# US 12,111,947 B2 · Multi-zone secure artificial intelligence exchange and hub

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,111,947 B2
- Document ID: US12111947B2
- Status: Granted
- Kind: B2
- Application number: 18/175,090
- Filed: 2023-02-27
- Published: 2023-07-13
- Granted: 2024-10-08
- Earliest claimed: 2019-11-15
- Assignees: Equinix, Inc.
- Applicants: Equinix, Inc.
- Inventors: Guido Franciscus Wilhelmus Coenders; Kaladhar Voruganti; Vijaay Doraiswamy; Purvish Purohit; Mahendra Malviya
- Web page: https://patentgrep.com/patent/US12111947B2

## CPC

- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- G06Q 10/06315: {Needs-based resource requirements planning or analysis}
- G06Q 20/1235: {with control of digital rights management [DRM]}
- G06Q 30/0609: {Qualifying participants for shopping transactions (payment transaction verification G06Q20/401)}
- H04L 63/0218: {Distributed architectures, e.g. distributed firewalls}
- H04L 63/102: {Entity profiles}
- H04L 63/105: {Multiple levels of security}
- H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

In general, this disclosure describes a multi-zone secure AI exchange. The multi-zone secure AI exchange may be implemented in a multi-cloud, multi-data center environment, where each zone may be in a different cloud or data center. The multi-zone secure AI exchange may include a data repository, a data exchange, and shared services. The data repository may be configured to store algorithms and datasets, each having a respective owning user. The data exchange may receive datasets and algorithms from the data repository, and may perform the algorithms to produce output data. Each of the data repository, data exchange, and shared services may have a different level of security. The data repository may implement the highest level of security, allowing the owner user, and only the owning user, to control how their data and algorithms move in and out of the data repository, or are changed while in the data repository.

## Claims

### Claim 1

A data exchange comprising:
one or more processors; and
a computer-readable medium having instructions that, when executed, cause the one or more processors to:
receive, in response to a command issued by an application associated with a first set of security parameters, one or more of a plurality of datasets and one or more of a plurality of algorithms from a data repository, the data repository configured to store the plurality of datasets and the plurality of algorithms, each of the plurality of datasets associated with a corresponding dataset owner and each of the plurality of algorithms associated with a corresponding algorithm owner, the data repository associated with a second set of security parameters,
selectively allow access to the one or more of the plurality of datasets by the one or more of the plurality of algorithms in accordance with the first set of one or more security parameters, and
selectively allow access to result data produced by the one or more of the plurality of algorithms in accordance with the first set of one or more security parameters;
wherein the data exchange is associated with a third set of one or more security parameters.

### Claim 2 (depends on 1)

The data exchange of claim 1, wherein the third set of one or more security parameters associated with the data exchange are configured to provide a higher level of security than the first set of one or more security parameters associated with the application, and a lower level of security than the second set of one or more security parameters associated with the data repository.

### Claim 3 (depends on 1)

The data exchange of claim 1, wherein the second set of one or more security parameters associated with the data repository are configured to restrict access to each of the plurality of datasets to the corresponding dataset owner and each of the plurality of algorithms to the corresponding algorithm owner.

### Claim 4 (depends on 1)

The data exchange of claim 1, wherein the third set of one or more security parameters associated with the data exchange are configured to allow access to the corresponding dataset owner of the one or more of the plurality of datasets and the corresponding algorithm owner of the one or more of the plurality of algorithms, and a user granted access by the corresponding dataset owner or the corresponding algorithm owner.

### Claim 5 (depends on 1)

The data exchange of claim 1, wherein the first set of one or more security parameters associated with the application are configured to allow access to the application by one or more members of the data exchange, the one or more members including the corresponding dataset owner and the corresponding algorithm owner.

### Claim 6 (depends on 1)

The data exchange of claim 1, wherein the third set of one or more security parameters are configured to allow an algorithm owned by a first user to read a dataset owned by a second user without allowing the first user to access the dataset and without allowing the second user to access the algorithm.

### Claim 7 (depends on 6)

The data exchange of claim 6, wherein the third set of one or more security parameters are configured to allow a third user to access results of performing the algorithm using the dataset without allowing the third user to otherwise access the algorithm and the dataset.

### Claim 8 (depends on 1)

The data exchange of claim 1, wherein the one or more of a plurality of algorithms comprise an algorithm owned by a first user, wherein the one or more of a plurality of datasets comprise a dataset owned by a second user, wherein selectively allowing access comprises allowing access to a requesting user, and wherein the instructions further cause the one or more processors to generate the result data by performing the algorithm owned by the first user using the dataset owned by the second user as input.

### Claim 9 (depends on 8)

The data exchange of claim 8, wherein the instructions further cause the one or more processors to remove the algorithm owned by the first user and the dataset owned by the second user from the data exchange.

### Claim 10 (depends on 8)

The data exchange of claim 8, wherein the instructions further cause the one or more processors to configure a fourth set of security parameters for the data exchange to allow the requesting user to access the result data and to disallow access by the requesting user to the algorithm owned by the first user and the dataset owned by the second user.

### Claim 11 (depends on 8)

The data exchange of claim 8, wherein making the result data available for use by the requesting user comprises copying the result data to a system configured as a demilitarized zone.