Application Control Framework for Shared Data Platform Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sharing methods are cumbersome, slow, and lack control over data access and usage, making it difficult for smaller entities to access valuable data sets, and current native application sharing mechanisms lack adequate controls for restricting functionality and usage.
Innovation Solution
An application control framework is provided to build, share, and manage applications via a data sharing platform, using predefined and custom controls to manage access and usage, and includes an application package with install scripts to install applications in consumer accounts while enforcing access controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is shared via traditional methods (FTP, physical media), then data can be transferred between parties, but the process is slow, cumbersome, and lacks control over data access and usage
Solution Approach 1:
The patent introduces a data sharing platform as an intermediary between data providers and consumers. The platform hosts data in a cloud-based data lake and manages access through a controlled interface, eliminating the need for direct peer-to-peer data transfer via FTP or physical media. This intermediary approach enables fast, on-demand data access while maintaining provider control over usage policies, pricing, and access permissions.
2Ease of operation
If data is shared without controls, then access is easy, but providers cannot control what happens to the data (alteration, copying, unauthorized sharing)
Solution Approach 1:
The patent implements a feedback mechanism where the data sharing platform continuously monitors and tracks data access and usage. Usage metrics including data retrieval, processing, and consumption are captured and reported back to the provider. This feedback loop enables providers to enforce usage policies, detect unauthorized activities, and maintain control over their data even as it is accessed by multiple consumers through the platform.
3Quantity of substance
If raw data is shared directly, then consumers can access valuable data sets, but the data is unpolished and contains sensitive information that requires cleaning and de-identification
Solution Approach 1:
The patent segments the data sharing process into distinct functional layers: data ingestion, cleaning, de-identification, storage, and controlled access. The platform accepts raw data from providers, automatically processes it through cleaning and de-identification pipelines, and then makes the processed data available to consumers. This segmentation allows valuable data to be made accessible while harmful sensitive information is systematically removed or protected during the processing stage.
4Adaptability or versatility
If native applications are shared without controls, then application functionality is accessible, but there is no adequate control over application usage and functionality restriction
Solution Approach 1:
The patent implements dynamic control mechanisms for shared native applications. The platform allows providers to configure usage policies, access permissions, and functionality restrictions that can be dynamically adjusted based on consumer credentials, usage patterns, and business rules. Control parameters such as data access permissions, computation limits, and output restrictions can be modified in real-time without requiring application redesign, enabling flexible adaptation to different consumer needs and security requirements.
Data Source
AI summary
Disclosed are techniques for using an application control framework to build, share and manage access to and usage of applications via a data sharing platform. An application control framework may provide a number of predefined controls and may receive values for certain predefined controls as well as custom control definitions and corresponding values from a provider. The application control framework may also receive application logic and may build an application package comprising the application logic and a set of controls including the predefined and custom controls to manage access to and usage of the application. In response to a consumer of the data sharing platform importing the application package, the application control framework may call the set of install scripts to install an instance of the application in the consumer account using the application logic and manage access to the application instance by the consumer using the set of controls.