Graph Object Storage with Inline Access Control Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in efficiently managing access control for graph objects, as access is typically controlled at page granularity, leading to improper access grants or denials, and managing access control metadata is inefficient, consuming significant memory and processing time.
Innovation Solution
Storing graph object metadata, including access control permissions, inline with the corresponding graph objects at cache lines, allowing for more granular access permission management and reducing the need to fetch and search through unnecessary data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If access control metadata is stored separately from graph objects, then memory capacity is conserved, but access control precision deteriorates due to page-granularity limitations
Solution Approach 1:
The patent merges graph object data and access control metadata into the same cache line, allowing them to be stored and retrieved together. This combination enables precise graph-object-level access control while utilizing cache memory efficiently, resolving the contradiction between memory conservation and access control precision.
2Loss of energy
If access control metadata is stored collectively for multiple graph objects, then memory bandwidth is reduced, but processing time increases due to the need to retrieve and search all metadata
Solution Approach 1:
The patent segments access control metadata so that each graph object's metadata is stored in the same cache line as the corresponding graph object data. This segmentation allows the system to retrieve only the specific metadata needed for access control decisions, rather than retrieving and searching through all metadata collectively, thus reducing both memory bandwidth consumption and processing time.
3Device complexity
If page-granularity access control is used, then system complexity is reduced, but access control accuracy deteriorates causing improper access grants or denials
Solution Approach 1:
The patent applies local quality by associating access control metadata specifically with each graph object at the cache line level. This allows different access permissions to be assigned to different graph objects within the same page, enabling precise access control without requiring complex page-level management mechanisms, thus maintaining system simplicity while improving accuracy.
Data Source
AI summary
A processing system receives graph object data and graph object metadata. The processing system stores the graph object metadata inline with the graph object data. The graph object metadata indicates access permissions for corresponding graph objects. Because the graph object metadata is stored inline with the graph object data, the graph object metadata is more easily retrieved and fewer system resources are consumed to determine access permissions of a requester as compared to a system where graph object metadata is stored separately from the graph object data.