Database Authorization via Control and Data Plane Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current database migration techniques lack control over database data dissemination and accuracy, as they create snapshots that do not incorporate subsequent changes, and fail to ensure secure and consistent access for shared consumers.

Innovation Solution

Implementing a system that divides authorization between a control plane and a data plane for database sharing, allowing producers to manage access and metadata while consumers access shared database data securely through a datashare mechanism.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If database migration techniques are used to share database data, then access to database data is enabled for consumers, but control over data dissemination and accuracy is lost

Engineering Contradiction:

Improveaccess to database dataVSAvoidcontrol over data dissemination and accuracy

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the database sharing system into distinct components: a data plane for transferring data and a control plane for managing authorization. This segmentation allows the system to enable broad data access through the data plane while maintaining centralized control over dissemination and accuracy through the control plane, which tracks and manages data shares and consumer access rights.

Inventive Principle:

Principle #1Segmentation

2Adaptability or versatility

If snapshots are created for database sharing, then data access is enabled, but real-time updates are not incorporated

Engineering Contradiction:

Improvedata access capabilityVSAvoidsubsequent changes to database data

Core Design Contradiction:

Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent implements a feedback mechanism where the control plane continuously monitors the producer database for new data shares and automatically updates consumer database instances. When the producer creates new data shares, the control plane receives notifications and propagates these updates to all authorized consumers, ensuring they receive real-time information without manual intervention or snapshot recreation.

Inventive Principle:

Principle #23Feedback

3Reliability

If centralized database management is used, then control over access is maintained, but security and consistency for shared consumers are compromised

Engineering Contradiction:

Improvecontrol over accessVSAvoidsecurity and consistency for shared consumers

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces the control plane as an intermediary between the producer database and consumer databases. The control plane manages authorization by tracking which consumers have access to which data shares, validates access requests, and coordinates data synchronization. This intermediary role enhances security and consistency for shared consumers while preserving the producer's control over access permissions.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11899685B1Dividing authorization between a control plane and a data plane for sharing database data

Publication Date: 2024.02.13 AMAZON TECH INC

AI summary

Authorization is divided between a control plane and a data plane for sharing database data. A producer database engine can create a shared database via a data plane interface. A producer can then authorize access to the shared database via a control plane interface to a consumer. A consumer can associate the authorization granted to the consumer with a consumer database engine via the control plane interface.