Systems, methods, and apparatuses for implementing cross organizational data sharing

• US 9,185,078 B2
• Filed: 12/18/2013
• Issued: 11/10/2015
• Est. Priority Date: 12/18/2012
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Wong, Simon Y., Tsyganskiy, Igor, Calahan, Patrick John, Hersans, Alexandre
• Primary Examiner(s): Lee, Jason
• Application Number:
  US14/133,592
• Publication Number:
  US 20140173702A1
• Time in Patent Office: 692 Days
• Field of Search: 726/4, 709/201, 709/203, 709/246, 709/248
• US Class Current: 1/1
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In accordance with disclosed embodiments, there are provided methods, systems, and apparatuses for implementing cross organizational data sharing including, for example, means for storing customer organization data in a database of the host organization; allocating at least a sub-set of the customer organization data to be shared as shared data; configuring a hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data; configuring one or more spokes with access rights to the shared data of the hub via the proxy user; receiving a request from one of the hubs for access to the shared data of the customer organization via the proxy user at the hub; and returning a response to the hub having made the request. Other related embodiments are disclosed.

Claims

1. A method in a host organization having at least a processor and a memory therein, wherein the method comprises:

storing customer organization data in a database of the host organization;

allocating at least a sub-set of the customer organization data to be shared as shared data via one or more queryable objects stored at the database of the host organization;

configuring a hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data, wherein the proxy user at the hub is configured to query the one or more queryable objects stored at the database without replicating the one or more queryable objects by configuring each of the one or more spokes with a queryable proxy object void of the shared data;

wherein the queryable proxy object is configured to proxy any received query to a corresponding proxy user at the hub and further wherein the corresponding proxy user at the hub is configured to query the one or more queryable objects stored at the database responsive to the proxied query from the spoke;

configuring one or more spokes with access rights to the shared data of the hub via the proxy user;

receiving a request from one of the hubs for access to the shared data of the customer organization via the proxy user at the hub; and

returning a response to the hub having made the request.

2. The method of claim 1, wherein configuring the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the proxy with access rights to the customer organization data stored in the database of the host organization without replicating the exposed shared data.

3. The method of claim 1, wherein configuring the hub to expose the shared data to a proxy user comprises allocating the shared data to an object at the hub and configuring the proxy user with access rights to the object.

4. The method of claim 1, wherein configuring a hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the proxy user with one or more of the following access rights to the shared data:

read-only access to the shared data;

write, update, and modify access to the shared data;

delete capability of database records within the shared data;

create and record insertion capability to introduce new database records into the shared data.

5. The method of claim 1, wherein configuring the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the hub as a broadcast hub, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data and no capability to update, modify, insert, or delete database records within the shared data.

6. The method of claim 1, wherein configuring the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the hub with selective write-back capability, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data via the one or more queryable proxy objects and no capability to update, modify, insert, or delete database records within the first queryable object and further wherein a second queryable object is exposed to the one or more spokes with create and record insertion capability to introduce new database records into the shared data via the second queryable object.

7. The method of claim 1, wherein returning the response to the hub having made the request comprises:

querying the shared data stored in the database of the host organization via the proxy user at the hub; and

returning query results to the spoke having initiated the request responsive to the request.

8. The method of claim 1, further comprising:

storing the configuration of the hub, the configuration of the one or more spokes, and the configuration of the proxy user and its access rights to the shared data via a proxy schema.

9. The method of claim 8, further comprising:

packaging and deploying the proxy schema into a live production environment; and

installing the hub and the one or more spokes within the live production environment according to the stored configuration of the hub, the stored configuration of the one or more spokes, and the stored configuration of the proxy user and its access rights to the shared data as represented by the packaged and deployed proxy schema.

10. The method of claim 1,

wherein allocating at least the sub-set of the customer organization data to be shared as shared data comprises at least one of:

sharing one or more database tables as the shared data;

sharing a plurality of database records as the shared data;

sharing access to one or more database fields as the shared data;

sharing access to one or more queryable database objects as the shared data; and

sharing access to executable code, reports, or user interfaces as the shared data.

11. The method of claim 1:

wherein a user interface operates at a user client device remote from the host organization and communicatively interfaces with the host organization via a public Internet;

wherein the host organization operates as a cloud based service provider to the user client device; and

wherein the request is received at the host organization from the user client device.

12. The method of claim 11:

wherein the database of the host organization comprises a multi-tenant database system having elements of hardware and software that are shared by a plurality of separate and distinct customer organizations, each of the separate and distinct customer organizations being remotely located from the host organization; and

wherein each customer organization is an entity selected from the group consisting of;

a separate and distinct remote organization, an organizational group within the host organization, a business partner of the host organization, or a customer organization that subscribes to cloud computing services provided by the host organization.

13. Non-transitory computer readable storage media having instructions stored thereon that, when executed by a processor in a host organization, the instructions cause the host organization to perform operations comprising:

storing customer organization data in a database of the host organization;

allocating at least a sub-set of the customer organization data to be shared as shared data via one or more queryable objects stored at the database of the host organization;

configuring a hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data, wherein the proxy user at the hub is configured to query the one or more queryable objects stored at the database without replicating the one or more queryable objects by configuring each of the one or more spokes with a queryable proxy object void of the shared data;

wherein the queryable proxy object is configured to proxy any received query to a corresponding proxy user at the hub and further wherein the corresponding proxy user at the hub is configured to query the one or more queryable objects stored at the database responsive to the proxied query from the spoke;

configuring one or more spokes with access rights to the shared data of the hub via the proxy user;

receiving a request from one of the hubs for access to the shared data of the customer organization via the proxy user at the hub; and

returning a response to the hub having made the request.

14. The non-transitory computer readable storage media of claim 13, wherein configuring a hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the proxy user with one or more of the following access rights to the shared data:

read-only access to the shared data;

write, update, and modify access to the shared data;

delete capability of database records within the shared data;

create and record insertion capability to introduce new database records into the shared data.

15. The non-transitory computer readable storage media of claim 13, wherein configuring the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the hub with selective write-back capability, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data via the one or more queryable proxy objects and no capability to update, modify, insert, or delete database records within the first queryable object and further wherein a second queryable object is exposed to the one or more spokes with create and record insertion capability to introduce new database records into the shared data via the second queryable object.

22. The non-transitory computer readable storage media of claim 13, wherein configuring the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises configuring the hub as a broadcast hub, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data and no capability to update, modify, insert, or delete database records within the shared data.

23. The non-transitory computer readable storage media of claim 13, wherein the instructions cause the host organization to perform operations further comprising:

storing the configuration of the hub, the configuration of the one or more spokes, and the configuration of the proxy user and its access rights to the shared data via a proxy schema;

packaging and deploying the proxy schema into a live production environment; and

installing the hub and the one or more spokes within the live production environment according to the stored configuration of the hub, the stored configuration of the one or more spokes, and the stored configuration of the proxy user and its access rights to the shared data as represented by the packaged and deployed proxy schema.

16. A system comprising:

a processor and a memory to execute instructions at the system;

a database to store customer organization data;

a sharing configurator to allocate at least a sub-set of the customer organization data to be shared as shared data via one or more queryable objects stored at the database of the host organization;

the sharing configurator to configure a hub to expose the shared data to a proxy user and to further configure the proxy user at the hub with access rights to the shared data, wherein the proxy user at the hub is configured to query the one or more queryable objects stored at the database without replicating the one or more queryable objects by configuring each of the one or more spokes with a queryable proxy object void of the shared data;

wherein the queryable proxy object is configured to proxy any received query to a corresponding proxy user at the hub and further wherein the corresponding proxy user at the hub is configured to query the one or more queryable objects stored at the database responsive to the proxied query from the spoke;

the sharing configurator to configure one or more spokes with access rights to the shared data of the hub via the proxy user;

a request interface to receive a request from one of the hubs for access to the shared data of the customer organization via the proxy user at the hub; and

the request interface to return a response to the hub having made the request.

17. The system of claim 16:

wherein a user interface operates at a user client device remote from the system and communicatively interfaces with the system via a public Internet;

wherein the system operates at a host organization as a cloud based service provider to the user client device.

18. The system of claim 16:

wherein the database comprises a multi-tenant database system having elements of hardware and software that are shared by a plurality of separate and distinct customer organizations, each of the separate and distinct customer organizations being remotely located from the host organization; and

wherein each customer organization is an entity selected from the group consisting of;

a separate and distinct remote organization, an organizational group within the host organization, a business partner of the host organization, or a customer organization that subscribes to cloud computing services provided by the host organization.

19. The system of claim 16, further comprising:

a schema generator to record the configuration of the hub, the configuration of the one or more spokes, and the configuration of the proxy user and its access rights to the shared data via a proxy schema; and

an installer to package and deploy the proxy schema into a live production environment, wherein the installer is to install the hub and the one or more spokes within the live production environment according to the stored configuration of the hub, the stored configuration of the one or more spokes, and the stored configuration of the proxy user and its access rights to the shared data as recorded by the packaged and deployed proxy schema.

20. The system of claim 16, wherein the sharing configurator to configure the hub to expose the shared data to a proxy user and to further configure the proxy user at the hub with access rights to the shared data comprises the sharing configurator to configure the hub as a broadcast hub, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data and no capability to update, modify, insert, or delete database records within the shared data.

21. The system of claim 16, wherein the sharing configurator to configure the hub to expose the shared data to a proxy user and configuring the proxy user at the hub with access rights to the shared data comprises the sharing configurator to configure the hub with selective write-back capability, wherein the shared data is exposed to the one or more spokes with read-only access for the shared data via the one or more queryable proxy objects and no capability to update, modify, insert, or delete database records within the first queryable object and further wherein a second queryable object is exposed to the one or more spokes with create and record insertion capability to introduce new database records into the shared data via the second queryable object.