User-Isolated Tenant Shards for Compliant Data Export
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely and compliantly exporting user data from backend computing systems when access control is granted at the shard level, making it difficult for tenant administrators to access and export user data.
Innovation Solution
The system extracts user data from user data shards and stores it in user-isolated tenant shards accessible by tenant administrators, generating and storing export instructions in a separate data store, ensuring compliance by using unique identifiers for access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user data is stored in user data shards with shard-level access control, then data security and compliance are improved, but tenant administrator access to user data is restricted
Solution Approach 1:
The system segments data access into two distinct components: user data remains segmented in isolated shards for security, while access control is segmented into separate instructions stored in a different location. This allows the tenant administrator to access the instructions and retrieve data without having direct access to the user data shards themselves, resolving the contradiction between security and accessibility.
Solution Approach 2:
The patent introduces an intermediary mechanism where access instructions are stored in a separate location from the user data. The tenant administrator accesses these instructions as an intermediate step before retrieving the actual data. This intermediary layer enables controlled access without compromising the security architecture of the isolated user data shards.
2Ease of operation
If user data is extracted and copied to a separate tenant shard, then tenant administrator accessibility is improved, but system complexity increases
Solution Approach 1:
The system divides the data management architecture into distinct segments: user data shards remain isolated for security, while access instructions are segmented and stored separately. This segmentation allows the tenant administrator to access data through the instruction layer without requiring direct access to user data shards, achieving accessibility without proportionally increasing overall system complexity.
Solution Approach 2:
Instead of copying the entire user data system, the patent creates a simplified copy in the form of access instructions that contain only the necessary information for data retrieval. This selective copying approach provides the needed accessibility while minimizing the increase in system complexity compared to duplicating the full data storage architecture.
3Reliability
If access instructions are stored in a separate data store, then data compliance and security are maintained, but access procedure complexity increases
Solution Approach 1:
The patent extracts the access control logic from the user data storage system and places it in a separate location. This extraction maintains compliance and security by keeping access control mechanisms distinct from sensitive data, while the simplified instruction format actually reduces procedural complexity compared to complex authentication and authorization systems.
Solution Approach 2:
The access instructions are prepared in advance and stored in a readily accessible location before any data retrieval operation occurs. This preliminary action eliminates the need for complex real-time authentication and authorization procedures during data access, simplifying the actual access procedure while maintaining compliance requirements.
Data Source
AI summary
User data is extracted from a user data shard and copied into a user-isolated tenant shard. Instructions for accessing the user data are stored in a separate data store. A tenant administrator computing system retrieves and runs the instructions for accessing and exporting the user data from the user-isolated tenant shard.