Multi-tenant Database Zero-Copy Data Sharing via Alias Objects
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-tenant database systems do not support instantaneous, zero-copy, easy-controllable data sharing between different customer accounts, as they require physical data copying or do not allow online data sharing due to their design.
Innovation Solution
Implementing a system with cross-account role grants and alias objects that enable users in one customer account to access data in another account instantly without copying data, using a share object with defined access rights and alias objects for controlled access, allowing for role-based access control across accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If physical data copying is used for data sharing between customer accounts, then data accessibility is improved, but data sharing time and storage overhead increase
Solution Approach 1:
The patent uses alias objects as virtual copies that reference original data without duplicating physical storage. When data is shared between customer accounts, an alias object is created in the target account that points to the source data, enabling immediate access without copying the actual data bytes.
Solution Approach 2:
The alias object acts as an intermediary between the target account and the source data. Instead of direct access to source data or full copying, the alias object serves as a mediator that provides controlled access to the shared data across account boundaries.
2Ease of operation
If physical data copying is used for data sharing, then data accessibility is improved, but storage resource consumption increases
Solution Approach 1:
The patent implements a virtual copying mechanism where alias objects reference original data without creating physical duplicates. The alias object contains only metadata (reference to source data, access rights), not the actual data content, eliminating storage overhead while maintaining accessibility.
3Adaptability or versatility
If online data sharing is enabled between customer accounts, then data sharing capability is improved, but system security and access control complexity increase
Solution Approach 1:
The patent applies different access control characteristics to different aspects of data sharing. The alias object itself has simple existence and reference properties, while the access rights associated with it provide the necessary security control. This separation allows online sharing capability while maintaining manageable security through role-based access control on the alias objects.
4Speed
If instantaneous data sharing is implemented, then data access speed is improved, but system complexity increases
Solution Approach 1:
The alias object provides instantaneous access by being a local reference within the target account's namespace. When a user queries data through an alias object, the system immediately resolves the reference to the source data without waiting for data transfer or copying operations, achieving fast access through virtualization rather than physical duplication.
Data Source
AI summary
A method of sharing data in a multi-tenant database includes inspecting, by a processing device of a multiple tenant database, a sharer account to determine an existence of a link between an alias object in a target account and a database, wherein the database is linked to a first role object included in a share object in the sharer account. The method includes granting a second role object, in the target account, access rights to the alias object, wherein the first role object having one or more grants to one or more resources of the sharer account, and wherein the target account accesses the one or more resources using the one or more grants of the share object and using the alias object without at least one of copying the one or more resources or transmitting the one or more resources.