate are satisfied, the role is activated for the user. If, however, one or more of the conditions of the predicate are not satisfied, the role is not activated for the user.