Selective data transformation and access for secure cloud analytics

• US 9,454,671 B2
• Filed: 05/13/2014
• Issued: 09/27/2016
• Est. Priority Date: 07/05/2013
• Status: Active Grant

• Current Assignee: Bending Spoons SpA
• Original Assignee: Evernote Corp. (Bending Spoons SpA)
• Inventors: Engberg, David, Constantinou, Phil
• Primary Examiner(s): Boccio, Vincent
• Application Number:
  US14/276,350
• Publication Number:
  US 20150012565A1
• Time in Patent Office: 868 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/25 Integrating or interfacing systems involving database management systems
• CPC Class Codes: G06F 16/258 Data format conversion from or to a database
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Providing analytics information from a cloud service includes maintaining an analytics database that is separate from data and servers accessed by users of the cloud service, selectively pushing information from the cloud service to the analytics database, where data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database, and allowing users limited access to the analytics database, where users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service. The analytics database may include a first database of adapted database records and a second database of dynamic logs of service related events. The adapted database records may be initially formed using the data and servers accessed by users of the cloud service prior to being pushed to the analytics database.

Claims

1. A method of providing analytics information from a cloud service, comprising:

maintaining an analytics database that is separate from data and servers accessed by users of the cloud service;

forming adapted database records by filtering out sensitive information from the data on the servers of the cloud service;

selectively pushing the adapted database records from the cloud service to the analytics database, wherein data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database; and

allowing users limited access to the analytics database, wherein users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service to prevent access to the sensitive information.

2. A method, according to claim 1, wherein the analytics database includes a first database of the adapted database records and a second database of dynamic logs of service related events.

3. A method, according to claim 2, wherein the service related events include data corresponding to at least one of:

synchronization, clipping from web pages, clipping from documents, emailing, typing, drawing, data formatting and deletion, storage optimization, image processing, image recognition, image indexing, other activities performed on servers of the cloud service and interactions with data capturing tools of a service, content sharing via email and other means, and data and activity exchange with third party software integrated with the cloud service platform.

4. A method, according to claim 1, wherein the adapted database records include statistical and linguistic analysis of the textual information in data accessed by users of the cloud service and at least one of:

keywords or n-grams of important words and frequencies thereof.

5. A method, according to claim 1, wherein the sensitive information includes user names and passwords.

6. A method, according to claim 1, wherein at least some content entered by users of the cloud service is filtered out prior to being pushed to the analytics database.

7. A method, according to claim 6, wherein a summary of content that is filtered out is pushed to the analytics database.

8. A method, according to claim 1, wherein different groups of the users of the analytics information are provided with different levels of access to the analytics database that allow access to different subsets of the analytics database.

9. Computer software, provided in a non-transitory computer-readable medium, that provides analytics information from a cloud service, the software comprising:

executable code that maintains an analytics database that is separate from data and servers accessed by users of the cloud service;

executable code that forms adapted database records by filtering out sensitive information from the data on the servers of the cloud service;

executable code that selectively pushes the adapted database records from the cloud service to the analytics database, wherein data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database; and

executable code that allows users limited access to the analytics database, wherein users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service to prevent access to the sensitive information.

10. Computer software, according to claim 9, wherein the analytics database includes a first database of the adapted database records and a second database of dynamic logs of service related events.

11. Computer software, according to claim 10, wherein the service related events include data corresponding to at least one of:

synchronization, clipping from web pages, clipping from documents, emailing, typing, drawing, data formatting and deletion, storage optimization, image processing, image recognition, image indexing, other activities performed on servers of the cloud service and interactions with data capturing tools of a service, content sharing via email and other means, and data and activity exchange with third party software integrated with the cloud service platform.

12. Computer software, according to claim 9, wherein the adapted database records include statistical and linguistic analysis of the textual information in data accessed by users of the cloud service and at least one of:

keywords or n-grams of important words and frequencies thereof.

13. Computer software, according to claim 9, wherein the sensitive information includes user names and passwords.

14. Computer software, according to claim 9, wherein at least some content entered by users of the cloud service is filtered out prior to being pushed to the analytics database.

15. Computer software, according to claim 14, wherein a summary of content that is filtered out is pushed to the analytics database.

16. Computer software, according to claim 9, wherein different groups of the users of the analytics information are provided with different levels of access to the analytics database that allow access to different subsets of the analytics database.