Analysis Process Migration for Sensitive Multi-Data-Center Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The transfer of sensitive data between different data centers is heavily restricted by stringent regulations, posing challenges for data analysis processes that require access to multiple data centers, leading to costly and complex permission procedures and security risks.

Innovation Solution

A system that migrates analysis processes to the data center where the sensitive data is stored, allowing execution without physically transferring the data, and returns analysis results to the originating center, ensuring data security and compliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is transferred between different data centers for analysis, then data analysis capability is improved, but data security and compliance are compromised

Engineering Contradiction:

Improvedata analysis capabilityVSAvoiddata security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

Instead of transferring data to the analysis process, the analysis process is migrated to the data center where the data is stored. This inverts the traditional data transfer approach, allowing comprehensive data analysis while maintaining data security by keeping sensitive data in its original location throughout the process.

Inventive Principle:

Principle #13The other way round (Inversion)

Solution Approach 2:

A process migration engine acts as an intermediary between the analysis request and the data storage location. This engine coordinates the migration of the analysis process to the appropriate data center, manages the execution environment, and handles result retrieval, thereby enabling secure cross-data center analysis without direct data transfer.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If data is accessed from multiple data centers, then analysis comprehensiveness is improved, but permission complexity and costs increase

Engineering Contradiction:

Improveanalysis comprehensivenessVSAvoidpermission management complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The permission management complexity is extracted from the data access process and shifted to the process migration mechanism. Instead of managing permissions for each data access request across multiple data centers, the system migrates the entire analysis process to the data center, where local permissions are used, thereby simplifying the overall permission management structure.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The analysis process is copied and migrated to the target data center environment rather than accessing data remotely. This copying approach allows the analysis to run locally with simplified permission requirements while maintaining the ability to access and analyze data from multiple data centers through the migration mechanism.

Inventive Principle:

Principle #26Copying

3Ease of operation

If data is physically transferred between data centers, then data accessibility is improved, but security risks increase

Engineering Contradiction:

Improvedata accessibilityVSAvoidsecurity risks

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent inverts the traditional approach by keeping data stationary and moving the analysis process instead. This eliminates the security risks associated with data transfer while maintaining full data accessibility for analysis purposes.

Inventive Principle:

Principle #13The other way round (Inversion)

Solution Approach 2:

The potential harm of data transfer is converted into benefit by using process migration technology. The system achieves the benefit of comprehensive data analysis across multiple data centers while avoiding the harm of data security risks through the intermediary migration engine that manages the process relocation without moving sensitive data.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS12536317B2Managing the analysis of sensitive data across multiple data centers

Publication Date: 2026.01.27 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Embodiments of the present invention disclose an approach for data security and management. Specifically, the approach involves managing the analysis of sensitive data across multiple data centers. The system includes a data location repository that stores and updates information regarding the locations of sensitive data in data centers. When a request to access sensitive data from an analysis process is received, a specific data center where the data is stored is identified. The necessary components of the analysis process are transferred to that data center. The migrated analysis process is then executed using the locally stored sensitive data, without physically transferring the data. The generated analysis results are transferred back to the original data center where the analysis process originated.