Multi-tenant Database Tenant Connection Data Sharing
Solution Overview
Problem
Conventional database systems do not provide a mechanism for secure sharing of data between tenants who do not have authorization, limiting information retrieval and sharing within the system.
Innovation Solution
Implementing mechanisms and methods for sharing information between tenants in a multi-tenant database system, where users can specify data to be shared, establish connections, and manage the scope of data accessibility, using a connection-based approach that allows secure sharing of records and files between authorized tenants.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional database systems restrict data access to authorized users only, then data security is maintained, but information sharing between tenants is limited
Solution Approach 1:
The patent segments data access permissions by creating tenant-specific connections within the multi-tenant database system. Each connection represents a discrete authorization pathway that allows controlled sharing between tenants while maintaining overall system security. This segmentation enables selective information sharing without compromising the security framework.
Solution Approach 2:
The patent introduces connection objects as intermediaries between tenants. These connection objects act as mediators that facilitate secure data sharing by establishing authorized pathways. The intermediary mechanism allows tenants to share information through defined connections while the system maintains security oversight and control.
2Adaptability or versatility
If data is shared between tenants without authorization mechanisms, then information accessibility is improved, but system security is compromised
Solution Approach 1:
The patent implements preliminary authorization actions by establishing connections between tenants before any data sharing occurs. The connection establishment process includes authorization verification in advance, ensuring that only approved tenants can access shared data. This preliminary action prevents unauthorized access while enabling legitimate information sharing.
Solution Approach 2:
The patent incorporates feedback mechanisms through connection status tracking and authorization verification. The system continuously monitors connection states and enforces access controls based on established connections. This feedback loop ensures that data accessibility is maintained only when proper authorization exists, preventing security compromises.
3Adaptability or versatility
If a multi-tenant database system implements connection-based data sharing, then information sharing between tenants is enabled, but system complexity increases
Solution Approach 1:
The patent implements universal connection objects that can serve multiple functions within the multi-tenant system. These connection objects handle authorization, data routing, and access control in a unified manner. By making the connection mechanism multi-functional, the system reduces the need for separate complex mechanisms for each sharing scenario, thereby managing system complexity while enabling versatile data sharing.
4Device complexity
If conventional database systems use single-tenant architecture, then data security is simplified, but resource utilization and sharing efficiency are reduced
Solution Approach 1:
The patent merges multiple tenant environments into a single multi-tenant database system while maintaining logical separation through connections. By combining infrastructure resources into a shared environment, the system achieves improved resource utilization efficiency. The connection-based authorization mechanism maintains security management simplicity by providing a unified approach to access control across all tenants.
Data Source
AI summary
In a method, system, and computer-readable medium having instructions for sharing information between tenants of a multi-tenant database, information is received on a connection between a first tenant of a multi-tenant database and a second tenant and the connection has information on a scope of data from the first tenant shared with the second tenant, data is allowed for a record of the first tenant to be accessible to the second tenant in accordance with the connection, information is received on a file related to the record of the first tenant, and data is allowed from the file to be accessible to the second tenant in accordance with the connection.