Database Object Server for Secure In-Database Web Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solutions for building web applications over data platforms require data to leave the database security boundary, necessitating additional operations and resources for managing middle tier application servers, and existing alternatives either complicate management or lack support for UI applications.
Innovation Solution
A framework that enables users to build applications by tying the security boundary of the application UI to the data security boundary, using User Defined Function (UDF) server objects within the database, which run with the same permissions as stored procedures, and communicate securely through a proxy server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is accessed through a middle tier application server, then data availability to consumers is improved, but data security is compromised as data must leave the database security boundary
Solution Approach 1:
The patent introduces a database object server as an intermediary component that mediates between the database and web applications. This server runs within the database security boundary and provides a controlled interface for web applications to access data, eliminating the need for data to leave the secure boundary while still enabling data availability to consumers through a secure channel
2Adaptability or versatility
If a middle tier application server is used, then web application functionality is enabled, but operational complexity increases due to additional management requirements
Solution Approach 1:
The patent merges the application server functionality with the database by implementing the database object server as a first-class database object. This integration eliminates the separate middle tier infrastructure, reducing operational complexity while maintaining web application functionality through the unified database-managed server environment
3Device complexity
If existing alternative approaches are used, then management is simplified, but UI application support is lost
Solution Approach 1:
The patent creates a universal database object server that serves multiple functions: it supports both traditional data access operations and full web application execution with UI capabilities. The server can instantiate and manage various types of applications (web, mobile, desktop) while maintaining a consistent security context and management interface, thus providing UI application support without sacrificing management simplicity
Data Source
AI summary
A data platform for managing an application as a first-class database object. The data platform includes at least one processor and a memory storing instructions that cause the at least one processor to perform operations including detecting a data request from a browser for a data object located on the data platform, executing a stored procedure, the stored procedure containing instructions that cause the at least one processor to perform additional operations including instantiating a User Defined Function (UDF) server, an application engine, and the application within a security context of the data platform based on a security policy determined by an owner of the data object. The data platform then communicates with the browser using the application engine as a proxy server.