Transaction-aware caching for access control metadata
Claim Score by NHIP
Abstract
Techniques are provided for performing transaction-aware caching of metadata in an electronic file system. A mechanism is described for providing transaction-aware caching that uses a cache hierarchy, where the cache hierarchy includes uncommitted caches associated with sessions in an application and a committed cache that is shared among the sessions in that application. Techniques are described for caching document metadata, access control metadata and folder path metadata. Also described is a technique for using negative cache entries to avoid unnecessary communications with a server when applications repeatedly request non-existent data.
Term
Term ended
Projected expiry passed 19 June 2023, 3.3 years ago.
- Priority
- Filed
- Published
- Projected expiry
- Today
34 claims: 3 independent, 31 dependent
- 1A method for determining authorization to operate on a file, the method comprising the computer-implemented steps of:receiving a request, associated with a session, for an operation on the file;looking in one or more session caches that are associated with said session for an entry that contains permissions metadata for said file;if said entry is not in said one or more session caches, then looking for said entry in one or more shared caches whose entries are accessible to multiple sessions;and if said entry is not in said one or more shared caches, then obtaining said permissions metadata from a source other than said one or more session caches and said one or more shared caches;and using said permission data to determine whether said operation may be performed on said file.
- 2323 A method for maintaining information about a file managed by a database system comprising the computer-implemented steps of:storing within a first cache a first version of an entry that includes only changes made by a transaction associated with said first cache;wherein said entry is for permissions metadata;storing within a second cache a second version of said entry that does not include said changes made by said transaction;and invalidating said second version of said entry when said transaction successfully terminates.
- 29A method for finding permissions metadata comprising the computer-implemented steps of:maintaining outside of a database system a first cache and a second cache that store said permissions metadata about files stored in said database system;wherein said first cache stores a first version of said permissions metadata for a particular file in said database system, wherein said first version reflects modifications made during a first session and does not reflect modifications made during a second session;and wherein said second cache stores a second version of said permissions metadata for said particular file, wherein said second version reflects said modifications made during said second session and does not reflect said modifications made during said first session.
Independent claims3
248 paragraphs in 5 sections, as filed
PRIORITY CLAIM AND CROSS-REFERENCE TO RELATED APPLICATIONS
P-0001[0001] This application is a continuation-in-part application and claims the benefit of domestic priority under 35 U.S.C. §120 from U.S. patent application Ser. No. 09/853,823, filed on May 11, 2001 entitled “Nested Transactions in a File System”, by David Long and David Pitfield, the entire disclosure of which is hereby incorporated by reference for all purposes as if fully set forth herein, which is related to and claims domestic priority from prior U.S. Provisional Application Serial No. 60/204,196, filed on May 12, 2000, entitled “Techniques and Features of an Internet File System”, by David Long, the entire disclosure of which is hereby incorporated by reference for all purposes as if fully set forth herein.
P-0002[0002] This application is related to U.S. Application Serial No. ______ (attorney docket number 50277-1749), filed on equal day herewith, entitled “Transaction-Aware Caching for Document Metadata”, by David Long and David Pitfield, the entire disclosure of which is hereby incorporated by reference for all purposes as if fully set forth herein.
P-0003[0003] This application is related to U.S. Application Serial No. ______ (attorney docket number 50277-1750), filed on equal day herewith, entitled “Transaction-Aware Caching for Access Control Metadata”, by David Long and David Pitfield, the entire disclosure of which is hereby incorporated by reference for all purposes as if fully set forth herein.
FIELD OF THE INVENTION
P-0004[0004] The present invention relates to electronic file systems, and in particular to transaction-aware caching of file system metadata for electronic file systems.
BACKGROUND OF THE INVENTION
P-0005[0005] Humans tend to organize information in categories. The categories in which information is organized are themselves typically organized relative to each other in some form of hierarchy. For example, an individual animal belongs to a species, the species belongs to a genus, the genus belongs to a family, the family belongs to an order, and the order belongs to a class.
P-0006[0006] With the advent of computer systems, techniques for storing electronic information have been developed that largely reflected this human desire for hierarchical organization. Conventional operating systems, for example, provide file systems that use hierarchy-based organization principles. Specifically, a typical operating system file system (“OS file system”) has folders arranged in a hierarchy, and documents stored in the folders. Ideally, the hierarchical relationships between the folders reflect some intuitive relationship between the meanings that have been assigned to the folders. Similarly, it is ideal for each document to be stored in a folder based on some intuitive relationship between the contents of the document and the meaning assigned to the folder in which the document is stored.
P-0007[0007] Recently, techniques have been developed to use a relational database to store files that have traditionally been stored in OS file systems. By storing the files in a relational database, the files may be accessed by issuing database commands to a database server. In many circumstances, retrieving and manipulating files by issuing database commands can be much more efficient than by issuing file system commands due to the enhanced functionality of database servers. One system in which a relational database is used as the back end of a file system is described in U.S. patent application Ser. No. 09/571,508, entitled “Multi-Model Access to Data”, filed on May 15, 2000 by Eric Sedlar, the entire contents of which are incorporated herein by this reference. In the Sedlar system, the files are accessible both (1) by making calls to conventional file system APIs, and (2) by issuing queries to the database server.
P-0008[0008] A transaction is an “all or nothing” unit of work. Changes made by operations that belong to a transaction are not made permanent until all changes in the transaction are successfully made and the transaction commits. If any operation within a transaction fails, then all changes made by the transaction are undone. The removal of changes made by a transaction is referred to as a “rollback” operation.
P-0009[0009] When an OS file system is implemented using a relational database system, a series of file system operations may be performed as a transaction within the database system. Techniques for performing file system operations as a transaction are described in U.S. patent application Ser. No. 09/571,496, entitled “File System that Supports Transactions”, filed on May 15, 2000, by Eric Sedlar, the entire contents of which are incorporated herein by this reference.
P-0010[0010] One of the difficult problems associated with using a database as part of a file system is the performance overhead of accessing the database every time information about files that are stored in the file system is required. Such information about files is generally referred to as the file system “metadata”. Examples of metadata associated with files are: (1) a document's name, creation date, last modified date (2) permissions for accessing the document, and (3) the folder path for accessing the document.
P-0011[0011] Furthermore, in a file system that supports transactions, the “metadata” that is supplied to an entity needs to be based on the context of that entity. For example, if a first entity is in the middle of a transaction that has changed the filename of a file, the first entity should be supplied the new filename even though the transaction has not yet completed. However, a second entity that is not involved in that transaction should be supplied the old filename, since the transaction that changed the filename has not yet committed.
P-0012[0012] Based on the foregoing, it is clearly desirable to provide techniques that reduce the overhead associated with accessing a database to retrieve metadata associated with files that are stored within a database system.
BRIEF DESCRIPTION OF THE DRAWINGS
P-0013[0013] The present invention is illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings and in which like reference numerals refer to similar elements and in which:
P-0014[0014]FIG. 1 is a block diagram of a system for managing files using a database system according to an embodiment of the invention;
P-0015[0015]FIG. 2 is a block diagram that illustrates the translation engine of FIG. 1 in greater detail;
P-0016[0016]FIG. 3A is a flowchart illustrating steps of searching for attribute metadata in a hierarchical cache; and
P-0017[0017]FIG. 3B is a flowchart illustrating steps for collapsing entries from the frame of a nested transaction into the frame of the transaction in which it is nested;
P-0018[0018]FIG. 4 is a block diagram of a cache hierarchy in a system; and
P-0019[0019]FIG. 5 is a block diagram of two different types of uncommitted caches associated with a particular session.
P-0020[0020]FIG. 6 is a block diagram of a computer system on which embodiments of the invention may be implemented.
DETAILED DESCRIPTION OF THE INVENTION
P-0021[0021] A method and apparatus are described for transaction-aware caching for metadata. In the following description, for the purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be apparent, however, that the present invention may be practiced without these specific details. In other instances, well-known structures and devices are shown in block diagram form in order to avoid unnecessarily obscuring the present invention.
Architectural Overview
P-0022[0022]FIG. 1 is a block diagram that illustrates the architecture of a system <b>100</b> implemented according to an embodiment of the invention. System <b>100</b> includes a database server <b>105</b> that provides a database API through which a database application <b>112</b> can access data managed by database server <b>105</b>. From the perspective of all entities that access data managed by database server <b>105</b> through the database API, the data managed by database server <b>105</b> is stored in relational tables that can be queried using the database language supported by database server <b>105</b> (e.g. SQL). Transparent to those entities, database server <b>105</b> stores the data to disk <b>108</b>. According to one embodiment, database server <b>105</b> implements disk management logic that allows it to store the data directly to disk and thus avoid the overhead associated with the OS file system of operating system <b>104</b>. Thus, database server <b>105</b> may cause the data to be stored to disk either by (1) making calls to the OS file system provided by operating system <b>104</b>, or (2) storing the data directly to disk, thus circumventing operating system <b>104</b>.
P-0023[0023] System <b>100</b> provides a translation engine <b>108</b> that translates I/O commands received from operating systems <b>104</b><i>a </i>and <b>104</b><i>b </i>into database commands that the translation engine <b>108</b> issues to database server <b>105</b>. When the I/O commands call for the storage of data, translation engine <b>108</b> issues database commands to database server <b>105</b> to cause the data to be stored in relational tables managed by database server <b>105</b>. When the I/O commands call for the retrieval of data, translation engine <b>108</b> issues database commands to database server <b>105</b> to retrieve data from relational tables managed by database server. Translation engine <b>108</b> then provides the data thus retrieved to the operating system that issued the I/O commands.
The Translation Engine
P-0024[0024] According to one embodiment of the invention, translation engine <b>108</b> is designed in two layers. Those layers are illustrated in FIG. 2. Referring to FIG. 2, translation engine <b>108</b> includes a protocol server layer, and a DB file server <b>208</b> layer. DB file server <b>208</b> allows applications to access data stored in the database managed by database server <b>105</b> through an alternative API, referred to herein as the DB file API. The DB file API combines aspects of both an OS file API and the database API. Specifically, the DB file API supports file operations similar to those supported by conventional OS file APIs.
P-0025[0025] However, unlike OS file APIs, the DB file API incorporates the database API concept of transactions. That is, the DB file API allows applications to specify that a set of file operations are to be performed as an atomic unit.
DB File Server
P-0026[0026] The DB file server <b>208</b> is responsible for translating DB file API commands to database commands. The DB file API commands received by DB file server <b>208</b> may come from the protocol server layer of translation engine <b>108</b>, or directly from applications (e.g. application <b>210</b>) specifically designed to perform file operations by issuing calls through the DB file API.
P-0027[0027] According to one embodiment, DB file server <b>208</b> is object oriented. Thus, the routines supplied by DB file server <b>208</b> are invoked by instantiating an object and calling methods associated with the object. In one implementation, the DB file server <b>208</b> defines a “transaction” object class that includes the following methods: insert, save, update, delete, commit and roll-back. The DB file API provides an interface that allows external entities to instantiate and use the transaction object class.
P-0028[0028] Specifically, when an external entity (e.g. application <b>210</b> or a protocol server) makes a call to DB file server <b>208</b> to instantiate a transaction object, DB file server <b>208</b> sends a database command to database server <b>105</b> to begin a new transaction. The external entity then invokes the methods of the transaction object. The invocation of a method results in a call to DB file server <b>208</b>. DB file server <b>208</b> responds to the call by issuing corresponding database commands to database server <b>105</b>. All database operations that are performed in response to the invocation of methods of a given transaction object are performed as part of the database transaction associated with the given transaction object.
P-0029[0029] Significantly, the methods invoked on a single transaction object may involve multiple file operations. For example, application <b>210</b> may interact with DB file server <b>208</b> as follows: Application <b>210</b> instantiates a transaction object TX<b>01</b> by making a call through the DB file API. In response, DB file server <b>208</b> issues a database command to start a transaction TX<b>1</b> within database server <b>105</b>. Application <b>210</b> invokes the update method of TX<b>01</b> to update a file F<b>1</b> stored in the database managed by database server <b>105</b>. In response, DB file server <b>208</b> issues a database command to database server <b>105</b> to cause the requested update to be performed as part of transaction TX<b>1</b>. Application <b>210</b> invokes the update method of TX<b>01</b> to update a second file A<b>1</b> stored in the database managed by database server <b>105</b>. In response, DB file server <b>208</b> issues a database command to database server <b>105</b> to cause the requested update to be performed as part of transaction TX<b>1</b>. Application <b>210</b> then invokes the commit method of TX<b>01</b>. In response, DB file server <b>208</b> issues a database command to database server <b>105</b> to cause TX<b>1</b> to be committed. If the update to file A1 had failed, then the roll-back method of TX<b>01</b> is invoked and all changes made by TX<b>1</b>, including the update to file F<b>1</b>, are rolled back.
P-0030[0030] While techniques have been described herein with reference to a DB file server that uses transaction objects, other implementations are possible. For example, within the DB file server, objects may be used to represent files rather than transactions. In such an implementation, file operations may be performed by invoking the methods of the file objects, and passing thereto data that identifies the transaction in which the operations are to be executed. Thus, the present invention is not limited to a DB file server that implements any particular set of object classes.
P-0031[0031] For the purpose of explanation, the embodiment illustrated in FIG. 2 shows DB file server <b>208</b> as a process executing outside database server <b>105</b> that communicates with database server <b>105</b> through the database API. However, according to an alternative embodiment, the functionality of DB file server <b>208</b> is built into database server <b>105</b>. By building DB file server <b>208</b> into database server <b>105</b>, the amount of inter-process communication generated during the use of the DB file system is reduced. The database server produced by incorporating DB file server <b>208</b> into database server <b>105</b> would therefore provide two alternative APIs for accessing data managed by the database server <b>105</b>: the DB file API and the database API (SQL).
Protocol Servers
P-0032[0032] The protocol server layer of translation engine <b>108</b> is responsible for translating between specific protocols and DB file API commands. For example, protocol server <b>206</b><i>a </i>translates I/O commands received from operating system <b>104</b><i>a </i>to DB file API commands that it sends to DB file server <b>208</b>. Protocol server <b>206</b><i>a </i>also translates DB file API commands received from DB file server <b>208</b> to I/O commands that it sends to operating system <b>104</b><i>a. </i>
P-0033[0033] In practice, there is not a one-to-one correspondence between protocols and operating systems. Rather, many operating systems support more than one protocol, and many protocols are supported by more then one operating system. For example, a single operating system may provide native support for one or more of network file protocols (SMB, FTP, NFS), e-mail protocols (SMTP, IMAP4), and web protocols (HTTP). Further, there is often an overlap between the sets of protocols that different operating systems support. However, for the purpose of illustration, a simplified environment is shown in which operating system <b>104</b>A supports one protocol, and operating system <b>104</b><i>b </i>supports a different protocol.
The I/O API
P-0034[0034] As mentioned above, protocol servers are used to translate I/O commands to DB file commands. The interface between the protocol servers and the OS file systems with which they communicate is generically labeled I/O API. However, the specific <b>1</b>/O API provided by a protocol server depends on both (1) the entity with which the protocol server communicates, and (2) how the protocol server is to appear to that entity. For example, operating system <b>104</b><i>a </i>may be Microsoft Windows NT, and protocol server <b>206</b><i>a </i>may be designed to appear as a device driver to Microsoft Windows NT. Under those conditions, the I/O API presented by protocol server <b>206</b><i>a </i>to operating system <b>104</b><i>a </i>would be a type of device interface understood by Windows NT. Windows NT would communicate with protocol server <b>206</b><i>a </i>as it would any storage device. The fact that files stored to and retrieved from protocol server <b>206</b><i>a </i>are actually stored to and retrieved from a database maintained by database server <b>105</b> is completely transparent to Windows NT.
P-0035[0035] While some protocol servers used by translation engine <b>108</b> may present device driver interfaces to their respective operating systems, other protocol servers may appear as other types of entities. For example, operating system <b>104</b><i>a </i>may be the Microsoft Windows NT operating system and protocol server <b>206</b><i>a </i>presents itself as a device driver, while operating system <b>104</b><i>b </i>is the Microsoft Windows 95 operating system and protocol server <b>206</b><i>b </i>presents itself as a System Message Block (SMB) server. In the latter case, protocol server <b>206</b><i>b </i>would typically be executing on a different machine than the operating system <b>104</b><i>b</i>, and the communication between the operating system <b>104</b><i>b </i>and protocol server <b>206</b><i>b </i>would occur over a network connection.
P-0036[0036] In the examples given above, the source of the I/O commands handled by the protocol servers are OS file systems. However, translation engine <b>108</b> is not limited to use with OS file system commands. Rather, a protocol server may be provided to translate between the DB file commands and any type of I/O protocol. Beyond the I/O protocols used by OS file systems, other protocols for which protocol servers may be provided include, for example, the File Transfer Protocol (FTP) and the protocols used by electronic mail systems (POP3 or IMAP4).
P-0037[0037] Just as the interface provided by the protocol servers that work with OS file systems is dictated by the specific OS, the interface provided by the protocol servers that work with non-OS file systems will vary based on the entities that will be issuing the I/O commands. For example, a protocol server configured receive I/O commands according to the FTP protocol would provide the API of an FTP server. Similarly, protocol servers configured to receive I/O commands according to the HTTP protocol, the POP3 protocol, and the IMAP4 protocol, would respectively provide the APIs of an HTTP server, a POP3 server, and an IMAP4 server.
P-0038[0038] Similar to OS file systems, each non-OS file protocol expects certain attributes to be maintained for its files. For example, while most OS file systems store data to indicate the last modified date of a file, electronic mail systems store data for each e-mail message to indicate whether the e-mail message has been read. The protocol server for each specific protocol implements the logic required to ensure that the semantics its protocol are emulated in the document system.
Caching File System Metadata
P-0039[0039] In a system where files are maintained within a database, each file system operation typically results in a call to a database server that manages the database. For example, when application <b>102</b>A requests a contents listing of a folder, the request is translated by translation engine <b>108</b> into one or more calls made to database server <b>105</b>. Database server <b>105</b> performs the operations specified in the calls, and returns the contents listing information.
P-0040[0040] Unfortunately, the efficiency of the file operations is diminished by the fact that even trivial operations may result in calls to the database server <b>105</b>. Therefore, according to one embodiment of the invention, techniques are provided for caching, outside the database server, various of pieces of information associated with the files that are stored in the database. For example, a file system metadata cache may be maintained in database file server <b>208</b>. By maintaining a cache of file system metadata within database file server <b>208</b>, it is possible for database file server <b>208</b> to provide the file system information requested by applications to the applications without having to always involve the database server <b>105</b>.
P-0041[0041] For the purpose of explanation, an embodiment shall be described in which a file metadata cache is maintained in the database file server <b>208</b>. However, the techniques described herein may be used to maintain a file metadata cache anywhere outside the database, to reduce the frequency in which the database server <b>105</b> must be involved in file system operations.
Types of Object Metadata
P-0042[0042] File systems typically store many types of objects, such as folders, files, permissions, user objects, group objects, Access Control Lists (“ACLs”) and Access Control Entries (“ACEs”), etc. Similarly, there are several different types of object metadata. For example, one type of object metadata represents attributes of the object. Such attributes frequently convey information about an object's content or history. Such metadata may include, for example, the name of the object, the type of the object, the creation date of the object, the most recent modification date of the object, various pointers to other objects, etc. This form of metadata is referred to herein as “attribute metadata”.
P-0043[0043] Another type of object metadata represents information about who can access objects, and what forms of access they are allowed. For example, one user may be able to read and write to a particular object. A second user may only be allowed to read the object. A third user may not even be allowed to know that the object exists. This form of metadata is referred to herein as “permission metadata”.
P-0044[0044] Yet another type of object metadata represents information about where, within a file system, an object is stored. In hierarchical file systems, the location of an object within the hierarchy is often represented by a folder path. For example, if a object “X” is located directly below a object “Y” in the file hierarchy, object “Y” is directly located below object “Z”, and object “Z” is at the root of the file hierarchy, then the path to “X” may be represented as “/Z/Y/X”. A folder path may be represented by a string, such as “/A1/A1-1/A1-1-3/doc1.java”. In the folder path “/A1/A1-1/A1-1-3/doc<b>1</b>.java”, the substring “doc1.Java” is the name of a document stored in the file system. In the folder path “/A1/A1-1/A1-1-3/doc1.java”, the substring “A1” is an example of one token in the folder path. This form of metadata is referred to herein as “path metadata”.
P-0045[0045] While three specific types of metadata (attribute metadata, permission metadata and path metadata) are specifically addressed hereafter, the techniques described herein may be applied to caching all types of metadata relating to file system objects.
Cache Hierarchy
P-0046[0046] Techniques are described herein for improving the performance of a system that stores files within a database by maintaining a cache of object metadata external to the database server that is managing the file system objects with which the metadata is associated. According to one embodiment, such object metadata is cached in a cache hierarchy that is made up of one or more separate caches for sessions, transactions and applications. FIG. 4 is a block diagram depicting a system <b>400</b> that includes a cache hierarchy for caching metadata according to an embodiment of the invention.
P-0047[0047] Referring to FIG. 4, system <b>400</b> includes DB file servers <b>408</b><i>a </i>and <b>408</b><i>b </i>that serve as intermediaries between the database server <b>105</b> and session participants. The session participants generally represent any entities that communicate with DB file servers to perform file system operations on documents maintained in a database managed by database server <b>105</b>. The session participants may include, for example, application <b>210</b> shown in FIG. 2.
P-0048[0048] Multiple levels of metadata cache are maintained within each of DB file servers <b>408</b><i>a </i>and <b>408</b><i>b</i>. In the illustrated embodiment, each DB file server maintains a committed cache (<b>430</b> and <b>460</b>) at one level, and uncommitted caches (<b>410</b>, <b>420</b>, <b>440</b> and <b>450</b>) at another level.
P-0049[0049] The committed cache is shared among all sessions using a particular DB File Server, and stores data that has been committed to the database. For example, committed cache <b>460</b> is shared among sessions being handled by DB file server <b>408</b><i>b</i>.
P-0050[0050] In addition to sharing the committed cache, each session may have its own uncommitted cache. The uncommitted cache for a session serves to cache object metadata that has been changed within the session but not yet committed to the database. For example, uncommitted cache <b>440</b> corresponds to session <b>3</b>, and is used to store object metadata that has been changed within session <b>3</b> that has not yet been committed to the database.
P-0051[0051] According to one embodiment that supports nested transactions, there are one or more transaction frames within each of the uncommitted caches, where each frame corresponds to a nesting level within a nested transaction. For example, session <b>4</b> may involve the nested transaction where a transaction TX<b>2</b> is nested within a transaction TX<b>1</b>. At the time where TX<b>2</b> has been started but not yet competed, the uncommitted cache <b>450</b> of session <b>4</b> will have one transaction frame <b>451</b> for TX<b>1</b> and another transaction from <b>452</b> for transaction TX<b>2</b>.
P-0052[0052] This cache hierarchy enables transaction-aware caching by separating modified metadata on a per session basis from committed referenced metadata, which is global for all operations in an application. With this cache hierarchy scheme, metadata that is modified and currently uncommitted is only visible to the session that performed the modification until the modification is committed. At the time a nested transaction is committed, the metadata changes caused by the nested transaction become visible to the transaction in which it was nested. At the time an outermost transaction is committed, the metadata changes caused by the transaction become visible to all other sessions.
P-0053[0053] Since the cache hierarchy involves caches, appropriate paging algorithms may be used to page out old data. An example of a paging algorithm that may be used to page out old metadata from the committed cache is the Least Recently Used (LRU) paging algorithm. Due to efficiency considerations, data stored in the uncommitted cache of the various sessions would typically not be paged out.
P-0054[0054] How these various levels of cache are used to provide a transaction aware cache of metadata shall be described in greater detail hereafter.
The Committed Cache
P-0055[0055] Referenced object metadata that has already been committed to the database is placed in the committed cache. For example if an operation, session, or transaction references committed metadata, that referenced metadata is placed in a committed cache such as <b>430</b> or <b>460</b>. The inserting of referenced committed metadata is discussed in more detail hereinafter.
P-0056[0056] Committed caches <b>430</b> and <b>460</b> cache metadata that has been committed to the database managed by database server <b>105</b>. For example, assume that a transaction TX<b>5</b> changes a filename of document X from “joe.doc” to “fred.doc”. If committed cache <b>430</b> stores the filename of document X before TX<b>5</b> commits, then it would store the name “joe.doc”. If committed cache <b>430</b> stores the filename of document X after TX<b>5</b> commits, then it would store the name “fred.doc”.
P-0057[0057] Committed caches <b>430</b> and <b>460</b> are shared by all sessions that use the respective DB file servers <b>408</b><i>a </i>and <b>408</b><i>b</i>. In other words, committed cache <b>430</b> is used to supply committed metadata to all sessions that use DB file server <b>408</b><i>a</i>, and committed cache <b>460</b> is used to supply committed metadata to all sessions that use DB file server <b>408</b><i>b. </i>
Uncommitted Caches
P-0058[0058] In addition to the committed caches, uncommitted caches are used for caching uncommitted modified metadata where one uncommitted cache is associated with each session. Examples of uncommitted caches in FIG. 4 are <b>410</b>, <b>420</b>, <b>440</b>, and <b>450</b>.
P-0059[0059] An uncommitted cache corresponds to a session and contains metadata that has been modified, but not yet committed, by the corresponding session. For example, if session <b>1</b> modifies metadata for a document, an entry for the modified metadata is placed in the uncommitted cache associated with session <b>1</b> (hereinafter referred to as the “session <b>1</b> uncommitted cache”). If session <b>1</b> reads the modified metadata, the uncommitted cache of session <b>1</b> is used to store the modified version of the metadata. Only session <b>1</b> sees the modified uncommitted metadata that is stored in the session <b>1</b> uncommitted cache.
P-0060[0060] According to one embodiment, different uncommitted caches are used for different kinds of metadata. Therefore, if a particular session is operating on two kinds of metadata, then there will be two uncommitted caches (one for each kind of metadata the session is operating on) associated with that particular session.
Transaction Frames
P-0061[0061] According to one embodiment, uncommitted caches can support nested transactions by including one “frame” for each level of a nested transaction. An example of a nested transaction is where a first transaction TX<b>1</b> (hereinafter referred to as an “outer transaction”) starts and, as transaction TX<b>1</b> is executing, a second transaction TX<b>2</b>, which is inside of transaction TX<b>1</b>, begins.
P-0062[0062] Each transaction frame contains uncommitted metadata that has been modified by a transaction that belongs to a particular level within a nested transaction. For example, when the first transaction TX<b>1</b> begins in a session, the uncommitted cache for that session contains a frame for TZX<b>1</b> (the “TX<b>1</b> frame”). When the second transaction TX<b>2</b> begins, the uncommitted cache is extended to have a second frame (a “TX<b>2</b> frame”). An uncommitted cache is extended with an additional frame for each additional level of transaction nesting.
P-0063[0063] Session <b>4</b> uncommitted cache <b>450</b> is an example of an uncommitted cache with two frames, TX<b>1</b><b>451</b> and TX<b>2</b><b>452</b>. Session <b>1</b> uncommitted cache <b>410</b> and session <b>3</b> uncommitted cache <b>440</b> are examples of uncommitted caches for non-nested transactions. Session <b>2</b> uncommitted cache <b>420</b> along with TX<b>1</b> frame <b>421</b> is an example of an uncommitted cache for a nested transaction where only the outermost transaction is currently executing.
Using the Cache Hierarchy
P-0064[0064] Instead of retrieving metadata from a database each time a user performs an operation that accesses metadata, the metadata is cached in the cache hierarchy to provide faster access to the metadata. As a part of caching metadata, the metadata is inserted into one of the caches in the cache hierarchy in the form of a “metadata entry”. The specific format of the metadata entries may vary from implementation to implementation. According to one embodiment, an attribute metadata entry for a database object has two components: (1) an ID identifying the database object and (2) the metadata for the database object. Just as the format of a metadata entry may vary from implementation to implementation, the data structure used to store the metadata entries may also vary from implementation to implementation. For example, the metadata entries may be stored in a non-volatile “table” that includes an “ID column” for storing the ID component of a metadata entry and a “metadata column” for storing the metadata component of a metadata entry.
P-0065[0065] According to one embodiment, when a session participant requires attribute metadata for a particular object (the “target object”), the cache hierarchy is searched for the metadata. If a usable version of the metadata does not reside in the cache hierarchy, then the metadata is obtained from the database. After obtaining the metadata from the database, the metadata is loaded into the appropriate level of the cache hierarchy so that it does not have to be retrieved from the database for subsequent operations.
Cache Hierarchy Search Order
P-0066[0066] According to one embodiment, when a session participant requests to be supplied metadata that is associated with a target object, the various caches in the cache hierarchy are searched in a particular order to provide the metadata. The search order depends on a few factors. The factors that determine the search order of the caches may include the following:
P-0067[0067] 1) whether the operation is a part of a session or transaction;
P-0068[0068] 2) whether a transaction is nested; and
P-0069[0069] 3) the levels of transaction nesting.
P-0070[0070] One technique is to start searching at the “top of the cache hierarchy” and to use the first metadata entry found that satisfies the request. What constitutes the “top of the cache hierarchy” depends on the three factors listed above. The following are examples of searching for a metadata entry and which clarify the meaning the top of the cache hierarchy in the context of the above three factors.
P-0071[0071] In the case that the operation is performed within a session, and the operation is performed as part of a non-nested transaction or outermost transaction, the following search order is used:
P-0072[0072] 1) the uncommitted cache;
P-0073[0073] 2) the committed cache; and
P-0074[0074] 3) the database.
P-0075[0075] In this example, the uncommitted cache is the top of the cache hierarchy.
P-0076[0076] If an operation is not part of a session or transaction, then the search order is:
P-0077[0077]<b>1</b>) the committed cache; and
P-0078[0078]<b>2</b>) the database.
P-0079[0079] In this example, the committed cache is the top of the cache hierarchy.
P-0080[0080] If the operation is performed within a nested transaction, the uncommitted cache is divided into frames that correspond to each level of nesting. For example where transaction TX<b>2</b> is nested inside of transaction TX<b>1</b> the following search order is used:
P-0081[0081] 1) the TX<b>2</b> frame;
P-0082[0082] 2) the TX<b>1</b> frame;
P-0083[0083] 3) the committed cache; and
P-0084[0084] 4) the database.
P-0085[0085] In this example, the TX<b>2</b> frame is the top of the cache hierarchy.
P-0086[0086] If a transaction has additional levels of nesting, then the cache hierarchy grows upwards with an additional frame for each level of transaction nesting. Therefore, the search order reflects the level of transaction nesting and the associated frames. The top of the cache hierarchy would be the transaction frame associated with the innermost nested transaction that is currently executing.
P-0087[0087] According to one embodiment, an invalid cache entry for the object may be encountered during the search for the object. The use of invalid entries shall be described in greater detail hereafter. According to one embodiment, when an invalid entry is encountered, further searching of the cache hierarchy is halted, and the desired metadata is requested directly from the database server. FIG. 3A is a flowchart that illustrates the steps for searching for attribute metadata according to an embodiment of the invention.
P-0088[0088] Referring to FIG. 3A, the search begins at the transaction frame of the innermost transaction (step <b>300</b>). At step <b>302</b>, it is determined whether the transaction frame that is currently being searched has an entry for the target object. If the current transaction frame has an entry for the target object, then control proceeds to step <b>304</b>, otherwise control proceeds to step <b>308</b>.
P-0089[0089] At step <b>304</b>, it is determined whether the entry is valid. If the entry is valid, then at step <b>306</b> the desired metadata is obtained from the entry. Otherwise, control proceeds to step <b>320</b> where the metadata is retrieved from the database.
P-0090[0090] If the current transaction frame does not contain an entry for the target object, then at step <b>308</b> it is determined whether there are any more transaction frames. If there are any more transaction frames, then control proceeds to step <b>310</b> and the next frame (going from innermost to outermost) is selected. Control then passes back to step <b>302</b>, where the process above is repeated for the new current frame.
P-0091[0091] If none of the transaction frames in the uncommitted cache has an entry for the target object, then control passes to step <b>312</b> and the committed cache is checked for an entry for the target object. If the committed cache does not contain an entry (step <b>314</b>) or contains an invalid entry (step <b>316</b>), then the desired metadata is obtained from the database (step <b>320</b>). If the committed cache contains a valid entry for the target object, then the desired metadata is obtained from the committed cache entry (step <b>318</b>).
Creating Valid Cache Entries
P-0092[0092] As explained above, metadata is retrieved from the database when either (1) there was no entry for the target object in the cache hierarchy, or (2) an invalid entry was encountered during a search of the cache hierarchy. In either case, it may be desirable to place the metadata retrieved from the database into the cache hierarchy so that subsequent reads of the data can be performed without having to once again involve the database.
P-0093[0093] According to one embodiment, the rules that govern where, within the cache hierarchy, to place the metadata obtained from the database, are as follows: (1) If the metadata was retrieved from the database because the cache hierarchy did not have any entry for the target object, then the retrieved metadata is stored in a new entry of the committed cache; and (2) if the metadata was retrieved because an invalid entry for the target object was encountered, then the retrieved metadata is cached at the same level in the hierarchy at which the invalid entry was encountered, and the invalid entry for the target object is removed from that level.
P-0094[0094] For example, assume that a transaction TX<b>2</b>, which is nested in TX<b>1</b>, requires metadata associated with a file F<b>1</b>. Assume that during the search of the cache hierarchy, the transaction frame for TX<b>2</b> did not have any entry for F<b>1</b>, and the transaction frame for TX<b>1</b> had an invalid entry for F<b>1</b>. As a result, the metadata of F<b>1</b> is retrieved from the database, and stored in the transaction frame for TX<b>1</b>. The invalid entry for F<b>1</b> is removed from the transaction frame for TX<b>1</b>. According to one embodiment, the steps of storing the new entry and removing the old entry can be consolidated by inserting the newly retrieved metadata into the existing invalid entry and marking that entry as “valid”.
P-0095[0095] According to one embodiment, populating a new metadata entry includes the following steps:
P-0096[0096] (1) placing the ID for the target object in the ID column; and
P-0097[0097] (2) placing the metadata in the metadata column.
P-0098[0098] As shall be explained hereafter, the second step may involve multiple sub-steps, as is the case with path metadata. How the second step is expanded for folder path metadata is described in the “Scenarios for Transaction-aware Caching of Path metadata” section below.
Creating Invalid Entries
P-0099[0099] According to one embodiment, when metadata is modified in a session, an invalid entry for the object associated with the metadata is inserted into the cache hierarchy. According to one embodiment, an invalid entry has the same form as a valid entry, but has an “invalid entry indicator” as the metadata column value.
P-0100[0100] The level at which the invalid entry is inserted is the level at which the modification was made. When an invalid entry is added at a particular level in the cache hierarchy, any valid entry associated with the same object is removed from that level. The steps of (1) adding an invalid entry and (2) removing a valid entry may be consolidated by replacing the metadata column value of the valid entry with the “invalid entry indicator” value.
P-0101[0101] For example, if a transaction TX<b>1</b> modifies the metadata of file F<b>1</b>, then an invalid entry for F<b>1</b> is placed in the transaction frame of TX<b>1</b>. If a transaction TX<b>2</b>, which is nested in TX<b>1</b>, modifies the metadata of F<b>1</b>, then an invalid entry for F<b>1</b> is also placed in the transaction frame of TX<b>2</b>.
P-0102[0102] According to one embodiment, when an outermost transaction in a session commits, then an invalid entry is added to the committed cache for each of the objects whose metadata had been changed by the transaction. In another embodiment, when an outermost transaction in a session commits, then the entry is removed from the committed cache for each of the objects whose metadata had been changed by the outermost transaction. The process of adding invalid entries to the committed cache in response to the committing of a transaction is described hereafter in greater detail.
Collapsing Frames when a Nested Transaction Ends
P-0103[0103] When a nested transaction, such as transaction TX<b>2</b>, successfully completes, the frame for that nested transaction is “collapsed” into the frame of the transaction in which the completed transaction is nested. For example when TX<b>2</b> transaction successfully completes, the TX<b>2</b> frame (TX<b>2</b><b>452</b>) is collapsed into the TX<b>1</b> frame (TX<b>1</b><b>451</b>).
P-0104[0104] Two possible techniques for “collapsing” one frame (TX<b>2</b>) into another frame (TX<b>1</b>) are: (1) copying metadata entries from the TX<b>2</b> frame to the TX<b>1</b> frame; and (2) invalidating metadata entries in the TX<b>1</b> frame that correspond to entries that were in the TX<b>2</b> frame.
P-0105[0105] For the sake of example, assume that a TX<b>2</b> transaction has ended and therefore TX<b>2</b><b>452</b> frame is collapsed into the corresponding TX<b>1</b><b>451</b> frame. This “collapsing” of the TX<b>2</b><b>452</b> frame may be performed according to the steps illustrated in FIG. 3B.
P-0106[0106] Referring to FIG. 3B, steps <b>350</b> and <b>358</b> form a loop to cause each entry within the TX<b>2</b> frame to processed. At step <b>352</b>, the currently selected entry of the TX<b>2</b> frame is processed by determined whether the TX<b>1</b> frame has a metadata entry that corresponds to the currently selected TX<b>2</b> entry. The TX<b>1</b> frame has a metadata entry that corresponds to the currently selected TX<b>2</b> entry if, for example, the currently selected TX<b>2</b> entry is for a particular file object, and the TX<b>1</b> frame has a metadata entry for that same file object.
P-0107[0107] If the TX<b>1</b> frame has a metadata entry that corresponds to the currently selected TX<b>2</b> entry, then at step <b>356</b> the corresponding entry in the TX<b>1</b> frame is updated with the metadata from the selected TX<b>2</b> entry. If the TX<b>1</b> frame does not have a metadata entry that corresponds to the currently selected TX<b>2</b> entry, then at step <b>354</b> an entry is added to the TX<b>1</b> frame with the information from the currently selected TX<b>2</b> entry.
P-0108[0108] When all of the entries in the TX<b>2</b> frame have been processed, the TX<b>2</b> frame is deallocated at step <b>360</b>.
P-0109[0109] In the embodiment described in FIG. 3B, the collapsing is performed by copying the metadata information from the frame that is being collapsed. In an alternative embodiment, the collapsing may be performed by invalidating the corresponding metadata entries of TX<b>1</b>. Such an embodiment would follow the steps illustrated in FIG. 3B, except that in step <b>354</b> the entries added to the TX<b>1</b> frame would contain the invalid entry indicator rather than metadata values, and in step <b>356</b> the corresponding TX<b>1</b> entry would be invalidated by storing the invalid entry indicator in the entry.
Collapsing the Uncommitted Cache when Committing Modified Metadata to Database
P-0110[0110] When the metadata changes made in the session are committed to the database, the uncommitted cache for that session is collapsed and the metadata entries in the uncommitted cache are used to invalidate metadata entries with the same ID in the committed cache. For example, if session <b>1</b> ends and a metadata entry with ID <b>124</b> is in both the Session <b>1</b> uncommitted cache <b>410</b> and the committed cache <b>430</b>, then the metadata entry with ID <b>124</b> is invalidated in the committed cache <b>430</b>. However, if a metadata entry with ID <b>124</b> is in the Session <b>1</b> uncommitted cache <b>410</b> and there is no metadata entry with ID <b>124</b> in the committed cache <b>430</b>, then nothing in the committed cache <b>430</b> is changed.
P-0111[0111] Another technique is to “patchup” the metadata entries in the committed caches using the metadata in uncommitted caches when a session or transaction ends. The patchup technique would involve updating the committed cache based on the entries in the uncommitted cache when the transaction associated with the uncommitted cache is committed. However, invalidating metadata entries is easier than “patching up” metadata entries in a committed cache, which requires synchronizing changes between multiple sessions and/or transactions and dealing with potential race conditions as these sessions and/or transactions are ending.
Committed Event
P-0112[0112] According to one embodiment, when a transaction that has changed metadata is committed, a “committed event” is posted for every metadata entry in the uncommitted cache of the transaction. This commit event is sent to all uncommitted caches and all committed caches in the system. For example, referring again to FIG. 4, when the transaction associated with session <b>3</b> commits, DB File Server <b>408</b><i>a </i>is informed by DB file server <b>408</b><i>b </i>about each of the metadata entries in uncommitted cache <b>440</b>. Based on this information from DB file server <b>408</b><i>b</i>, DB file server <b>408</b><i>a </i>is informed of all of the metadata that was updated in session <b>3</b>. Consequently, DB file server <b>408</b><i>a </i>invalidates any corresponding entries it may have for this metadata, since such entries will contain outdated metadata values.
P-0113[0113] As another example, if session <b>1</b> in DB file server <b>408</b><i>a </i>commits and metadata entries <b>124</b> and <b>125</b> reside in Session <b>1</b> uncommitted cache <b>410</b>, then two committed events, one for metadata entry <b>124</b> and a second for metadata entry <b>125</b>, are posted. To perform such a posting, a service is provided for broadcasting the committed events to other DB File Servers that cache metadata for files that reside in the same database. The database may or may not be used as an intermediary in performing the broadcast of the committed events.
Permissions Metadata
P-0114[0114] In general, “permissions” are constructs used to indicate which users can perform which operations. For example, in systems that manage files, the permissions may indicate that one user is allowed to read and write to a file, that another user is allowed to only read the file, and that yet another user is not even allowed to know that the file exists. The metadata that indicates the permissions that have been established in a system is referred to herein as permissions metadata.
P-0115[0115] Permissions metadata may take many forms, and may vary from implementation to implementation. One technique for managing permissions in a system with large numbers of files and large number of users involves the use Access Control Lists (i.e., ACLs), groups and Access Control Entries (i.e., ACEs). While the permissions metadata caching techniques described herein are described relative to embodiments that employ ACLs, ACEs and groups, the techniques are not limited to any particular type of permissions mechanism or metadata.
P-0116[0116] In systems that manage permissions using “groups”, ACEs and ACLs, the term “group” typically generally refers to a list of one or more users and/or other groups. For example, a group G<b>1</b> may list users Joe, Bob and Claire. An ACE is an association between a user or group and a set of permissions. For example, a particular ACE may associate group GI with Read and Write permissions.
P-0117[0117] An ACL is a construct that contains one or more ACEs. According to one embodiment, an ACL is a file system object. Since file system objects are typically associated with an ID, an embodiment shall be described in which each ACL is associated with an ID. Therefore, a notation shall be used herein in which “ACL <b>126</b>” means an ACL with an ID of <b>126</b>. For the purpose of explanation, various examples shall be given hereafter that refer to an ACL <b>126</b> that is associated with two ACE's (ACE <b>1</b> and ACE <b>2</b>) and with two groups (<b>1261</b> and <b>1262</b>). Specifically, ACL <b>126</b> includes the following:
P-0118[0118] 1) ACE <b>1</b>:
P-0119[0119] a) Group <b>1261</b>, which contains the following users:
P-0120[0120] Joe
P-0121[0121] Bob
P-0122[0122] Claire
P-0123[0123] b) the following permissions are associated with group <b>1261</b>:
P-0124[0124] R, W
P-0125[0125] 2) ACE <b>2</b>:
P-0126[0126] a) Group <b>1262</b>, which contains the following users:
P-0127[0127] Joe
P-0128[0128] Sally
P-0129[0129] Moe
P-0130[0130] b) the following permissions are associated with group <b>1262</b>:
P-0131[0131] W, D, L
P-0132[0132] In the preceding example, the permissions abbreviations R, W, D and L respectively mean read permission, write permission, delete permission and lock permission.
P-0133[0133] The permissions that a particular user has relative to a file are typically determined by “resolving” the ACLs that govern access to file, as shall be described in greater detail hereafter.
Resolving Access Control Lists
P-0134[0134] The process of determining what permissions are granted by a particular ACL is referred to herein as “resolving” the ACL. The process of resolving an ACL may be complicated by the fact that a particular user may be associated with more than one ACE in the same ACL, either explicitly or by virtue of that user's membership in one or more groups referenced by ACEs in the same ACL.
P-0135[0135] In ACL <b>126</b>, for example, Joe is in both groups <b>1261</b> and <b>1262</b>. Therefore, the permissions for Joe are resolved to be R, W, D, L. In other words, Joe has read, write, delete, and lock permissions for objects controlled by ACL <b>126</b>.
Transaction-Aware Caching of Permission Metadata
P-0136[0136] Just as caching attribute metadata for files managed by a database system may enhance the performance of a file system, caching permission metadata associated with ACLs may also enhance the performance of the system. Specifically, an ACL may be resolved by a database server in response to a first operation requested on a file governed by the ACL. At the time that the ACL is first resolved, the permission metadata associated with the resolved ACL may be cached outside the database server. Consequently, when a second operation is requested on a file governed by the ACL, the cached permission metadata may be inspected, without involving the database server, to determine the permissions granted by the ACL.
P-0137[0137] According to one embodiment, a hierarchy of caches may be used to store the permissions metadata outside the database server, similar to the hierarchy of caches described above relative to attribute metadata. Specifically, when an ACL is first resolved, an entry for the ACL may be stored in a shared committed cache. If a session performs an operation that changes the permission information associated with a resolved ACL, then an invalid entry for the ACL is placed in the uncommitted cache for the session. If the session involves nested transactions, frames may be used for each level of nesting, as described above. The techniques described above for collapsing frames when nested transactions are completed, and collapsing uncommitted caches when a transaction within a session commits, also apply equally to the context of permission metadata caches.
P-0138[0138] According to one embodiment, permission metadata cache entries differ from attribute metadata cache entries in that (1) each permissions metadata cache entry is associated with an ACL and (2) includes subentries associated with each user associated with the ACL. For example, in the cache entry for ACL <b>126</b>, the ID column would include the identifier “<b>126</b>”, while the metadata column would include the following information: <tables id="TABLE-US-00001" num="1"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="70PT" align="left" /><colspec colname="2" colwidth="105PT" align="left" /><thead><row><entry /><entry /></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /><entry>Joe</entry><entry>R, W, D, L</entry></row><row><entry /><entry>Bob</entry><entry>R, W</entry></row><row><entry /><entry>Claire</entry><entry>R, W</entry></row><row><entry /><entry>Sally</entry><entry>W, D, L</entry></row><row><entry /><entry>Moe</entry><entry>W, D, L</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0139[0139] This information is herein referred to as “permissions associated with the ACL” or, more simply, the “permissions of the ACL”.
Invalidating Permissions Metadata
P-0140[0140] As mentioned above, an invalid cache entry for an ACL is placed in the uncommitted cache of a session when the session performs an operation that causes a change to the permissions of the ACL. The permissions of an ACL may be changed both directly and indirectly. The permissions of an ACL may be modified directly, for example, by adding an ACE to the ACL. For example assume that ACE <b>3</b> contains the following:
P-0141[0141] a) Group <b>1263</b>, which contains the following users:
P-0142[0142] Brenda
P-0143[0143] Ryan
P-0144[0144] Sally
P-0145[0145] b) the following permissions are associated with group <b>1263</b>:
P-0146[0146] R, W
P-0147[0147] If ACE <b>3</b> is added to ACL <b>126</b>, ACL <b>126</b> will have the following permissions: <tables id="TABLE-US-00002" num="2"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="70PT" align="left" /><colspec colname="2" colwidth="105PT" align="left" /><thead><row><entry /><entry /></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /><entry>Joe</entry><entry>R, W, D, L</entry></row><row><entry /><entry>Bob</entry><entry>R, W</entry></row><row><entry /><entry>Claire</entry><entry>R, W</entry></row><row><entry /><entry>Sally</entry><entry><b>R</b>, W, D, L</entry></row><row><entry /><entry>Moe</entry><entry>W, D, L</entry></row><row><entry /><entry><b>Brenda</b></entry><entry><b>R</b>, <b>W</b></entry></row><row><entry /><entry><b>Ryan</b></entry><entry><b>R</b>, <b>W</b></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0148[0148] The bold print shows the changes made to the permissions of ACL <b>126</b> in response to the addition of ACE <b>3</b> to ACL <b>126</b>. Because the addition of ACE <b>3</b> to ACL <b>126</b> changes the permissions associated with ACL <b>126</b>, an invalid entry for ACL <b>126</b> would be placed in the uncommitted cache of the session that adds ACE <b>3</b> to ACL <b>126</b>.
P-0149[0149] The permissions associated with an ACL may also be changed indirectly by changing membership of any group that is associated with the ACL. For example assume that ACL <b>126</b> (which includes the previously described ACE <b>1</b> and ACE <b>2</b>) is modified indirectly by modifying group <b>1261</b>, which is associated with ACE <b>1</b> in ACL <b>126</b>. For example, assume that group <b>1261</b> is modified by adding another group <b>1264</b> to group <b>1261</b>, where group <b>1264</b> contains the following users:
P-0150[0150] Letty
P-0151[0151] Toni
P-0152[0152] After group <b>1264</b> is added to group <b>1261</b>, the permissions associated with ACL <b>126</b> will be: <tables id="TABLE-US-00003" num="3"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="70PT" align="left" /><colspec colname="2" colwidth="105PT" align="left" /><thead><row><entry /><entry /></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /><entry>Joe</entry><entry>R, W, D, L</entry></row><row><entry /><entry>Bob</entry><entry>R, W</entry></row><row><entry /><entry>Claire</entry><entry>R, W</entry></row><row><entry /><entry>Sally</entry><entry>W, D, L</entry></row><row><entry /><entry>Moe</entry><entry>W, D, L</entry></row><row><entry /><entry><b>Letty</b></entry><entry><b>R</b>, <b>W</b></entry></row><row><entry /><entry><b>Toni</b></entry><entry><b>R</b>, <b>W</b></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0153[0153] The bold print shows the changes that are made to the permissions of ACL <b>126</b> when group <b>1264</b> is added to group <b>1261</b>.
P-0154[0154] Changing a single group may affect the permissions of many ACLs. Specifically, the permissions represented by all ACLs associated with a particular group may be affected by a change in the membership of the group. Therefore, when a session changes a group, all permission data for all ACLs that include the modified group are invalidated in the uncommitted cache of the session. When a group is modified, the database server may have to be accessed to determine which ACLs are affected by the modification to the group.
Cached Permissions Metadata Example
P-0155[0155] The following is an example of a cache hierarchy where the uncommitted cache of a session (“session <b>1</b>”) includes entries for ACL <b>126</b> and ACL <b>127</b>. The shared committed cache, on the other hand, includes entries for ACL <b>126</b> and ACL <b>128</b>. The entry for ACL <b>126</b> in the uncommitted cache of session <b>1</b> includes, in bold, modifications made to ACL <b>126</b> (directly or indirectly) within session <b>1</b>. Because the transaction that made the changes in session <b>1</b> has not committed, the changes are not reflected in the entry for ACL <b>126</b> in the committed cache. Note that, for each entry, the information contained in the metadata column is itself a table having “User ID” and “Set of Permissions” columns.
P-0156[0156] Session <b>1</b> uncommitted cache <tables id="TABLE-US-00004" num="4"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="21PT" align="left" /><colspec colname="1" colwidth="49PT" align="left" /><colspec colname="2" colwidth="147PT" align="left" /><thead><row><entry /><entry /></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="4"><colspec colname="OFFSET" colwidth="21PT" align="left" /><colspec colname="1" colwidth="49PT" align="left" /><colspec colname="2" colwidth="56PT" align="left" /><colspec colname="3" colwidth="91PT" align="left" /><tbody valign="top"><row><entry /><entry>126</entry><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry /><entry>Joe</entry><entry>R, W, D, L</entry></row><row><entry /><entry /><entry>Bob</entry><entry>R, W</entry></row><row><entry /><entry /><entry>Claire</entry><entry>R, W</entry></row><row><entry /><entry /><entry>Sally</entry><entry><b>R</b>, W, D, L</entry></row><row><entry /><entry /><entry>Moe</entry><entry>W, D, L</entry></row><row><entry /><entry /><entry><b>Brenda</b></entry><entry><b>R</b>, <b>L</b></entry></row><row><entry /><entry /><entry><b>Ryan</b></entry><entry><b>R</b>, <b>L</b></entry></row><row><entry /><entry>127</entry><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry /><entry>Frank</entry><entry>W, D</entry></row><row><entry /><entry /><entry>Elmo</entry><entry>W, D</entry></row><row><entry /><entry namest="OFFSET" nameend="3" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0157[0157] Committed cache <tables id="TABLE-US-00005" num="5"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="21PT" align="left" /><colspec colname="1" colwidth="49PT" align="left" /><colspec colname="2" colwidth="147PT" align="left" /><thead><row><entry /><entry /></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>ID</entry><entry>metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="4"><colspec colname="OFFSET" colwidth="21PT" align="left" /><colspec colname="1" colwidth="49PT" align="left" /><colspec colname="2" colwidth="56PT" align="left" /><colspec colname="3" colwidth="91PT" align="left" /><tbody valign="top"><row><entry /><entry>126</entry><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry /><entry>Joe</entry><entry>R, W, D, L</entry></row><row><entry /><entry /><entry>Bob</entry><entry>R, W</entry></row><row><entry /><entry /><entry>Claire</entry><entry>R, W</entry></row><row><entry /><entry /><entry>Sally</entry><entry>W, D, L</entry></row><row><entry /><entry /><entry>Moe</entry><entry>W, D, L</entry></row><row><entry /><entry>128</entry><entry>User ID</entry><entry>Set of Permissions</entry></row><row><entry /><entry /><entry>Mark</entry><entry>R</entry></row><row><entry /><entry /><entry>James</entry><entry>R</entry></row><row><entry /><entry namest="OFFSET" nameend="3" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0158[0158] Given the state of the Session <b>1</b> uncommitted cache and the committed cache depicted above, assume that Session <b>1</b> is checking whether or not Brenda can read document <b>138</b>, which is associated with ACL <b>126</b>. To determine whether Brenda can read document <b>138</b>, the session <b>1</b> uncommitted cache is first searched for ACL <b>126</b>. ACL <b>126</b> is found in the session <b>1</b> uncommitted cache. The entry for ACL <b>126</b> in the session <b>1</b> uncommitted cache is searched for permissions relating to Brenda. Brenda is found and the set of permissions “R, L” for Brenda is retrieved. Therefore, it is determined that Brenda has read permission for document <b>138</b>.
P-0159[0159] As another example, assume that Session <b>1</b> is checking whether Mark has permission to delete document <b>132</b>, which is associated with ACL <b>128</b>. To determine whether Mark can delete document <b>132</b>, the session <b>1</b> uncommitted cache is first searched for ACL <b>128</b>, but ACL <b>128</b> is not found in the session <b>1</b> uncommitted cache. Upon failing to find an entry for ACL <b>128</b> in the session <b>1</b> uncommitted cache, the committed cache is searched for ACL <b>128</b>. An entry for ACL <b>128</b> is found in the committed cache, and the set of permissions “R” is retrieved for Mark. Therefore, Mark does not have delete permission for document <b>132</b>. If ACL <b>128</b> had not been found in the committed cache, then the permissions associated with ACL <b>128</b> would have been retrieved from the database, and an entry containing the permissions for ACL <b>128</b> would have been placed in the committed cache.
Protecting Access to ACLs and ACEs
P-0160[0160] Since ACLs and ACEs are file system objects, ACLs and ACEs can also be used to determine which users have access rights to other ACLs and ACEs. For example, ACL <b>128</b> may be used to determine who has access rights to ACL <b>126</b>. Assuming that ACL <b>128</b> grants the permissions illustrated above, if ACL <b>128</b> is used to indicate the access rights to ACL <b>126</b>, then Mark and James have read access to ACL <b>126</b>.
Folder Paths
P-0161[0161] Objects, such as documents, are commonly stored in hierarchical file systems. One technique to identify, locate, and/or access documents that are stored in hierarchical file systems involves the use of “folder paths”. For example, a user may wish to access a document “foo1.java” based on a folder path such as “A1/A1-1/foo1.java”. For the purpose of explanation, the “/” symbol shall be used herein as a delimiter between tokens in a folder path. However, the techniques described herein are not limited to any particular delimiter. Other examples of delimiters include, but are not limited to, “Å” and “%”.
P-0162[0162] When a database system is used to emulate a hierarchical file system, it is desirable to provide a mechanism by which the documents stored within the database may be accessed based on folder paths. According to one embodiment, the database system maintains folder information, and provides a mechanism by which objects may be accessed using folder paths, making it appear as if the objects are documents in a hierarchical file system.
Resolving Folder Paths
P-0163[0163] According to one embodiment, when an application (such as Protocol server <b>206</b>A or <b>206</b>B) attempts to access a document stored in a database managed by database server <b>105</b>, a string, such as “A1/A1-1/foo1 java” is specified as a folder path to the requested document. The application evaluates the folder path represented by the string relative to a particular starting point in the folder hierarchy, which is often the root of the folder hierarchy. However, starting with the root is not necessary. To retrieve a document based on a folder path, the folder path associated with a document is first converted or “resolved” into an ID. The ID for the document is then used to retrieve the data for the document from the database.
P-0164[0164] According to one embodiment, the process of resolving a folder path into an ID involves (1) maintaining within the database an identifier for each folder and document, (2) parsing the folder path into tokens, and (3) iteratively querying the database based on the tokens, to eventually retrieve the ID for the document associated with the folder path.
P-0165[0165] For example, assume that an application is attempting to access the document specified by the folder path “A1/A1-1/foo1 java”. Upon receipt of the folder path, the folder path is parsed and separated into the tokens “A1”, “A1-1”, and “foo1.java”. The database is then queried to retrieve the identifier associated with A1. After obtaining the identifier associated with A1, the database is queried to retrieve the identifier associated with “A1-1-1” based on (1) the identifier for A1 and (2) the token “A1-1”. After obtaining the identifier associated with A1-1, the database is queried to locate the ID for the “foo1.java” based on (1) the identifier for A1-1 and (2) the token “foo1.java”. The token “foo1.java” is the last token in the folder path. Consequently, the ID for foo1.java is the identifier for the document specified by the folder path “A1/A1-1/foo1.java”.
P-0166[0166] As is evident by this example, the process of resolving a folder path may require numerous queries to be submitted to a database server. The techniques described hereafter reduce the database server's involvement in the folder path resolution process by caching information about folder paths outside the database server, in a transaction-aware hierarchical caching system similar to those described above for caching attribute metadata and permissions metadata.
Folder Hierarchy Example
P-0167[0167] A folder path, such as “A1/A1-1/foo1.java” is one path to an item in an overall Folder hierarchy. For the purposes of illustration, a generic folder hierarchy, as depicted in Table 1 below, will be used in the examples given hereafter. <tables id="TABLE-US-00006" num="6"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><thead><row><entry namest="1" nameend="1" align="center">TABLE 1</entry></row><row><entry /></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row><row><entry>Folder Hierarchy</entry></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="2"><colspec colname="OFFSET" colwidth="77PT" align="left" /><colspec colname="1" colwidth="140PT" align="left" /><tbody valign="top"><row><entry /><entry>/A1</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="2"><colspec colname="OFFSET" colwidth="98PT" align="left" /><colspec colname="1" colwidth="119PT" align="left" /><tbody valign="top"><row><entry /><entry>/A1-1/foo1.java</entry></row><row><entry /><entry>/A1-2/foo2.java</entry></row><row><entry /><entry>/A1-3</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="2"><colspec colname="OFFSET" colwidth="119PT" align="left" /><colspec colname="1" colwidth="98PT" align="left" /><tbody valign="top"><row><entry /><entry>/A1-3-1</entry></row><row><entry /><entry namest="OFFSET" nameend="1" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0168[0168] According to one embodiment, each item, be it a folder or document in a folder hierarchy represents an object that is stored in a database. For example, A1, A1-1, A1-2, A1-3, A1-3-1, foo1.java and foo2.java represent objects that are stored in a database. The items have a hierarchical relationship to each other. For example, A1-1, A1-2, and A1-3 represent the children of A1, and A1-3-1 represents the child of A1-3 and the grandchild of A1. According to one embodiment, the database maintains a unique identifier for each item. For the purposes of illustration, assume that identifiers, as depicted in Table 2 below, are associated with various folders and documents depicted in Table 1. <tables id="TABLE-US-00007" num="7"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><thead><row><entry namest="1" nameend="1" align="center">TABLE 2</entry></row></thead><tbody valign="top"><row><entry /></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row><row><entry>Identifiers associated with</entry></row><row><entry>various objects of the folder hierarchy depicted in Table 1.</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="49PT" align="left" /><colspec colname="1" colwidth="91PT" align="left" /><colspec colname="2" colwidth="77PT" align="left" /><tbody valign="top"><row><entry /><entry>Tokens</entry><entry>ID</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>A1</entry><entry>101</entry></row><row><entry /><entry>A1-1</entry><entry>102</entry></row><row><entry /><entry>A1-2</entry><entry>103</entry></row><row><entry /><entry>A1-3</entry><entry>104</entry></row><row><entry /><entry>A1-3-1</entry><entry>105</entry></row><row><entry /><entry>foo1.java</entry><entry>106</entry></row><row><entry /><entry>foo2.java</entry><entry>107</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
Transaction-Aware Caching of Path Metadata
P-0169[0169] To enhance performance of folder path resolution operations, information used to resolve the folder paths of objects that are stored in a database is cached outside the database in a cache hierarchy. According to one embodiment, each cache entry is associated with a folder, and stores “path metadata” for that folder.
P-0170[0170] In one embodiment, the path metadata for a particular folder includes information about the folder's immediate children, such as (1) the tokens associated with the folder 's immediate children, and (2) the identifiers for the folder's children. In such an embodiment, for example, the cache entry for A1 could include (1) the tokens A1-1, A1-2, and A1-3 (which represent the children of A1) and (2) their respective identifiers <b>102</b>, <b>103</b>, and <b>104</b>. Thus, the metadata column of a cache entry for a given folder may logically be represented as a table that contains a row for each of the folder 's immediate children whose information has been resolved.
P-0171[0171] For the purposes of illustration, a document or folder object shall be referred to herein by the token that represents the object. For example, the folder object that A1 represents shall be referred to as folder A1, or simply A1.
P-0172[0172] According to one embodiment, path metadata is cached in a manner similar to that described above with respect to attribute metadata and permissions metadata. For example, when a session retrieves A1's path metadata from the database, the path metadata would be stored in a cache entry for A1. When a transaction performs an action that modifies A1's path metadata (e.g. deletes folder A1-<b>1</b>), an invalid cache entry for A<b>1</b> is placed in an uncommitted cache frame associated with the session.
P-0173[0173] According to one embodiment, an empty folder (i.e. one that has no items) is indicated by leaving the metadata column empty. For example, leaving the metadata column for A1-3-1 empty indicates that there are no subfolders below A1-3-1.
P-0174[0174] One embodiment of how folder path metadata can be cached is illustrated in the examples given hereafter.
Operation of Folder Path Cache
P-0175[0175] The folder path caching example described in this section assumes that: (1) a folder hierarchy as depicted in Table 1 exists, (2) identifiers, as depicted in Table 2, are associated with the tokens of the folder hierarchy depicted in Table 1, (3) the cache does not initially contain any cached folder path metadata and (4) the file requests mentioned in the example are received within a session identified as “session <b>1</b>”.
P-0176[0176] Initially, session <b>1</b> issues a request that requires resolving the folder path “A1/A1-2/foo2.java”. The string “A1/A1-2/foo2.java” is parsed into the following tokens:
P-0177[0177] A1
P-0178[0178] A1-2
P-0179[0179] foo2.java
P-0180[0180] Because session <b>1</b> has not previously modified the path metadata for any of the folders in the folder path, the uncommitted cache of session <b>1</b> will not contain entries for any of the folders. After failing to find the corresponding entries in the uncommitted cache of session <b>1</b>, the committed cache is searched for the folder entries. For the purpose of illustration, it shall be assumed that the committed cache did not yet have entries for the folders. Consequently, the path metadata for the objects is retrieved from the database, and a cache entry is created in the committed cache for each of the referenced objects except for the last object.
P-0181[0181] Returning again to the example, folder path metadata is retrieved from the database, and cache entries for A1 and A1-2 are inserted into the committed cache. In the cache entry for A1, the ID of A1 is placed in the ID column of the cache entry, and the path metadata for A1 is placed in the metadata column of the cache entry. Similarly, in the cache entry for A1-2, the ID of A1-2 is placed in the ID column of the cache entry, and the path metadata for A1-2 is placed in the metadata column of the cache entry.
P-0182[0182] At this point, the cache entry for A1 contains path metadata that identifies only A1-2, even though A1 has other immediate children. As information about other immediate children of A1 is retrieved from the database, the cache entry for A1 is updated to include information about them as well. Specifically, when a previously unresolved child of A1 is resolved, metadata information about the child is stored in the metadata column of the cache entry for A1.
P-0183[0183] At this point, the committed cache is filled in as follows with information retrieved from the database: <tables id="TABLE-US-00008" num="8"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><tbody valign="top"><row><entry /></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row><row><entry>Committed cache</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="70PT" align="left" /><colspec colname="2" colwidth="105PT" align="left" /><tbody valign="top"><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>101</entry><entry><A1-2, 103></entry></row><row><entry /><entry>103</entry><entry><foo2.java, 107></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0184[0184] Next assume that session <b>1</b> renames A1-1 to A1-4 in a transaction that is not yet committed. This modification affects A1's path metadata. In response to this change, an entry for A1 is placed in the uncommitted cache of session <b>1</b>. The entry identifies the affected folder by the unique ID <b>101</b>, and includes an “Invalid Entry Indicator”. At this point, the cache hierarchy appear as follows: <tables id="TABLE-US-00009" num="9"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><thead><row><entry /></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry>Session 1 uncommitted cache</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="63PT" align="left" /><colspec colname="2" colwidth="112PT" align="left" /><tbody valign="top"><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>101</entry><entry>Invalid Entry Indicator</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><tbody valign="top"><row><entry>Committed cache</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="63PT" align="left" /><colspec colname="2" colwidth="112PT" align="left" /><tbody valign="top"><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>101</entry><entry><A1-2, 103></entry></row><row><entry /><entry>103</entry><entry><foo2.java, 107></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0185[0185] According to one embodiment, the cache entry for a particular folder is only invalidated if the folder's path metadata, as represented by the children of that folder, is modified. For example, an “Invalid Entry Indicator” was placed in the metadata column for A1 when A1-1 was renamed to A1-4. In contrast, if A1-3-1, which is a grandchild of A1, had been renamed, an invalid entry for A1 would not have been placed in the uncommitted cache of session <b>1</b>. Instead, an invalid entry for A1-3, the immediate parent of A1-3-1, would have been placed in the uncommitted cache for session <b>1</b>.
P-0186[0186] Next assume that session <b>1</b> attempts to resolve the folder path “A1/A1-4/foo1.java”. Upon encountering the invalid entry for A1 in the session <b>1</b> uncommitted cache, the path metadata for A1 will be retrieved from the database. The entry for A1 in the session <b>1</b> uncommitted cache is then populated with the information retrieved from the database. In this example, after retrieving the path folder metadata of A1 from the database and populating the session <b>1</b> uncommitted cache entry for A1, the cache hierarchy may appear as follows: <tables id="TABLE-US-00010" num="10"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><thead><row><entry namest="1" nameend="1" align="center">TABLE 3</entry></row><row><entry /></row><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row></thead><tbody valign="top"><row><entry>Session 1 uncommitted cache</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="63PT" align="left" /><colspec colname="2" colwidth="112PT" align="left" /><tbody valign="top"><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>101</entry><entry><A1-4, 102></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217PT" align="center" /><tbody valign="top"><row><entry>Committed cache</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="OFFSET" colwidth="42PT" align="left" /><colspec colname="1" colwidth="63PT" align="left" /><colspec colname="2" colwidth="112PT" align="left" /><tbody valign="top"><row><entry /><entry>ID</entry><entry>Metadata</entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row><row><entry /><entry>101</entry><entry><A1-2, 103></entry></row><row><entry /><entry>102</entry><entry><foo1.java, 106></entry></row><row><entry /><entry>103</entry><entry><foo2.java, 107></entry></row><row><entry /><entry namest="OFFSET" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>
P-0187[0187] According to one embodiment, the metadata column of the committed cache entry for a particular folder is only populated with information for the immediate children of the folder that have been referenced. For example, A1-2 is a child of A1, and A1-2 was previously referenced. Thus, A1-2 appears in the metadata column of the committed cache for A1 even though other children of A1 do not.
P-0188[0188] According to one embodiment, the metadata column of the uncommitted cache entry for a particular folder is populated with the immediate children of the particular folder that are reference subsequent to the modification of path metadata for that particular folder. In this case, renaming A1-1 to A1-4 is a modification of A1's path metadata. The resolution of A1/A1-4/foo1.java is a reference to the previously modified path metadata of A1, thus, A1-4 appears in the metadata entry for A1 in the session <b>1</b> uncommitted cache.
P-0189[0189] According to one embodiment, when a database commit is performed within a session, a “commit event” is posted for every object that appears in the ID column of the uncommitted cache of the session. The commit event is sent to all other uncommitted caches, including transaction frames, and all committed caches in the system. For example, when the modifications for session <b>1</b> are committed, session <b>2</b> will receive a commit event and will invalidate entries in its uncommitted cache if the entries are impacted by the modifications performed by session <b>1</b>. Likewise, entries in the committed caches will be invalidated if the entries are impacted by the modifications performed by session <b>1</b>.
Folder Path Characteristics
P-0190[0190] Depending on the nature of the hierarchical file system for which folder path metadata is being cached, the caching of folder path metadata may involve taking account of characteristics that are not necessarily at issue with attribute metadata. For example, the objects in a folder path may be “multiply linked”. For example, A1-2 is multiply linked to both A1 and B-1 if the same A1-2 can be reached not only through folder path “A1/A1-2” but also through folder path “B-1/A1-2”.
P-0191[0191] Such multiple links must be taken into account when determining which cache entries are affected by an operation. For example, deleting A1-2 results in removing A1-2 from both A1 and B-1. Consequently, the deletion of A1-2 may cause an invalid cache entry for both A1 and B-1 to be placed in the uncommitted cache of the session that deletes A1-2.
P-0192[0192] Further, certain document access operations may bypass the path metadata caching mechanism. For example, one embodiment may allow a particular object to be accessed directly via the ID associated with the particular object, rather than through the resolution of a folder path. For example, if the ID of a document foo4java is <b>110</b>, then foo4.java may be accessed directly with the ID <b>110</b>, thus bypassing path metadata caching.
P-0193[0193] Transaction-aware caching of path metadata provides for: (1) caching and invalidating on a per-object level of granularity, as opposed to caching and invalidating the entire folder path, and (2) reducing the overhead of caching the entire folder path while providing the same behavior that can be achieved with caching the entire folder path. Thus, even when the cache entry for a particular token has been invalidated, cache entries for tokens above the invalidated token, which are still valid, are still in the cache hierarchy and can still be used. Further, resolving the folder path using per token level caching is still fast even though the entire folder path may be spread across several cache entries.
Data Structures of the Hierarchical Cache
P-0194[0194] The caches used to carry out the techniques described herein may be implemented in a variety of ways. According to one embodiment, the caches are implemented as multi-level hash tables. For example, when resolving the path “/A1/A1-2”, a hash table associated with A1 may be located by hashing the object ID (i.e. <b>101</b>) of A1. Once the hash table associated with A1 is located, the entry for A1-2 may be located within the A1 hash table by hashing the token “A1-2”. The entry for A1-2 would indicate the object ID (i.e. <b>103</b>) of A1-2.
P-0195[0195] Although the examples provided herein depict caching path metadata in temporary tables or volatile storage, the actual form of the structure could vary from implementation to implementation.
Negative Cache Entries
P-0196[0196] In general, caches are used to temporarily store information that is permanently stored elsewhere. For example, in the description given above, caches store file system metadata, permission metadata, and/or path metadata, all of which can be retrieved from the database server. The information is cached to reduce the frequency that the database server must be used to retrieve the data. Thus, entries within such caches are “positive cache entries”, in that the cache entries hold data retrieved in response to prior successful retrievals of data from the database server.
P-0197[0197] According to one embodiment, the caching techniques described herein are supplemented through the use of “negative cache entries”. A negative cache entry is an entry that is stored in the cache in response to a failed attempt to retrieve data from the database server. Specifically, when the main repository indicates that it does not contain a specific piece of information, a “negative entry” is added to the cache to (1) identify the specific piece of information that was requested, and (2) indicate that the database server did not have the specific piece of information.
P-0198[0198] Negative entries can lead to a significant improvement in performance in situations where the same non-existent information is repeatedly requested. For example, assume that negative entries are used in the context of folder path metadata. Further assume that a client attempts to resolve the path “/A1/A1-X”, and that the folder A1 does not have a child A1-X. Under these circumstances, the cache will attempt to retrieve information about A1-X from the database server, and the database server will indicate that A1-X is not a valid child of folder A1. Upon receiving the response from the database server, the cache may place a negative cache entry for A1-X in the cache. If a subsequent request attempts to resolve the same invalid path “/A1/A1-X”, the cache will find the negative entry for A1-X, and generate a response to indicate that the path is invalid, without involving the database server.
P-0199[0199] Similar to positive cache entries, negative cache entries are invalidated when an action occurs that may cause the entries to be inaccurate. Specifically, an entry that indicates that certain information is missing is invalidated when an action is performed that may create the previously-missing information. For example, any action that could possibly create a subfolder A1-X for folder A1 would invalidate the negative cache entry for A1-X. Such actions include, for example, the renaming of an existing subfolder of A1, and the creation of a new subfolder within A1.
P-0200[0200] According to one embodiment, negative cache entries are handled in the same caches as positive cache entries. For example, when used in the context of folder path metadata, cache entries can be used in the committed cache, and in one or more transaction frames of the uncommitted cache of a session.
P-0201[0201] Under certain situations, the uncommitted cache may even have a negative cache entry for the same piece of information as the committed cache has a positive cache entry, and vice versa. For example, assume that, after a negative entry for A1-X is added to the cache entry for A1 in the committed cache, a particular session creates a subfolder A1-X under A1 in a transaction that is not yet committed. Under these conditions, an invalid entry indicator for A1 would be placed in the uncommitted cache for that session. When the session subsequently attempts to resolve the path /A1/A1-X, the cache will access the database upon encountering the invalid entry indicator, and will find A1-X in the database. Therefore, a positive entry for A1-X within the A1 cache entry will be placed in the uncommitted session cache for the session. At this point, the uncommitted session cache has a positive entry for A1-X, and the committed cache has a negative entry for A1-X.
P-0202[0202] On the other hand, assume that the committed cache has a positive entry for A1-X. Assume that a session deletes the A1-X folder. In response, the cache will place an invalid entry indicator for A1 in the uncommitted cache for the session. If the session then attempts to resolve the path /A1/A1-X, the cache will access the database, and be informed that A1-X does not exist. In response to this information, the cache will place a negative cache entry for A1-X in the uncommitted cache for the session. Thus, if the session again attempts to resolve /A1/A1-X, the cache may respond that A1-X does not exist without having to involve the database server.
Multiple Types of Caches
P-0203[0203] For any given session, there can be separate uncommitted caches for each different kind of metadata. For example, a session can have one uncommitted cache for caching attribute metadata, another uncommitted cache for caching permissions metadata, and yet another uncommitted cache for caching folder path metadata. FIG. 5 is a block diagram of two different types of uncommitted caches associated with a particular session. Specifically, session <b>1</b><b>500</b> has an uncommitted cache <b>510</b> for file system object metadata, and another uncommitted cache <b>520</b> for folder path metadata.
Hardware Overview
P-0204[0204]FIG. 6 is a block diagram that illustrates a computer system <b>600</b> upon which an embodiment of the invention may be implemented. Computer system <b>600</b> includes a bus <b>602</b> or other communication mechanism for communicating information, and a processor <b>604</b> coupled with bus <b>602</b> for processing information. Computer system <b>600</b> also includes a main memory <b>606</b>, such as a random access memory (RAM) or other dynamic storage device, coupled to bus <b>602</b> for storing information and instructions to be executed by processor <b>604</b>. Main memory <b>606</b> also may be used for storing temporary variables or other intermediate information during execution of instructions to be executed by processor <b>604</b>. Computer system <b>600</b> further includes a read only memory (ROM) <b>608</b> or other static storage device coupled to bus <b>602</b> for storing static information and instructions for processor <b>604</b>. A storage device <b>610</b>, such as a magnetic disk or optical disk, is provided and coupled to bus <b>602</b> for storing information and instructions.
P-0205[0205] Computer system <b>600</b> may be coupled via bus <b>602</b> to a display <b>612</b>, such as a cathode ray tube (CRT), for displaying information to a computer user. An input device <b>614</b>, including alphanumeric and other keys, is coupled to bus <b>602</b> for communicating information and command selections to processor <b>604</b>. Another type of user input device is cursor control <b>616</b>, such as a mouse, a trackball, or cursor direction keys for communicating direction information and command selections to processor <b>604</b> and for controlling cursor movement on display <b>612</b>. This input device typically has two degrees of freedom in two axes, a first axis (e.g., x) and a second axis (e.g., y), that allows the device to specify positions in a plane.
P-0206[0206] The invention is related to the use of computer system <b>600</b> for implementing the techniques described herein. According to one embodiment of the invention, those techniques are performed by computer system <b>600</b> in response to processor <b>604</b> executing one or more sequences of one or more instructions contained in main memory <b>606</b>. Such instructions may be read into main memory <b>606</b> from another computer-readable medium, such as storage device <b>610</b>. Execution of the sequences of instructions contained in main memory <b>606</b> causes processor <b>604</b> to perform the process steps described herein. In alternative embodiments, hard-wired circuitry may be used in place of or in combination with software instructions to implement the invention. Thus, embodiments of the invention are not limited to any specific combination of hardware circuitry and software.
P-0207[0207] The term “computer-readable medium” as used herein refers to any medium that participates in providing instructions to processor <b>604</b> for execution. Such a medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, optical or magnetic disks, such as storage device <b>610</b>. Volatile media includes dynamic memory, such as main memory <b>606</b>. Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise bus <b>602</b>. Transmission media can also take the form of acoustic or light waves, such as those generated during radio-wave and infra-red data communications.
P-0208[0208] Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, or any other magnetic medium, a CD-ROM, any other optical medium, punchcards, papertape, any other physical medium with patterns of holes, a RAM, a PROM, and EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave as described hereinafter, or any other medium from which a computer can read.
P-0209[0209] Various forms of computer readable media may be involved in carrying one or more sequences of one or more instructions to processor <b>604</b> for execution. For example, the instructions may initially be carried on a magnetic disk of a remote computer. The remote computer can load the instructions into its dynamic memory and send the instructions over a telephone line using a modem. A modem local to computer system <b>600</b> can receive the data on the telephone line and use an infra-red transmitter to convert the data to an infra-red signal. An infra-red detector can receive the data carried in the infra-red signal and appropriate circuitry can place the data on bus <b>602</b>. Bus <b>602</b> carries the data to main memory <b>606</b>, from which processor <b>604</b> retrieves and executes the instructions. The instructions received by main memory <b>606</b> may optionally be stored on storage device <b>610</b> either before or after execution by processor <b>604</b>.
P-0210[0210] Computer system <b>600</b> also includes a communication interface <b>618</b> coupled to bus <b>602</b>. Communication interface <b>618</b> provides a two-way data communication coupling to a network link <b>620</b> that is connected to a local network <b>622</b>. For example, communication interface <b>618</b> may be an integrated services digital network (ISDN) card or a modem to provide a data communication connection to a corresponding type of telephone line. As another example, communication interface <b>618</b> may be a local area network (LAN) card to provide a data communication connection to a compatible LAN. Wireless links may also be implemented. In any such implementation, communication interface <b>618</b> sends and receives electrical, electromagnetic or optical signals that carry digital data streams representing various types of information.
P-0211[0211] Network link <b>620</b> typically provides data communication through one or more networks to other data devices. For example, network link <b>620</b> may provide a connection through local network <b>622</b> to a host computer <b>624</b> or to data equipment operated by an Internet Service Provider (ISP) <b>626</b>. ISP <b>626</b> in turn provides data communication services through the world wide packet data communication network now commonly referred to as the “Internet” <b>628</b>. Local network <b>622</b> and Internet <b>628</b> both use electrical, electromagnetic or optical signals that carry digital data streams. The signals through the various networks and the signals on network link <b>620</b> and through communication interface <b>618</b>, which carry the digital data to and from computer system <b>600</b>, are exemplary forms of carrier waves transporting the information.
P-0212[0212] Computer system <b>600</b> can send messages and receive data, including program code, through the network(s), network link <b>620</b> and communication interface <b>618</b>. In the Internet example, a server <b>630</b> might transmit a requested code for an application program through Internet <b>628</b>, ISP <b>626</b>, local network <b>622</b> and communication interface <b>618</b>.
P-0213[0213] The received code may be executed by processor <b>604</b> as it is received, and/or stored in storage device <b>610</b>, or other non-volatile storage for later execution. In this manner, computer system <b>600</b> may obtain application code in the form of a carrier wave.
P-0214[0214] In the foregoing specification, the invention has been described with reference to specific embodiments thereof. It will, however, be evident that various modifications and changes may be made thereto without departing from the broader spirit and scope of the invention. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.
Contents5
8 sheets
Sheet 1 Sheet 2 Sheet 3 Sheet 4 Sheet 5 Sheet 6 Sheet 7 Sheet 8
Every citation, both ways
| Document | Relation | Office | Cited during |
|---|---|---|---|
| US2006136509A1 | Cited by | United States of America | Pre-grant |
| US7185005B1 | Cited by | United States of America | Applicant |
| US2004254947A1 | Cited by | United States of America | Pre-grant |
| US7610304B2 | Cited by | United States of America | Applicant |
| US11200246B2 | Cited by | United States of America | Applicant |
| US11238057B2 | Cited by | United States of America | Applicant |
| US2007005555A1 | Cited by | United States of America | Pre-grant |
| US11036722B2 | Cited by | United States of America | Applicant |
| US8234623B2 | Cited by | United States of America | Search report |
| US11055300B2 | Cited by | United States of America | Applicant |
| US11188550B2 | Cited by | United States of America | Search report |
| US2006206458A1 | Cited by | United States of America | Pre-grant |
| EP2065815A1 | Cited by | European Patent Office (EPO) | Search report |
| US7415457B2 | Cited by | United States of America | Applicant |
| US7809675B2 | Cited by | United States of America | Applicant |
| US2006136516A1 | Cited by | United States of America | Pre-grant |
| US2007130157A1 | Cited by | United States of America | Pre-grant |
| US2008127064A1 | Cited by | United States of America | Pre-grant |
| US2006136376A1 | Cited by | United States of America | Pre-grant |
| US11314759B2 | Cited by | United States of America | Applicant |
| US8789017B2 | Cited by | United States of America | Applicant |
| US7987217B2 | Cited by | United States of America | Applicant |
| US10650080B2 | Cited by | United States of America | Applicant |
| US2005131965A1 | Cited by | United States of America | Pre-grant |
| EP2065815A1 | Cited by | European Patent Office (EPO) | Search report |
| US2006136508A1 | Cited by | United States of America | Pre-grant |
| US2003200197A1 | Cited by | United States of America | Pre-grant |
| US2007005603A1 | Cited by | United States of America | Pre-grant |
| US7203709B2 | Cited by | United States of America | Applicant |
| US7548918B2 | Cited by | United States of America | Applicant |
| US8224837B2 | Cited by | United States of America | Applicant |
| US11314758B2 | Cited by | United States of America | Applicant |
| US7389493B1 | Cited by | United States of America | Applicant |
| US2012131342A1 | Cited by | United States of America | Pre-grant |
| US7716260B2 | Cited by | United States of America | Search report |
| US7725878B1 | Cited by | United States of America | Applicant |
| US7627574B2 | Cited by | United States of America | Search report |
| US7240329B1 | Cited by | United States of America | Applicant |
| US2002103829A1 | Cites | United States of America | Pre-grant |
| US2002107835A1 | Cites | United States of America | Pre-grant |
| US2002188613A1 | Cites | United States of America | Pre-grant |
| US2003131051A1 | Cites | United States of America | Pre-grant |
| US2003195866A1 | Cites | United States of America | Pre-grant |
| US2003200197A1 | Cites | United States of America | Pre-grant |
| US2004148278A1 | Cites | United States of America | Pre-grant |
| US2004205551A1 | Cites | United States of America | Pre-grant |
| US2004267760A1 | Cites | United States of America | Pre-grant |
| US2005289125A1 | Cites | United States of America | Pre-grant |
| US4755930A | Cites | United States of America | Pre-grant |
| US5222242A | Cites | United States of America | Pre-grant |
| US5303362A | Cites | United States of America | Pre-grant |
| US5327556A | Cites | United States of America | Pre-grant |
| US5457793A | Cites | United States of America | Pre-grant |
| US5729689A | Cites | United States of America | Pre-grant |
| US5778179A | Cites | United States of America | Pre-grant |
| US5799305A | Cites | United States of America | Pre-grant |
| US5864870A | Cites | United States of America | Pre-grant |
| US5870757A | Cites | United States of America | Pre-grant |
| US5873093A | Cites | United States of America | Pre-grant |
| US5878411A | Cites | United States of America | Pre-grant |
| US5937406A | Cites | United States of America | Pre-grant |
| US5956506A | Cites | United States of America | Pre-grant |
| US5964886A | Cites | United States of America | Pre-grant |
| US6021414A | Cites | United States of America | Pre-grant |
| US6044224A | Cites | United States of America | Pre-grant |
| US6119151A | Cites | United States of America | Pre-grant |
| US6173292B1 | Cites | United States of America | Pre-grant |
| US6209000B1 | Cites | United States of America | Pre-grant |
| US6216212B1 | Cites | United States of America | Pre-grant |
| US6298478B1 | Cites | United States of America | Pre-grant |
| US6324581B1 | Cites | United States of America | Pre-grant |
| US6330573B1 | Cites | United States of America | Pre-grant |
| US6345382B1 | Cites | United States of America | Pre-grant |
| US6427123B1 | Cites | United States of America | Pre-grant |
| US6457017B2 | Cites | United States of America | Pre-grant |
| US6457065B1 | Cites | United States of America | Pre-grant |
| US6513056B1 | Cites | United States of America | Pre-grant |
| US6549916B1 | Cites | United States of America | Pre-grant |
| US6625602B1 | Cites | United States of America | Pre-grant |
| US6697846B1 | Cites | United States of America | Pre-grant |
| US6769124B1 | Cites | United States of America | Pre-grant |
| US6922708B1 | Cites | United States of America | Pre-grant |
| US6970975B2 | Cites | United States of America | Pre-grant |
| US7031956B1 | Cites | United States of America | Pre-grant |
| US7043472B2 | Cites | United States of America | Pre-grant |
| US7047253B1 | Cites | United States of America | Pre-grant |
12 members in 1 office; this record represents the family
Priority claims2
| Document | Office | Kind | Date |
|---|---|---|---|
| 20419600 | United States of America | P | |
| 85382301 | United States of America | A |
Members12
| Document | Office | Kind | |
|---|---|---|---|
| US2003195865A1 | United States of America | A1 | |
| US2003195866A1 | United States of America | A1 | |
| US2003200197A1 | United States of America | A1 | |
| US7185005B1 | United States of America | B1 | |
| US7203709B2 | United States of America | B2 | |
| US7240329B1 | United States of America | B1 | |
| US7389493B1 | United States of America | B1 | |
| US2008162485A1 | United States of America | A1 | |
| US7421541B2 | United States of America | B2 | |
| US7725878B1 | United States of America | B1 | |
| US7987217B2 | United States of America | B2 | |
| US8745017B2 | United States of America | B2 |
137 transactions on the USPTO file
Allowed after 1 non-final rejection and 1 RCE.
- Non-final rejections
- 1
- Final rejections
- 0
- RCEs
- 1
- Appeals
- 0
Over time
Point at a mark for the transactionTransactions
| Event | Code | |
|---|---|---|
| Payment of Maintenance Fee, 12th Year, Large EntityM1553 | M1553 | |
| Recordation of Patent Grant MailedPGM/ | PGM/ | |
| Patent Issue Date Used in PTA CalculationAllowedPTAC | PTAC | |
| Issue Notification MailedAllowedWPIR | WPIR | |
| Dispatch to FDCD1935 | D1935 | |
| Dispatch to FDCD1935 | D1935 | |
| Issue Fee Payment VerifiedN084 | N084 | |
| Issue Fee Payment ReceivedIFEE | IFEE | |
| Mail Notice of AllowanceAllowedMN/=. | MN/=. | |
| Notice of Allowance Data Verification CompletedAllowedN/=. | N/=. | |
| Date Forwarded to ExaminerFWDX | FWDX | |
| Date Forwarded to ExaminerFWDX | FWDX | |
| Disposal for a RCE / CPA / R129AbandonedABN9 | ABN9 | |
| Mail-Record Petition Decision of Granted to Withdraw from Issue - with assigned Patent NO.MP015 | MP015 | |
| Record Petition Decision of Granted to Withdraw from Issue - with assigned Patent NO.P015 | P015 | |
| Withdrawal Patent Case from IssueWFIS | WFIS | |
| Withdrawal Patent Case from IssueWFIS | WFIS | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Request for Continued Examination (RCE)RCEX | RCEX | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Petition EnteredPET. | PET. | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Workflow - Request for RCE - BeginBRCE | BRCE | |
| Issue Notification MailedAllowedWPIR | WPIR | |
| Dispatch to FDCD1935 | D1935 | |
| Mail Response to 312 Amendment (PTO-271)MN271 | MN271 | |
| Response to Amendment under Rule 312N271 | N271 | |
| Application Is Considered Ready for IssuePILS | PILS | |
| Printer Rush- No mailingTCPB | TCPB | |
| Mail Examiner's AmendmentMEX.A | MEX.A | |
| Mail Miscellaneous Communication to ApplicantMM327 | MM327 | |
| Miscellaneous Communication to Applicant - No Action CountM327 | M327 | |
| Reverse Issue FeeVFEE | VFEE | |
| Amendment after Notice of Allowance (Rule 312)AllowedA.NA | A.NA | |
| Response to Reasons for AllowanceREAS | REAS | |
| Issue Fee Payment VerifiedN084 | N084 | |
| Issue Fee Payment ReceivedIFEE | IFEE | |
| Examiner's Amendment CommunicationEX.A | EX.A | |
| Printer Rush- No mailingTCPB | TCPB | |
| Pubs Case Remand to TCPUBTC | PUBTC | |
| Mail Notice of AllowanceAllowedMN/=. | MN/=. | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Notice of Allowance Data Verification CompletedAllowedN/=. | N/=. | |
| Case Docketed to Examiner in GAUDOCK | DOCK | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Paralegal or electronic terminal disclaimer approvedP574 | P574 | |
| Paralegal or electronic terminal disclaimer approvedP574 | P574 | |
| Case Docketed to Examiner in GAUDOCK | DOCK | |
| Date Forwarded to ExaminerFWDX | FWDX | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Terminal Disclaimer FiledDIST | DIST | |
| Terminal Disclaimer FiledDIST | DIST | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| New or Additional Drawing FiledC614 | C614 | |
| Response after Non-Final ActionA... | A... | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Mail Non-Final RejectionNon-final rejectionMCTNF | MCTNF | |
| Non-Final RejectionNon-final rejectionCTNF | CTNF | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Case Docketed to Examiner in GAUDOCK | DOCK | |
| Date Forwarded to ExaminerFWDX | FWDX | |
| Preliminary AmendmentA.PE | A.PE | |
| Response to Election / Restriction FiledELC. | ELC. | |
| Mail Restriction RequirementMCTRS | MCTRS | |
| Restriction/Election RequirementCTRS | CTRS | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Case Docketed to Examiner in GAUDOCK | DOCK | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Case Docketed to Examiner in GAUDOCK | DOCK | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Reference capture on IDSRCAP | RCAP | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Information Disclosure Statement consideredIDSC | IDSC | |
| Information Disclosure Statement (IDS) FiledM844 | M844 | |
| Information Disclosure Statement (IDS) FiledWIDS | WIDS | |
| Correspondence Address ChangeC.AD | C.AD |
5 legal events, as the office reported them to INPADOC
Over the term
Point at a mark for the eventEvents
| Event | Code | |
|---|---|---|
| Maintenance fee paymentMAFP | MAFP | |
| Fee paymentFPAY | FPAY | |
| Fee paymentFPAY | FPAY | |
| Certificate of correctionCC | CC | |
| Information on status: patent grantGrantedPATENTED CASESTCF | STCF |
Numbers
- Application
- 45216303
Titles
- English
- Transaction-aware caching for access control metadata
Patent term adjustment
- A delay
- +832 daysthe office missed an examination deadline
- Applicant delay
- −63 days
- Net adjustment
- 769 days
Classification
- CPC, 6
- H04L63/10
- H04L67/06
- H04L69/329
- Y10S707/99953
- Y10S707/99952
- H04L9/40
- IPC, 2
- H04L29 06
- H04L29 08