Deterministic Policy Reconciliation in Data Virtualization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data virtualization systems fail to effectively enforce data protection policies across multiple layers of abstraction and source data assets, leading to difficulties in determining and applying net outcomes for data access decisions.
Innovation Solution
A computer-implemented method that identifies queried virtual objects within a set of connected objects, determines intermediate decisions based on policies, and reconciles these decisions to generate a resolved decision for deterministic policy-based enforcement in data virtualization systems, accounting for hierarchical relationships and policies across all relevant data asset layers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data virtualization systems enforce policies only at the abstract layer, then the system is simple to operate, but it fails to account for policies defined on source data assets and intermediate abstract layers
Solution Approach 1:
The patent segments the policy enforcement process into distinct components: identifying the queried virtual object, determining the subset of objects through cumulative transitive closure, evaluating policies for each object separately to form intermediate decisions, and finally reconciling these intermediate decisions into a resolved decision. This segmentation allows comprehensive multi-layer policy enforcement while maintaining manageable system complexity through modular processing.
Solution Approach 2:
The patent implements a nested structure where multiple layers of abstraction are evaluated hierarchically. The system nests the evaluation of source data assets, intermediate abstract layers, and the final queried virtual object within a cumulative transitive closure framework, allowing policies at each nested level to be applied and reconciled systematically.
2Reliability
If the system evaluates policies at multiple layers of abstraction, then policy coverage is improved, but the complexity of determining net outcomes increases
Solution Approach 1:
The patent implements a feedback mechanism through the deterministic reconciliation process. The system evaluates policies at multiple layers, generates intermediate decisions at each level, and then reconciles these decisions through a deterministic process that systematically resolves conflicts and determines the final net outcome. This feedback loop ensures comprehensive policy coverage while providing a clear methodology for determining final decisions.
Solution Approach 2:
The patent applies preliminary action by first identifying the queried virtual object and determining the complete subset of objects through cumulative transitive closure before evaluating any policies. This preliminary identification and organization of all relevant objects and their relationships simplifies the subsequent policy evaluation and net outcome determination process.
3Measurement precision
If the system applies deterministic reconciliation to multiple intermediate decisions, then policy enforcement accuracy is improved, but the processing time increases
Solution Approach 1:
The patent performs preliminary identification of the queried virtual object and determination of the complete subset of objects through cumulative transitive closure before initiating policy evaluation. This preliminary organization of data structures and relationships reduces the complexity of the subsequent deterministic reconciliation process, improving processing efficiency while maintaining high accuracy in policy enforcement decisions.
Data Source
AI summary
A method, apparatus, system, and computer program code for policy-based enforcement in a data virtualization system is provided. Responsive to receiving a query, a computer identifies a virtual object among a set of connected objects that is represented by a set of data assets and their hierarchical relationships. The virtual object corresponds to a subset of the data assets. The computer identifies a subset of objects according to a cumulative transitive closure of the virtual object over the set of connected objects. The computer identifies a set of policies for the subset of objects. For each object in the subset of objects, the computer determines an intermediate decision according to set of policies, whereby a set of intermediate decisions is formed. The computer deterministically reconciles the set of intermediate decisions to generate a resolved decision. The computer provides access to the queried virtual objects based on the resolved decision.