US 11,899,685 B1Granted

Dividing authorization between a control plane and a data plane for sharing database data

AssigneeAmazon Technologies, Inc.

InventorsIppokratis Pandis, Jingyi Qing, Dengfeng Li, Pavel Sokolov, Eric Ray Hotinger, Mohammad Foyzur Rahman, William Michael McCreedy, Wenchuan An, Vivek Ramamoorthy, Chenqin Xu, Maximiliano Maccanti

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Authorization is divided between a control plane and a data plane for sharing database data. A producer database engine can create a shared database via a data plane interface. A producer can then authorize access to the shared database via a control plane interface to a consumer. A consumer can associate the authorization granted to the consumer with a consumer database engine via the control plane interface.

Claims20

Dependent claims

A system, comprising:

one or more computing devices, respectively comprising a processor and a memory, that implement a control plane for a database service, wherein the control plane is configured to:
authorize a database to be shared with a consumer database engine to perform queries to the database received at the consumer database engine via an interface of a data plane, wherein to authorize the database to be shared, the control plane is configured to:
perform a request from a producer database engine for the database in the database service to propose authorization of the database to be shared with a consumer;
perform a request received via a control plane interface to confirm the authorization of the database to be shared with the consumer, wherein the request provides the confirmation of the authorization of the database;
and
perform a request received via the control plane interface to associate the consumer database engine in the data plane with the consumer to provide the consumer database engine with the authorization to access the database.

3 more elements

A method, comprising:

authorizing, by a control plane of a database service, a database to be shared with a consumer database engine to perform queries to the database received at the consumer database engine via an interface of a data plane, comprising:
performing a request from a producer database engine for the database in the database service to propose authorization of the database to be shared with a consumer;
performing a request received via an interface of the control plane of the database service to confirm the authorization of the database to be shared with the consumer, wherein the request provides the confirmation of the authorization of the database;
and
performing a request received via the interface of the control plane to associate the consumer database engine in the data plane with the consumer to provide the consumer database engine with the authorization to access the database.

2 more elements

One or more non-transitory, computer-readable storage media, storing program instructions that when executed on or across one or more computing devices cause the one or more computing devices to implement a control plane for a database service that implements:

authorizing a database to be shared with a consumer database engine to perform queries to the database received a data plane interface, wherein the program instructions cause the control plane to implement:
performing a request from a producer database engine for the database in the database service to propose authorization of the database to be shared with a consumer;
performing a request received via a control plane interface to confirm the authorization of the database to be shared with the consumer, wherein the request provides the confirmation of the authorization of the database;
and
performing a request received via the control plane interface to associate the consumer database engine in the data plane with the consumer to provide the consumer database engine with the authorization to access the database.

2 more elements

Dependencies are inferred from the claim text.