Distributed storage processing statement interception and modification

• US 10,594,737 B1
• Filed: 07/17/2018
• Issued: 03/17/2020
• Est. Priority Date: 01/08/2015
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: BlueTalon, Inc. (Microsoft Corporation)
• Inventors: Verma, Pratik, Khanduja, Rakesh
• Primary Examiner(s): Patel, Ashokkumar B
• Assistant Examiner(s): Farooqui, Quazi
• Application Number:
  US16/038,021
• Time in Patent Office: 609 Days
• Field of Search: 726 1, 726 4, 726 7, 713151, 713152, 713161
• CPC Class Codes: G06F 16/245 Query processing
• CPC Class Codes: G06F 16/24534 Query rewriting; Transformation
• CPC Class Codes: G06F 16/24537 of operators
• CPC Class Codes: G06F 16/24542 Plan optimisation
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A non-transitory computer readable storage medium has instructions executed by a processor to intercept a query statement at a master machine. The query statement is an instruction from a client machine that specifies how data managed by a distributed storage system should be processed and provided back to the client. In the communication between the client and the master machine, tokens associated with the statement are evaluated to selectively identify a pattern match of one of connection pattern tokens, login pattern tokens or query pattern tokens. For the query pattern tokens, altered tokens for the query statement are formed in response to the pattern match to establish a revised statement. The revised statement is produced in response to application of a policy rule. The revised statement maintains computation, logic and procedure of the statement, but alters parameters of the statement as specified by the policy rule.

Claims

1. A non-transitory computer readable storage medium with instructions executed by a processor to:

intercept a query statement at a master machine or a machine delegated to receive query statements sent to the master machine, wherein the query statement is a distributed storage and distributed processing statement from a client machine;

evaluate tokens associated with the query statement to selectively identify a pattern match, wherein the tokens are evaluated to selectively identify a pattern match of connection pattern tokens, login pattern tokens and query pattern tokens; and

form altered tokens for the query statement in response to the pattern match to form a revised query statement, wherein the revised query statement is produced in response to application of a policy rule, wherein the revised query statement maintains computation, logic and procedure of the query statement, but alters parameters of the query statement as specified by the policy rule.

2. The non-transitory computer readable storage medium of claim 1 further comprising instructions executed by the processor to:

process the query statement at the master machine to devise a query plan;

deploy the query plan to a plurality of worker machines;

combine results from the plurality of worker machines to produce a response; and

supply the response to the client machine.

3. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to alter Uniform Resource Indicator (URI) parameters.

4. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to alter folder or file path parameters.

5. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to alter query source parameters.

6. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to alter login parameters.

7. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to alter data connection parameters.

8. The non-transitory computer readable storage medium of claim 1 wherein the instructions executed by the processor include instructions to add additional parameters in the query statement to water-mark alterations.