Multi-tenant Data Spaces via Metadata Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-tenant computing environments, data security concerns arise due to shared application instances, forcing organizations to manage multiple deployments when some tenants require legacy versions, leading to inefficiencies and increased costs.
Innovation Solution
Deploying multiple application networks with separate data spaces in a multi-tenancy computing system, where meta-data from user queries filters data access to ensure secure and isolated data retrieval, using a key derived from user identifiers and application instances.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If a single instance of application executes in a multi-tenant environment, then resource efficiency and cost are improved, but data security and isolation between tenants deteriorate
Solution Approach 1:
The patent segments the monolithic data access layer into tenant-specific data access modules, where each module handles data operations for a specific tenant. This segmentation allows the single application instance to serve multiple tenants while maintaining data isolation through dedicated access paths for each tenant.
Solution Approach 2:
The patent introduces a data access module as an intermediary layer between the application instance and the database. This mediator enforces data security policies, validates tenant identities, and ensures that each tenant can only access their own data even though they share the same application instance.
2Reliability
If separate database stores are used for each tenant, then data security is improved, but system complexity and resource consumption increase
Solution Approach 1:
The patent merges multiple tenant databases into a single shared database instance, eliminating the need for separate database stores for each tenant.配合tenant identification mechanisms, this approach maintains data security while reducing system complexity and resource consumption.
Solution Approach 2:
The patent creates a universal data access module that serves all tenants through a single instance. This multi-functional component handles data operations for any tenant by dynamically identifying the current tenant context, thereby reducing system complexity while maintaining security.
3Loss of energy
If all tenants access the same application instance, then resource efficiency is improved, but the ability to support legacy versions deteriorates
Solution Approach 1:
The patent introduces dynamic versioning capabilities within the single application instance, allowing different tenants to access different versions of the application logic. The system dynamically routes requests to appropriate version instances based on tenant configuration, maintaining resource efficiency while supporting legacy versions.
Data Source
AI summary
Embodiments of the present invention provide a method, system and computer program product for data spaces for multi-tenancy computing. In an embodiment of the invention, different application networks are deployed into a multi-tenancy computing environment. The different application networks each provide common program logic for one or more application instances accessed by different end users. As well, the different end users exchange messages between one another within a same one of the networks. For each of the networks, a separate data space is defined within the multi-tenancy computing system, each including an interface to one or more data repositories. Finally, data queries by ones of the different end users may be processed by extracting meta-data from each of the queries and filtering corresponding underlying data queries to the data repositories with a key derived from the extracted meta-data.