Processing per-use requests for user data
AssigneeUserClouds, Inc.
InventorsVladimir Fedorov, Stephen Garrity, Ramanujan Srinivasan
Life of this patent
Estimating the term…
Abstract
Processing per-use requests for user data is disclosed, including: receiving a use-specific request to read a set of user data; determining whether to grant the use-specific request based at least in part on an access policy associated with an accessor definition associated with the use-specific request; and in response to a determination to grant the use-specific request, transforming the set of user data based at least in part on the accessor definition.
Claims20
A system, comprising:
- a memory;
- and
- a processor coupled to the memory and configured to:
- receive a use-specific request to read a set of user data;
- determine whether to grant the use-specific request based at least in part on an access policy associated with an accessor definition associated with the use-specific request, including to:
- determine the accessor definition that is invoked by the use-specific request;
- determine the access policy associated with the accessor definition;
- and
- determine whether a specified use in the use-specific request matches a specified permitted use in the access policy;
- and
- in response to a determination to grant the use-specific request:
- read the set of user data from a column of a user data table that is specified in the accessor definition;
- and
- transform the set of user data based at least in part on the accessor definition.
A method, comprising:
- receiving a use-specific request to read a set of user data;
- determining whether to grant the use-specific request based at least in part on an access policy associated with an accessor definition associated with the use-specific request, including:
- determining the accessor definition that is invoked by the use-specific request;
- determining the access policy associated with the accessor definition;
- and
- determining whether a specified use in the use-specific request matches a specified permitted use in the access policy;
- and
- in response to a determination to grant the use-specific request:
- reading the set of user data from a column of a user data table that is specified in the accessor definition;
- and
- transforming the set of user data based at least in part on the accessor definition.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium comprising computer instructions for:
- receiving a use-specific request to read a set of user data;
- determining whether to grant the use-specific request based at least in part on an access policy associated with an accessor definition associated with the use-specific request, including:
- determining the accessor definition that is invoked by the use-specific request;
- determining the access policy associated with the accessor definition;
- and
- determining whether a specified use in the use-specific request matches a specified permitted use in the access policy;
- and
- in response to a determination to grant the use-specific request:
- reading the set of user data from a column of a user data table that is specified in the accessor definition;
- and
- transforming the set of user data based at least in part on the accessor definition.
Dependencies are inferred from the claim text.