Electrical computers and digital processing systems: multicomput – Remote data accessing
Reexamination Certificate
1998-11-09
2002-09-03
Barot, Bharat (Department: 2154)
Electrical computers and digital processing systems: multicomput
Remote data accessing
C709S203000, C709S227000, C709S229000, C707S793000
Reexamination Certificate
active
06446117
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention generally relates to data base management systems and more particularly relates to enhancements for providing access to data base management systems via internet user terminals.
2. Description of the Prior Art
Data base management systems are well known in the data processing art. Such commercial systems have been in general use for more than 20 years. One of the most successful data base management systems is available from Unisys Corporation and is called the Classic MAPPER® data base management system. The Classic MAPPER system can be reviewed using the Classic MAPPER User's Guide which may be obtained from Unisys Corporation.
The Classic MAPPER system, which runs on proprietary hardware also available from Unisys Corporation, provides a way for clients to partition data bases into structures called filing cabinets and drawers, as a way to offer a more tangible format. The Mapper data base manager utilizes various predefined high-level instructions whereby the data base user may manipulate the data base to generate human-readable data presentations called “reports”. The user is permitted to prepare lists of the various predefined high-level instructions into data base manager programs called “Mapper Runs”. Thus, users of the Classic MAPPER system may create, modify, and add to a given data base and also generate periodic and aperiodic reports using various Mapper Runs.
However, with the Classic MAPPER system, as well as with similar proprietary data base management systems, the user must interface with the data base using a terminal coupled directly to the proprietary system and must access and manipulate the data using the Mapper Run command language of Classic MAPPER. Ordinarily, that means that the user must either be colocated with the hardware which hosts the data base management system or must be coupled to that hardware through dedicated telephone, satellite, or other data links. Furthermore, the user usually needs to be schooled in the command language of Classic MAPPER (or other proprietary data base management system) to be capable of generating Mapper Runs.
Since the advent of large scale, dedicated, proprietary data base management systems, the internet or world wide web has come into being. Unlike closed proprietary data base management systems, the internet has become a world wide bulletin board, permitting all to achieve nearly equal access using a wide variety of hardware, software, and communication protocols. Even though some standardization has developed, one of the important characteristics of the world wide web is its ability to constantly accept new and emerging techniques within a global framework. Many current users of the internet have utilized several generations of hardware and software from a wide variety of suppliers from all over the world. It is not uncommon for current day young children to have ready access to the world wide web and to have substantial experience in data access using the internet.
Thus, the major advantage of the internet is its universality. Nearly anyone, anywhere can become a user. That means that virtually all persons are potentially internet users without the need for specialized training and/or proprietary hardware and software. One can readily see that providing access to a proprietary data base management system, such as Classic MAPPER, through the internet would yield an extremely inexpensive and universally available means for accessing the data which it contains and such access would be without the need for considerable specialized training.
There are two basic problems with permitting internet access to a proprietary data base. The first is a matter of security. Because the internet is basically a means to publish information, great care must be taken to avoid intentional or inadvertent access to certain data by unauthorized internet users. In practice this is substantially complicated by the need to provide various levels of authorization to internet users to take full advantage of the technique. For example, one might have a first level involving no special security features available to any internet user. A second level might be for specific customers, whereas a third level might be authorized only for employees. One or more fourth levels of security might be available for officers or others having specialized data access needs.
Existing data base managers have security systems, of course. However, because of the physical security with a proprietary system, a certain degree of security is inherent in the limited access. On the other hand, access via the internet is virtually unlimited which makes the security issue much more acute.
The second major problem is imposed by the internet protocol itself One of the characteristics of the internet which makes it so universal is that any single transaction in HTML language combines a single transfer (or request) from a user coupled with a single response from the internet server. In general, there is no means for linking multiple transfers (or requests) and multiple responses. In this manner, the internet utilizes a transaction model which may be referred to as “stateless”. This limitation ensures that the internet, its users, and its servers remain sufficiently independent during operation that no one entity or group of entities can unduly delay or “hang-up” the communications system or any of its major components. Each transmissions results in a termination of the transaction. Thus, there is no general purpose means to link data from one internet transaction to another, even though in certain specialized applications limited amounts of data may be coupled using “cookies” or via attaching data to a specific HTML screen.
Unfortunately, the use of HTML screen attachments and cookies provide for the transfer of very limited amounts of data. Even more significant is that for a variable to be transferred from a first transaction to a subsequent transaction, it must be transferred from the data base management system all of the way back to the internet terminal via the world wide web. If that variable is to be actually used by the data base management system in the subsequent transaction (e.g., nested or hierarchical searches), the variable must be transferred all of the way back again to the data base management system via the world wide web. These extra transfers take time, consume transmission bandwidth, and greatly increase the exposure to compromise through breach of security.
SUMMARY OF THE INVENTION
The present invention overcomes the disadvantages of the prior art by providing a method of and apparatus for directly transferring variables from a first transaction to a subsequent transaction while utilizing a full featured data base management system by a user at a terminal coupled to the world wide web or internet. In order to permit any such access to the data base management system, the present invention must first provide a user interface, called a gateway, which translates transaction data transferred from the user over the internet in HTML format into a format from which data base management system commands and inputs may be generated. The gateway must also convert the data base management system responses and outputs into an HTML document for display on the user's internet terminal. Thus, as a minimum, the gateway must make these format and protocol conversions. In the preferred embodiment, the gateway resides in the web server coupled to the user via the world wide web and coupled to proprietary data base management system.
To make access to a proprietary data base by internet users practical, a sophisticated security system is required to prevent intentional or inadvertent unauthorized accesses. As discussed above, such a security system should provide multiple levels of access to accommodate a variety of authorized user categories. In the preferred embodiment of the present invention, several levels of data classification are provided and several classes of users are defi
Barot Bharat
Johnson Charles A.
Nawrocki, Rooney & Silvertson, P.A.
Starr Mark T.
Unisys Corporation
LandOfFree
Apparatus and method for saving session variables on the... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Apparatus and method for saving session variables on the..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Apparatus and method for saving session variables on the... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2863422