# US 10,769,298 B1 · Security system for benchmark access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,298 B1 - Document ID: US10769298B1 - Status: Granted - Kind: B1 - Application number: 15/693,782 - Filed: 2017-09-01 - Granted: 2020-09-08 - Earliest claimed: 2017-09-01 - Assignees: Workday, Inc. - Applicants: Workday, Inc. - Inventors: Denis Gulsen; Erol Guney; Amir Ali Afghani; Eric James Ranstrom; Thomas Monir Ghali; Kayla Marie Kimura - Web page: https://patentgrep.com/patent/US10769298B1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 63/105: {Multiple levels of security} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system for analytics security includes an interface and a processor. The input interface is configured to receive a request for analytics data, where the request is associated with a requestor. The processor is configured to determine security associated with the analytics data, where security associated with the analytics data is based at least in part on commingled data used for determining the analytics data. The processor is also configured to determine permissions associated with the requestor, determine whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor, and in the event it is determined that the requestor is credentialed, provide the analytics data to the requestor. ## Claims ### Claim 1 A system for analytics security, comprising: an input interface configured to: receive a request for analytics data, wherein the request is associated with a requestor; and a processor configured to: determine the analytics data based at least in part on the request, wherein the analytics data comprises one or more results of an analytic calculation performed on commingled data, wherein the commingled data comprises tenant data shared by a tenant of a plurality of tenants and other tenant data shared by one or more other tenants of the plurality of tenants; determine security associated with the analytics data, wherein determining security associated with the analytics data comprises to: determine that a required security level of a data instance of the commingled data exceeds a maximum security level associated with the analytics data; and in response to determining that the required security level of the data instance of the commingled data exceeds the maximum security level associated with the analytics data, reset the maximum security level associated with the analytics data to the required security level of the data instance of the commingled data; determine permissions associated with the requestor based at least in part on the tenant of the plurality of tenants, wherein the tenant of the plurality of tenants is associated with the requestor; determine whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor; and in response to determining that the requestor is credentialed: provide the analytics data to the requestor. ### Claim 2 (depends on 1) The system of claim 1, wherein the commingled data has associated security information. ### Claim 3 (depends on 2) The system of claim 2, wherein the associated security information comprises a source data security level. ### Claim 4 (depends on 2) The system of claim 2, wherein the associated security information comprises an analytics security escalation setting. ### Claim 5 (depends on 4) The system of claim 4, wherein the analytics security escalation setting comprises a number of steps of a security hierarchy that make up a set of security levels. ### Claim 6 (depends on 1) The system of claim 1, wherein determining security associated with the analytics data comprises determining the required security level associated with the comingled data. ### Claim 7 (depends on 1) The system of claim 1, wherein determining security associated with the analytics data comprises determining a maximum required security level associated with a group of comingled data. ### Claim 8 (depends on 1) The system of claim 1, wherein permissions associated with the requestor are based at least in part on a requestor role. ### Claim 9 (depends on 1) The system of claim 1, wherein determining permissions associated with the requestor comprises determining a security level associated with the requestor. ### Claim 10 (depends on 1) The system of claim 1, wherein determining security associated with the analytics data comprises determining the maximum security level associated with the analytics data. ### Claim 11 (depends on 10) The system of claim 10, wherein the maximum security level associated with the analytics data is based at least in part on a required role associated with a data instance of the analytics data. ### Claim 12 (depends on 10) The system of claim 10, wherein the maximum security level associated with the analytics data is based at least in part on a tenant associated with a data instance of the analytics data. ### Claim 13 (depends on 1) The system of claim 1, wherein determining whether the requestor is credentialed comprises determining whether a security level associated with the requestor is greater than or equal to the maximum security level associated with the analytics data. ### Claim 14 (depends on 1) The system of claim 1, wherein the analytics data is determined such that it is accessible by the requestor. ### Claim 15 A method for analytics security, comprising: receiving a request for analytics data, wherein the request is associated with a requestor; determining the analytics data based at least in part on the request, wherein the analytics data comprises one or more results of an analytic calculation performed on commingled data, wherein the commingled data comprises tenant data shared by a tenant of a plurality of tenants and other tenant data shared by one or more other tenants of the plurality of tenants; determining, using a processor, security associated with the analytics data, wherein determining security associated with the analytics data comprises: determining that a required security level of a data instance of the commingled data exceeds a maximum security level associated with the analytics data; and in response to determining that the required security level of the data instance of the commingled data exceeds the maximum security level associated with the analytics data, resetting the maximum security level associated with the analytics data to the required security level of the data instance of the commingled data; determining permissions associated with the requestor based at least in part on the tenant of the plurality of tenants, wherein the tenant of the plurality of tenants is associated with the requestor; determining whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor; and in response to determining that the requestor is credentialed: providing the analytics data to the requestor. ### Claim 16 A computer program product for analytics security, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for: receiving a request for analytics data, wherein the request is associated with a requestor; determine the analytics data based at least in part on the request, wherein the analytics data comprises one or more results of an analytic calculation performed on commingled data, wherein the commingled data comprises tenant data shared by a tenant of a plurality of tenants and other tenant data shared by one or more other tenants of the plurality of tenants; determining security associated with the analytics data, wherein determining security associated with the analytics data comprises: determining that a required security level of a data instance of the commingled data exceeds a maximum security level associated with the analytics data; and in response to determining that the required security level of the data instance of the commingled data exceeds the maximum security level associated with the analytics data, resetting the maximum security level associated with the analytics data to the required security level of the data instance of the commingled data; determining permissions associated with the requestor based at least in part on the tenant of the plurality of tenants, wherein the tenant of the plurality of tenants is associated with the requestor; determining whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor; and in response to determining that the requestor is credentialed, providing the analytics data to the requestor. ### Claim 17 (depends on 1) The system of claim 1, wherein the maximum security level associated with the analytics data is reset from a required security level of another data instance of the commingled data. ### Claim 18 (depends on 1) The system of claim 1, wherein the processor is additionally configured to determine that the tenant is enabled to access analytics data, comprising determining that the tenant opts in to sharing the tenant data to the commingled data.