Accessing data via a transformer module that adds security-specific annotations to a query
AssigneeUniversitá della Svizzera italiana (USI)
InventorsShamiek Mangipudi, Pavel Chuprikov, Patrick Eugster
Life of this patent
Estimating the term…
Abstract
In a computer system with multiple physical computers at different physical locations, a transformer module receives an original query from a client-side computer, analyzes the query statements and annotates the query. The transformer module forwards the annotated query to server-computers. This approach allows a data-analyst 190-ALPHA to use a query that is relatively simple, wherein a data-analyst 190-BETA who does not benefit from the transformer module would have to write a more complex query.
Claims20
Computer-implemented method for processing data being stored on server-computers in a data-center, the method comprising:
- by a transformer module, receiving an original query from a client-side computer, wherein the original query comprises query statements that are:
- (i) first and second data statements that identify the data to be accessed, and
- (ii) an operation statement that identifies an operation to be performed with the data;
- by the transformer module and according to a pre-defined security policy, analyzing the first and second data statements of the original query to identify a corresponding encryption mechanism for the data to be accessed, and analyzing the operation statement to identify a corresponding processing mechanism;
- by the transformer module, annotating the original query by pre-defined annotations that identify both the corresponding encryption mechanism and the corresponding processing mechanism, to obtain an annotated query;
- and
- by the transformer module, forwarding the annotated query to a server-computer in the data-center.
A computer program product for processing data being stored on server-computers in a data-center, the computer program product being tangibly embodied on a non-transitory computer-readable storage medium and comprising instructions that, when executed by at least one computing device, are configured to cause the at least one computing device to:
- by a transformer module, receive an original query from a client-side computer, wherein the original query comprises query statements that are:
- (i) first and second data statements that identify the data to be accessed, and
- (ii) an operation statement that identifies an operation to be performed with the data;
- by the transformer module and according to a pre-defined security policy, analyze the first and second data statements of the original query to identify a corresponding encryption mechanism for the data to be accessed, and analyzing the operation statement to identify a corresponding processing mechanism;
- by the transformer module, annotate the original query by pre-defined annotations that identify both the corresponding encryption mechanism and the corresponding processing mechanism to obtain an annotated query;
- and
- by the transformer module, forward the annotated query to a server-computer in the data-center.
A system for processing data being stored on server-computers in a data-center, the system comprising:
- at least one memory including instructions;
- and at least one processor that is operably coupled to the at least one memory and that is arranged and configured to execute instructions that, when executed, cause the at least one processor to:
- by a transformer module, receive an original query from a client-side computer, wherein the original query comprises query statements that are:
- (i) first and second data statements that identify the data to be accessed, and
- (ii) an operation statement that identifies an operation to be performed with the data;
- by the transformer module and according to a pre-defined security policy, analyze the first and second data statements of the original query to identify a corresponding encryption mechanism for the data to be accessed, and analyze the operation statement to identify a corresponding processing mechanism;
- by the transformer module, annotate the original query by pre-defined annotations that identify both the corresponding encryption mechanism and the corresponding processing mechanism to obtain an annotated query;
- and
- by the transformer module, forward the annotated query to a server-computer in the data-center.
Dependencies are inferred from the claim text.