Automatic operation detection on protected field
AssigneeOracle International Corporation
InventorsJing Wu, Blake Sullivan, Michael William McGrath, Min Lu
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for automatic operation detection on protected fields. A data model configuration can be used to specify which attributes of a data model used by a cloud-based application are protected by a data security provider monitoring communications between the application and a client device. A determination can be made automatically which operations of the cloud-based application are supported for protected fields. The cloud-based application can be configured to enable/disable certain features, such as validators, auto complete, search operators, etc. according to whether the attributes are protected fields.
Claims20
A method comprising:
- providing, by a cloud infrastructure system, an application programming interface (API) to a data model used by a cloud-based application of the cloud infrastructure system;
- receiving, by the cloud infrastructure system, a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
- determining, by the cloud infrastructure system, one or more protected fields using the data model configuration;
- determining, by the cloud infrastructure system, one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators;
- and
- configuring, by the cloud infrastructure system, the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
A non-transitory machine readable storage medium having instructions stored thereon that when executed by one or more processors cause the one or more processors to perform a method comprising:
- providing an application programming interface (API) to a data model used by a cloud-based application of a cloud infrastructure system;
- receiving a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
- determining one or more protected fields using the data model configuration;
- determining one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators;
- and
- configuring the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
A system comprising:
- a processor;
- and
- a memory storing a set of instructions which when executed by the processor cause the processor to:
- provide an application programming interface (API) to a data model used by a cloud-based application of a cloud infrastructure system
- receive a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
- determine one or more protected fields using the data model configuration;
- determine one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators;
- and
- configure the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
Dependencies are inferred from the claim text.