Link Data Structure for Secure Instance-Level Data Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data integration methods face challenges in securely accessing and integrating data from disparate sources, particularly in ensuring instance-level security without requiring adjustments to the presentation tier or direct interaction with data storage systems.
Innovation Solution
Implementing a system that determines access authorization for objects associated with instance-level security by using a link data structure, allowing secure access to authorized users without modifying the user interface, and utilizing a three-tier architecture to manage data integration across relational databases and cloud systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If instance-level security is implemented through traditional data integration methods, then data security is improved, but system complexity and difficulty of implementation increase
Solution Approach 1:
The patent introduces a link data structure as an intermediary component that connects user accounts to authorized objects without requiring direct security configuration between users and data sources. This mediator layer simplifies the security model by centralizing authorization management in the functional logic tier, reducing system complexity while maintaining instance-level security
2Reliability
If row-level security is implemented at the data storage level, then data access control is improved, but ease of operation and user interface simplicity deteriorate
Solution Approach 1:
The patent segments the security implementation into distinct layers: the presentation tier remains simple and unchanged, while the functional logic tier handles security logic through the link data structure. This segmentation allows row-level security to be implemented without affecting user interface simplicity, as security operations are isolated from the presentation layer
3Reliability
If direct interaction with data storage systems is required for security management, then access authorization is improved, but ease of manufacture and system maintenance worsen
Solution Approach 1:
The link data structure serves as an intermediary that manages access authorization in the functional logic tier without requiring direct interaction with data storage systems. This approach improves access authorization control while easing system maintenance, as security management is decoupled from data storage operations and can be maintained independently
4Measurement precision
If presentation tier modifications are required to implement security, then access control precision is improved, but adaptability and ease of deployment deteriorate
Solution Approach 1:
The patent segments security functionality into the functional logic tier, allowing instance-level security to be implemented without modifying the presentation tier. This segmentation maintains access control precision while improving adaptability, as the presentation layer remains unchanged and can be deployed independently of security configuration
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for a light integration. One of the methods includes receiving a plurality of objects from a functional logic tier of an application, each object representative of data stored in a data tier of the application, a first portion of the stored data being stored in a first persistent data store and a second portion of the stored data being stored in a second persistent data store. The method includes presenting in a first area of the user interface information from the plurality of objects, the information selected from the first portion of the data. The method includes receiving an indication of an object being selected from the plurality of objects. The method includes presenting in a second area of the user interface information from the second part of data corresponding to the selected business object.