Application Gateway Architecture for Sharded Database Query Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional content control software and services are inadequate in managing and securing enterprise content downloaded to devices not owned by the enterprise, particularly in maintaining control and protecting data from unauthorized access, and in handling relationships between objects in sharded databases.
Innovation Solution
A cloud-based solution involving an application gateway architecture that uses managed containers on client devices to control and secure enterprise content, enabling secure storage, access management, and data encryption, while also handling relationships between objects across shards through a split function table visible to the application programming interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional content control software is used to control content on user devices, then access to certain content can be restricted, but control over enterprise content downloaded to devices not owned by the enterprise is lost
Solution Approach 1:
The patent segments the content control system into multiple components: a gateway server that manages policy rules, a database system that stores enterprise content, and client applications on user devices. This segmentation allows control over enterprise content regardless of device ownership while maintaining flexibility in device usage.
Solution Approach 2:
The patent introduces a gateway server as an intermediary between the database system and client applications. The gateway server enforces policy rules and controls access to enterprise content, ensuring that control is maintained even when content is accessed from devices not owned by the enterprise.
2Ease of operation
If content is downloaded to user devices for access, then convenience of access is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent implements preliminary action by establishing policy rules in advance that control how enterprise content can be accessed and used on client devices. The gateway server evaluates these rules before allowing content operations, preventing unauthorized access before it can occur.
Solution Approach 2:
The patent implements feedback mechanisms where the gateway server continuously monitors and evaluates policy rules against content access requests. The server provides feedback by allowing or blocking operations based on rule evaluation, ensuring security while maintaining convenient access for authorized operations.
3Productivity
If a single large database is used to store enterprise content, then data relationships are easy to manage, but scalability and performance deteriorate
Solution Approach 1:
The patent segments the database into multiple shards distributed across different servers. Each shard stores a portion of the enterprise content, allowing the system to scale horizontally while maintaining efficient data management through the gateway server's coordination of data relationships across shards.
Data Source
AI summary
A hosted application gateway server node may be communicatively coupled to backend systems, client devices, and database shards associated with database servers. Through the gateway server node, various services may be provided to managed containers running on client devices such that enterprise applications can be centrally managed. A sharding manager may manage relationships of database items across database shards. Each shard stores a copy of a table representing a split of a relationship. A shard ID mask is included in each item's ID. At query time, the shard ID can be extracted and used to query the correct database. This query routing mechanism allows navigation from one shard to another when multiple items are in a relationship (e.g., share the same resource such as a document). As such, embodiments can eliminate the need for APIs to join in data that span multiple shards.