Entitled data cache management

• US 9,043,881 B2
• Filed: 02/08/2013
• Issued: 05/26/2015
• Est. Priority Date: 10/20/2009
• Status: Active Grant

• Current Assignee: Refinitiv US Organization, LLC (Refinitiv US Holdings, Inc.)
• Original Assignee: Thomson Reuters Incorporated (The Woodbridge Co. Ltd.)
• Inventors: Krishnamoorthy, Venkatanarayanan, Varadrajan, Srinivasan, Zucknovich, Stephen, Leisy, Jacques, Jornitski, Vladimir
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US13/762,604
• Publication Number:
  US 20130152172A1
• Time in Patent Office: 837 Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

Systems and methods are disclosed for managing an entitled data cache. A data server may generate and send entitled data to a data cache server. The data cache server, a server that may be located nearer to the user within a data provider'"'"'s computer network, may receive and cache the entitled data. A permission server may store user'"'"'s permissions and transmit the user'"'"'s permissions to the data server and the data cache server. Upon receiving a request for data, the data cache server may retrieve the requested data from the cache and send a subset of the cached data which matches the user'"'"'s permissions to the user, without the need to request the data from the data server.

Claims

1. An apparatus, comprising:

one or more processors; and

memory storing executable instructions that, when executed by the one or more processors, cause the apparatus to;

receive entitled data from a data server, wherein the entitled data has been assigned a plurality of data permissions that represent one or more permissions a requesting user must be assigned in order to access at least a portion of the entitled data;

store entitled data and cache signature corresponding to the entitled data;

receive a first data request for the entitled data from a first user;

identify the cache signature based on a hashing of the first data request;

retrieve user permissions corresponding to the first user;

identify a first user permission intersection between the user permissions corresponding to the first user and the data permissions;

retrieve, using the cache signature, a first set of the entitled data in accordance with the first user permissions intersection;

transmit the first set of the entitled data as a response to the first data request for the entitled data;

receive a second data request for the entitled data from a second user;

identify the cache signature based on a hashing of the second data request;

retrieve user permissions corresponding to the second user;

identify a second user permission intersection between the user permissions corresponding to the second user and the data permissions;

retrieve, using the cache signature, a second set of the entitled data in accordance with the second user permission intersection; and

transmit the second set of the entitled data as a response to the second data request for the entitled data.

2. The apparatus of claim 1, wherein the memory further stores executable instructions that, when executed by the one or more processors, cause the apparatus to:

determine whether the entitled data is expired prior to responding to the first data request for the entitled data; and

determine whether the entitled data is expired prior to responding to the second data request for the entitled data.

3. The apparatus of claim 1, wherein the memory further stores executable instructions that, when executed by the one or more processors, cause the apparatus to:

subscribe to an update service that provides notifications to computing device when the entitled data needs to be updated.

4. The apparatus of claim 2, wherein the memory further stores executable instructions that, when executed by the one or more processors, cause the apparatus to:

receive an update to the entitled data prior to expiration of the entitled data.

5. The apparatus of claim 1, wherein the memory further stores executable instructions that, when executed by the one or more processors, cause the apparatus to:

receive a third data request for the entitled data from the first user; and

transmit a third set of the entitled data as a response to the third data request for the entitled data, wherein the third set of the entitled data is different from the first set of the entitled data in accordance with a change in the user permissions corresponding to the first user.

6. The apparatus of claim 1, wherein the memory further stores executable instructions that, when executed by the one or more processors, cause the apparatus to:

receive an update notification that includes an identification of one or more data domains that need to be updated, wherein the entitled data is assigned to at least one of the one or more data domains; and

request an update to the entitled data responsive to the update notification.

7. A method comprising:

receiving, by a computing device, entitled data from a data server, wherein the entitled data has been assigned data permissions that represent one or more permissions a requesting user must be assigned in order to access at least a portion of the entitled data;

store the entitled data and a cache signature corresponding to the entitled data;

receiving a first data request for the entitled data from a first user;

identifying the cache signature based on a hashing of the first data request;

retrieving user permissions corresponding to the first user;

identifying a first user permission intersection between the user permissions corresponding to the first user and the data permissions;

retrieving, using the cache signature, a first set of the entitled data in accordance with the first user permission intersection;

transmitting the first set of the entitled data as a response to the first data request for the entitled data;

receiving a second data request for the entitled data from a second user;

identifying the cache signature based on a hashing of the second data request;

retrieving user permissions corresponding to the second user;

identifying a second user permission intersection between the user permissions corresponding to the second user and the data permissions;

retrieving, using the cache signature, a second set of the entitled data in accordance with the second user permission intersection; and

transmitting the second set of the entitled data as a response to the second data request for the entitled data.

8. The method of claim 7, further comprising:

determining whether the entitled data is expired prior to responding to the first data request for the entitled data; and

determine whether the entitled data is expired prior to responding to the second data request for the entitled data.

9. The method of claim 7, further comprising:

subscribing to service that provides update notifications;

receiving asynchronous update notifications for the entitled data; and

updating the entitled data responsive to the update notification.

10. The method of claim 7, wherein the hashing of the first data request results in the cache signature.

11. The method of claim 7, further comprising:

requesting and receiving the user permissions from a permission server.

12. The method of claim 7, further comprising:

receiving a third data request for the entitled data from the first user,

determining the user permissions corresponding to the first user have changed subsequent to receiving the first data request; and

transmitting a third set of the entitled data as a response to the third data request for the entitled data, wherein the third set of the entitled data is different from the first set of the entitled data.

13. The method of claim 7, further comprising:

storing, with the entitled data, an entitlement token corresponding to the data permissions.

14. The method of claim 13, wherein the entitlement token corresponds to the data permissions and is assigned to a grouping of users, wherein each user in the grouping of users is allowed access to data subject to the data permissions.

15. The method of claim 7, further comprising:

receiving a single notification that notifies the computing device of an update to multiple data domains arranged in a hierarchy, wherein the entitled data is assigned to at least one of the multiple data domains.

16. The method of claim 7, further comprising:

receiving an update notification that includes an identification of one or more data domains that need to be updated, wherein the entitled data is assigned to at least one of the one or more data domains; and

requesting an update to the entitled data responsive to the update notification.

17. One or more non-transitory computer-readable media storing executable instructions configured to, when executed, cause an apparatus to:

receive entitled data from a data server, wherein the entitled data has been assigned data permissions that represent one or more permissions a requesting user must be assigned in order to access at least a portion of the entitled data;

store entitled data and a cache signature corresponding to the entitled data;

receive a first data request for the entitled data from a first user;

identify the cache signature based on a hashing of the first data request;

receive user permissions corresponding to the first user;

identify a first user permission intersection between the user permissions corresponding to the first user and the data permissions;

retrieve, using the cache signature, a first set of the entitled data in accordance with the first user permission intersection;

transmit the first set of the entitled data as a response to the first data request for the entitled data;

receive a second data request for the entitled data from a second user;

identify the cache signature based on a hashing of the second data request;

retrieve user permissions corresponding to the second user;

identify a second user permission intersection between the user permissions corresponding to the second user and the data permissions;

retrieve, using the cache signature, a second set of the entitled data in accordance with the second user permission intersection; and

transmit the second set of the entitled data as a response to the second data request for the entitled data.

18. The one or more non-transitory computer-readable media of claim 17, further storing executable instructions that, when executed, cause the apparatus to:

receive an update notification that includes an identification of one or more data domains that need to be updated, wherein the entitled data is assigned to at least one of the one or more data domains; and

request an update to the entitled data responsive to the update notification.

19. A method, comprising:

receiving entitled data from a data server, wherein the entitled data has been assigned data permissions that represent one or more permissions a requesting user must be assigned in order to access at least a portion of the entitled data;

storing the entitled data and cache signature that corresponds to the entitled data;

receiving a plurality of requests for the entitled data;

processing each of the plurality of requests by at least hashing each of the plurality of requests, wherein each processing results in the cache signature; and

responding to each of the plurality of requests with a transmission of a different data set, resulting in the transmission of a plurality of data sets, wherein each of the plurality of data sets is different from other data sets in the plurality of data sets, and each data set being in accordance with an intersection of user permissions and the data permissions.

20. The method of claim 19, further comprising:

receiving an update notification that includes an identification of one or more data domains that need to be updated, wherein the entitled data is assigned to at least one of the one or more data domains; and

requesting an update to the entitled data responsive to the update notification.