Secure Tenant Activity Data System for Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multitenant computing systems face challenges in securely processing and storing monitoring data associated with user interactions, as existing systems often lack secure mechanisms to isolate and protect sensitive data from unauthorized access.
Innovation Solution
A secure tenant activity data system is implemented, which includes an interface to receive and encrypt monitoring data, a processor to decrypt and stream process the data, and a secure storage area to store it with a tenant identifier, ensuring only authorized users can access the processed data for further analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If monitoring data is collected and stored for analysis to predict user needs, then the system can serve users better through improved recommendations and analytics, but the private user data becomes vulnerable to unauthorized access and privacy breaches
Solution Approach 1:
The patent segments user data into tenanted data (stored privately in user data stores) and monitoring data (collected separately for analysis). This segmentation allows the system to collect monitoring data for productivity improvement while keeping tenanted data isolated and secure, preventing unauthorized access to private information.
Solution Approach 2:
The patent introduces monitoring data as an intermediary that captures user interactions without storing sensitive tenanted data. This intermediary data structure allows analytics and machine learning to function while maintaining a security boundary that prevents direct access to private user information stored in tenanted data stores.
2Adaptability or versatility
If user data is collected and analyzed to build predictive models, then the system can provide better user experience, but the data security and isolation between tenants is compromised
Solution Approach 1:
The system segments data into tenanted data for storage and monitoring data for analysis. This segmentation enables predictive modeling capabilities through monitoring data while maintaining reliable data isolation by keeping tenanted data in separate, access-controlled stores that cannot be viewed by other tenants or system administrators.
Solution Approach 2:
The patent creates a copy of interaction data in the form of monitoring data that is sufficient for building predictive models but does not contain sensitive tenanted information. This copying approach allows analytics to function with replicated interaction patterns while the original sensitive data remains isolated and secure.
3Device complexity
If monitoring data is stored in the same system as tenanted data, then data processing is simplified, but unauthorized access to private data becomes possible
Solution Approach 1:
The patent segments the data storage architecture into separate tenanted data stores and monitoring data collection points. This segmentation maintains relatively simple data processing workflows while preventing unauthorized access by ensuring that even if monitoring data is accessed, sensitive tenanted data remains isolated in protected stores that require authentication and authorization.
Data Source
AI summary
A secure tenant activity data system for a deployment service includes processor that is configured to decrypt a set of encrypted stream processed monitoring data to recover a set of stream processed monitoring data; determine a transaction identifier associated with the set of stream processed monitoring data; determine whether the transaction identifier has been seen associated with a set of previous data; in response to determining that the transaction identifier has been seen associated with the set of previous data, retrieve the set of previous data; decrypt the set of previous data to recover a set of decrypted previous data; aggregate the set of stream processed monitoring data with the set of decrypted previous data to generate a set of aggregated data; encrypt the set of aggregated data to create a set of encrypted aggregated data; and provide the set of encrypted aggregated data to a safe storage area.