Tenant Data Access Controls for Cross-Tenant Model Building
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Tenanted database systems face challenges in combining tenant data for higher-quality machine learning models while ensuring privacy and contractual compliance, as existing contractual commitments prevent direct access or storage outside isolated tenant regions.
Innovation Solution
A system that allows tenants to opt-in to share data for model building, with secure data transfer and preprocessing, enabling the creation of higher-quality models by combining data from multiple tenants while preserving privacy and providing audit trails and opt-out options.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If tenant data is combined to create higher-quality machine learning models, then model quality is improved, but tenant privacy and contractual compliance are compromised
Solution Approach 1:
A shared services layer is introduced as an intermediary between tenant data and model development. This layer enables data sharing and model creation while maintaining tenant isolation and privacy through controlled access mechanisms
Solution Approach 2:
The system segments data access and processing into distinct layers: tenant data remains isolated in tenant database regions, while a shared services layer handles model development. This segmentation allows model quality improvement without direct tenant data exposure
2Object-affected harmful factors
If tenant data is stored in isolated tenanted database regions, then tenant privacy is protected, but data availability for model building is restricted
Solution Approach 1:
The shared services layer provides multi-functionality by serving both tenant-specific operations and cross-tenant model building. This universal layer enables data to serve multiple purposes while maintaining privacy through controlled access
3Reliability
If contractual commitments are enforced to prevent direct data access, then tenant privacy is ensured, but functional flexibility is reduced
Solution Approach 1:
The system introduces dynamic control mechanisms where tenants can opt-in to shared services and data sharing. This dynamic approach allows contractual compliance to be maintained while providing functional flexibility when tenants voluntarily agree to enhanced functionality
Data Source
AI summary
A system and method for 1) storing, in data stores, data associated with tenants in separated regions, each region corresponding to a tenant; 2) receiving a request from a first tenant to share data associated with the first tenant with other tenants; 3) storing, based on the request, access control data identifying data associated with the first tenant that is subject to sharing with the other tenants; 4) accessing model building data from the tenanted database system, the model building data defined at least in part by the access control data, wherein the model building data is associated with the first tenant and the other tenants; 5) creating a model based on the data associated with the first tenant and, if applicable, other data associated with the other tenants; and 6) providing access to the model to one or more other tenants.