Cloud Database Data Certification View Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing cloud database platforms, such as Snowflake, face challenges in efficiently managing data access and sharing, particularly in ensuring that consumers access only authorized data portions without duplicating or modifying the underlying data, leading to cumbersome and resource-intensive processes.
Innovation Solution
The implementation of a data certification process that generates a limited consumer view definition, allowing consumers to access specific data portions while preventing unauthorized access, by determining rules and performing a data access certification process without modifying the underlying data, using a shared view definition and virtual warehouses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is shared without copying in a cloud database platform, then storage efficiency is improved and data continuity is maintained, but control over consumer access to specific data portions becomes difficult
Solution Approach 1:
The patent segments data access control by creating separate certification tables and view definitions for different consumer groups. Each consumer group has its own certification rules and access permissions, allowing fine-grained control over which portions of shared data each consumer can access, while the underlying data remains uncopied and centralized.
Solution Approach 2:
The patent introduces certification tables and view definitions as intermediary layers between the shared data storage and consumers. These intermediaries enforce access control rules without requiring data copying, acting as a mediator that allows or denies access to specific data portions based on consumer credentials and certification status.
2Reliability
If consumers access only authorized data portions, then data security is improved, but the complexity of managing access rules and certifications increases
Solution Approach 1:
The patent creates universal certification tables and view definition structures that can be applied across multiple consumer groups and data types. The same certification framework and access control mechanisms work for different consumers, data portions, and security requirements, reducing the need for separate complex systems for each scenario.
Solution Approach 2:
The patent performs preliminary certification of data portions before making them accessible to consumers. Certification tables pre-validate which data portions meet consumer credentials and access rules, so that when consumers query data, the access control checks are already prepared and streamlined, reducing runtime complexity.
3Productivity
If data is shared across multiple consumers without copying, then resource efficiency is improved, but the ability to provide different data portions to different consumers becomes cumbersome
Solution Approach 1:
The patent implements dynamic data access control where view definitions and certification rules can be flexibly configured for different consumer groups. The system dynamically determines which data portions each consumer can access based on their credentials and the certification tables, allowing customized data access without copying or static data duplication.
Solution Approach 2:
The patent changes access parameters through certification tables that store different access permissions, consumer credentials, and data portion identifiers. By modifying these parameters in the certification tables rather than copying data, the system can easily provide different data portions to different consumers while maintaining efficient shared storage.
Data Source
AI summary
Methods, systems, and apparatuses for providing access to records of a database stored on a database server in a cloud database platform are described herein. A data sharing platform may determine a shared view definition for access to the database. The data sharing platform may determine rules that specify criteria that limit access to the records stored by the database. The one or more first rules may be received via a user interface. The data sharing platform may perform, based on the rules, a data access certification process on the records stored by the database to generate a table of certification results. The data sharing platform may generate, based on the table of certification results, and without modifying the records stored by the database, a limited consumer view definition. Based on updates to the records, a new limited consumer view definition may be generated.