Data leakage detection in a multi-tenant data architecture

• US 8,850,596 B2
• Filed: 11/08/2012
• Issued: 09/30/2014
• Est. Priority Date: 11/08/2012
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Ramakrishnan, Chandru
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): BAYOU, YONAS A
• Application Number:
  US13/671,888
• Publication Number:
  US 20140130175A1
• Time in Patent Office: 691 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 16/20 of structured data, e.g. relational data
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

Embodiments relate to a process for identifying data leakage in a data storage system. A table is created with multiple units. Each unit in the table has a unique identifier as a leading key in a schema. Two partitions are set in the table, and one of the partitions is set as unavailable. One or more queries are run on the table. Any queries that attempt to access the unavailable partition are identified through an error message or other alert.

Claims

1. A computer-implemented method, comprising:

creating, by a data storage system, a table having multiple units, each unit having a unique identifier as a leading key in a schema;

setting, by the data storage system, two or more partitions in the table;

setting, by the data storage system, a selected partition as unavailable;

running, by the data storage system, one or more queries on the table;

identifying, by the data storage system, any queries that attempt to access the unavailable partition, and

detecting, by the data storage system, data leakage based upon the identifying.

2. The computer-implemented method of claim 1, further comprising:

receiving, by the data storage system, an error message triggered by an attempt to access an unavailable partition; and

identifying, by the data storage system, a query that triggered the error message.

3. The computer-implemented method of claim 2, further comprising:

modifying, by the data storage system, the query that triggered the error message by adding an identifier predicate to the query.

4. The computer-implemented method of claim 1, wherein the unique identifier is used as a partition identifier to separate data belonging to individual users.

5. The computer-implemented method of claim 4, wherein any of the partitions may be set as unavailable.

6. The computer-implemented method of claim 1, wherein the unavailable partition is set as offline.

7. The computer-implemented method of claim 1, further comprising:

horizontally partitioning, by the data storage system, the table into multiple partitions representing individual users.

8. The computer-implemented method of claim 1, wherein the data storage system is a hosted multi-tenant data storage system having horizontal partitions that separate tenant data, and wherein queries use an identifier predicate limit access to a specific tenant'"'"'s data.

9. A computer system, comprising:

one or more processors; and

a memory coupled to the one or more processors, the memory having stored thereon computer-executable instructions that, upon execution by the one or more processors, cause the computer system to;

create a table having multiple units, each unit having a unique identifier as a leading key in a schema;

set two or more partitions in the table;

set one of the partitions as offline;

run one or more queries on the table;

identify any queries that attempt to access the offline partition; and

detect data leakage based upon the identification.

10. The computer system of claim 9, wherein the computer-executable instructions, upon execution by the one or more processors, further cause the computer system to:

receive an error message triggered by an attempt to access an offline partition; and

identify a query that triggered the error message.

11. The computer system of claim 10, wherein the computer-executable instructions, upon execution by the one or more processors, further cause the computer system to:

modify the query that triggered the error message by adding an identifier predicate to the query.

12. The computer system of claim 9, wherein the unique identifier is used as a partition identifier to separate data belonging to individual users.

13. The computer system of claim 12, wherein any of the partitions may be set as unavailable.

14. The computer system of claim 9, wherein the unavailable partition is set as offline.

15. The computer system of claim 9, wherein the computer-executable instructions, upon execution by the one or more processors, further cause the computer system to:

horizontally partition the table into multiple partitions representing individual users.

16. A computer-readable storage device having computer-executable instructions stored thereon that, upon execution by at least one processor of a computer system, cause the computer system to:

create a table having multiple units, each unit having a unique identifier as a leading key in a schema;

set two or more partitions in the table;

set a selected partition as unavailable;

run one or more queries on the table;

identify any queries that attempt to access the unavailable partition; and

detect data leakage based upon the identification.

17. The computer-readable storage device of claim 16, wherein the computer-executable instructions, upon execution by the at least one processor, further cause the computer system to:

receive an error message triggered by an attempt to access an unavailable partition; and

identify a query that triggered the error message.

18. The computer-readable storage device of claim 17, wherein the computer-executable instructions, upon execution by the at least one processor, further cause the computer system to:

modify the query that triggered the error message by adding an identifier predicate to the query.

19. The computer-readable storage device of claim 16, wherein the unique identifier is used as a partition identifier to separate data belonging to individual users.

20. The computer-readable storage device of claim 19, wherein the first partition is set as unavailable.