Entitled Data Cache Management with Permission Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for distributing entitled data in larger client-server systems are inefficient, leading to increased server capacity needs and costs as the number of users grows, due to the linear relationship between server capacity and user count, and lack robust access control mechanisms.
Innovation Solution
Implementing a data cache management system with a data cache server, permission server, and publish server that caches entitled data at the edge of the network, uses Entitlement Tokens for access control, and updates cached data dynamically, allowing for efficient delivery of data subsets based on user permissions without re-querying the data server for each request.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is cached at proxy servers to improve data distribution speed, then data delivery speed is improved, but access control security deteriorates because cached data may be accessed by unauthorized users
Solution Approach 1:
The patent segments the data distribution system into multiple cache servers distributed across different locations. Each cache server stores copies of entitled data and independently verifies user permissions. This segmentation allows the system to maintain security through distributed verification while achieving fast local data delivery without requiring all users to access the central data server.
2Reliability
If server capacity is increased to handle more user requests, then system reliability is improved, but cost increases due to the linear relationship between server capacity and user count
Solution Approach 1:
The patent implements multiple cache servers that store copies of entitled data. Instead of requiring a single powerful server to handle all user requests, the system creates distributed copies of data across multiple cache servers. This copying approach allows the system to handle increased user load by distributing requests across multiple nodes, avoiding the need to linearly increase the capacity of a single server and thereby reducing overall system cost.
3Reliability
If entitled data is marked as non-cacheable to prevent unauthorized access, then access control security is improved, but data delivery speed deteriorates because data must be retrieved from the data server for each request
Solution Approach 1:
The patent introduces cache servers as intermediary components between users and the central data server. These cache servers store copies of entitled data and act as intermediaries that can quickly serve data to authorized users without requiring them to contact the central data server for each request. The intermediary cache servers maintain security by verifying user permissions locally, thus achieving both fast data delivery and access control security simultaneously.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods are disclosed for managing an entitled data cache. A data server may generate and send entitled data to a data cache server. The data cache server, a server that may be located nearer to the user within a data providers computer network, may receive and cache the entitled data. A permission server may store users permissions and transmit the users permissions to the data server and the data cache server. Upon receiving a request for data, the data cache server may retrieve the requested data from the cache and send a subset of the cached data which matches the users permissions to the user, without the need to request the data from the data server.