Cloud Data Capture System for Isolating Sensitive User Logs

Solution Overview

Problem

Business entities face operational challenges with data security and performance when storing data in third-party external cloud computing platforms, as sensitive user data is mixed with other entities' data, limiting control and access.

Innovation Solution

A method and system for automatically capturing application data from external cloud computing platforms and redirecting it to an internal cloud platform, involving data set identification, extraction, authentication, and storage using a processor and network interface, with protocols like LDAP for secure connection establishment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is stored in third-party external cloud computing platforms, then data storage and processing services are provided, but data security and control are compromised due to mixing with other entities' data

Engineering Contradiction:

Improvedata securityVSAvoidcontrol over deployment and access

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent segments data storage by creating separate environments: a public cloud computing platform for non-sensitive data and a private cloud computing platform for sensitive data. This segmentation isolates sensitive business entity data from other entities' data, thereby improving data security while maintaining operational control through dedicated private platform access.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a data capture mechanism as an intermediary component that automatically captures data from the public cloud computing platform and redirects it to the private cloud computing platform. This intermediary enables seamless data migration and maintains control over sensitive data without requiring manual intervention.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If data is stored in external cloud computing platforms, then storage services are provided, but access control and manipulation capabilities are limited

Engineering Contradiction:

Improveaccess and manipulation capabilitiesVSAvoidsystem architecture

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent divides the cloud computing infrastructure into public and private segments, each with distinct access control policies. The private cloud computing platform provides enhanced access and manipulation capabilities for sensitive data, while the public platform handles general operations, thereby improving ease of operation for critical data without excessive complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements automatic data capture and redirection functionality that operates autonomously without requiring manual intervention. The system self-manages the data migration process from public to private platforms, reducing operational complexity while maintaining improved access control capabilities.

Inventive Principle:

Principle #25Self-service

3Reliability

If data is captured and redirected from external to internal cloud platforms, then data security is improved, but system complexity increases

Engineering Contradiction:

Improvedata securityVSAvoiddata capture and redirection system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a data capture mechanism as an intermediary component that automatically captures data from the public cloud computing platform and redirects it to the private cloud computing platform. This intermediary enables seamless data migration and maintains control over sensitive data without requiring manual intervention.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements automatic data capture and redirection functionality that operates autonomously without requiring manual intervention. The system self-manages the data migration process from public to private platforms, reducing operational complexity while maintaining improved access control capabilities.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12074858B2Method and system for capturing data from an external cloud computing platform

Publication Date: 2024.08.27 JPMORGAN CHASE BANK NA

AI summary

A method for capturing data from an external cloud computing platform is provided. The method includes capturing data from an application maintained in the external cloud computing platform; identifying a data set from the data based on a predetermined criterion, the data set including a log usage form corresponding to a user; extracting the identified data set from the data; authenticating a connection between the external cloud computing platform and an internal cloud computing platform; publishing, via a network interface, the extracted data set to the internal cloud computing platform by using the authenticated connection; and storing the published data set in a database on the internal cloud computing platform.