Method and apparatus for providing data access via multi-user views

• US 9,536,105 B2
• Filed: 01/26/2012
• Issued: 01/03/2017
• Est. Priority Date: 01/26/2012
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Boldyrev, Sergey, Mannermaa, Mika Juhani, Kolesnikov, Dmitry
• Primary Examiner(s): Jami, Hares
• Application Number:
  US13/359,182
• Publication Number:
  US 20130198235A1
• Time in Patent Office: 1,804 Days
• Field of Search: 707/694, 707/781, 707/783, 707/784, 707/785, 707/786, 707/787, 707/788, 707/999.9
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2393 Updating materialised views
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

An approach is provided for providing data access via multi-user views. An access management platform determines at least one view of data, wherein the at least one view is created based on one or more queries with one or more projections in one or more monadic elements to the data. The access management platform further determines one or more policies for accessing the data, wherein the one or more policies specify at least one or more access capabilities. The access management platform also causes storage of the one or more policies, the one or more access capabilities, or a combination thereof in the one or more monadic elements. The access management platform further causes granting of access to the at least one view by one or more requesting devices, wherein the granting of the access is determined by processing of the one or more monadic elements.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

at least one determination of at least one view of data, wherein the at least one view is created based, at least in part, on one or more queries with one or more projections in one or more monadic elements to the data;

one or more policies for accessing the data, wherein the one or more policies specify at least one or more access capabilities;

a storage of the one or more policies, the one or more access capabilities, or a combination thereof in the one or more monadic elements; and

a granting of access to the at least one view by one or more requesting devices, wherein the granting of the access is determined by processing and/or facilitating a processing of the one or more monadic elements to determine whether the one or more requesting devices have the one or more access capabilities.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a construction of at least one graph of the at least one view,

wherein one or more nodes of the graph represent, at least in part, one or more instances of the data; and

wherein the one or more monadic elements operate between the one or more nodes.

3. A method of claim 2, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a traversal of the at least one graph to determine whether the one or more requesting devices have the one or more access capabilities.

4. A method of claim 2, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of a query from the one or more requesting devices for at least one of the one or more instances;

a designation of the at least one of the one or more instances as at least one node of the graph; and

a processing of the one or more monadic elements associated with a traversal of the graph to the at least one node to determine whether the one or more access capabilities associated with the one or more requesting devices feed to monadic termination,

wherein the granting of the access to the at least one view is based, at least in part, on the monadic termination.

5. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination that the one or more requesting devices do not have the one or more access capabilities; and

a creation of at least one other view of the data for access by the one or more requesting devices.

6. A method of claim 5, further comprising:

a reuse of at least a portion of the one or more monadic elements to create the at least one other view.

7. A method of claim 6, wherein the reuse of the at least a portion of the one or more monadic elements is based, at least in part, on a determination of whether the one or more requesting devices share one or more users, one or more systems, one or more domains, or a combination thereof with one or more other devices that requested the at least one view.

8. A method of claim 1, wherein the one or more monadic elements include, at least in part, one or more computation closures associated with enforcing the one or more policies, determining the one or more access capabilities, or a combination thereof.

9. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine at least one view of data, wherein the at least one view is created based, at least in part, on one or more queries with one or more projections in one or more monadic elements to the data;

determine one or more policies for accessing the data, wherein the one or more policies specify at least one or more access capabilities;

cause, at least in part, a storage of the one or more policies, the one or more access capabilities, or a combination thereof in the one or more monadic elements; and

cause, at least in part, a granting of access to the at least one view by one or more requesting devices, wherein the granting of the access is determined by processing and/or facilitating a processing of the one or more monadic elements to determine whether the one or more requesting devices have the one or more access capabilities.

10. An apparatus of claim 9, wherein the apparatus is further caused to:

cause, at least in part, a construction of at least one graph of the at least one view,

wherein one or more nodes of the graph represent, at least in part, one or more instances of the data; and

wherein the one or more monadic elements operate between the one or more nodes.

11. An apparatus of claim 10, wherein the apparatus is further caused to:

cause, at least in part, a traversal of the at least one graph to determine whether the one or more requesting devices have the one or more access capabilities.

12. An apparatus of claim 10, wherein the apparatus is further caused to:

determine a query from the one or more requesting devices for at least one of the one or more instances;

cause, at least in part, a designation of the at least one of the one or more instances as at least one node of the graph; and

process and/or facilitate a processing of the one or more monadic elements associated with a traversal of the graph to the at least one node to determine whether the one or more access capabilities associated with the one or more requesting devices feed to monadic termination,

wherein the granting of the access to the at least one view is based, at least in part, on the monadic termination.

13. An apparatus of claim 9, wherein the apparatus is further caused to:

determine that the one or more requesting devices do not have the one or more access capabilities; and

cause, at least in part, a creation of at least one other view of the data for access by the one or more requesting devices.

14. An apparatus of claim 13, wherein the apparatus is further caused to:

cause, at least in part, a reuse of at least a portion of the one or more monadic elements to create the at least one other view.

15. An apparatus of claim 14, wherein the reuse of the at least a portion of the one or more monadic elements is based, at least in part, on a determination of whether the one or more requesting devices share one or more users, one or more systems, one or more domains, or a combination thereof with one or more other devices that requested the at least one view.

16. An apparatus of claim 9, wherein the one or more monadic elements include, at least in part, one or more computation closures associated with enforcing the one or more policies, determining the one or more access capabilities, or a combination thereof.

17. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform at least the following:

determining at least one view of data, wherein the at least one view is created based, at least in part, on one or more queries with one or more projections in one or more monadic elements to the data;

determining one or more policies for accessing the data, wherein the one or more policies specify at least one or more access capabilities;

causing, at least in part, a storage of the one or more policies, the one or more access capabilities, or a combination thereof in the one or more monadic elements; and

causing, at least in part, a granting of access to the at least one view by one or more requesting devices, wherein the granting of the access is determined by processing and/or facilitating a processing of the one or more monadic elements to determine whether the one or more requesting devices have the one or more access capabilities.

18. A non-transitory computer-readable storage medium of claim 17 wherein the apparatus is caused to further perform:

causing, at least in part, a construction of at least one graph of the at least one view,

wherein one or more nodes of the graph represent, at least in part, one or more instances of the data; and

wherein the one or more monadic elements operate between the one or more nodes.

19. A non-transitory computer-readable storage medium of claim 17 wherein the apparatus is caused to further perform:

causing, at least in part, a traversal of the at least one graph to determine whether the one or more requesting devices have the one or more access capabilities.

20. A non-transitory computer-readable storage medium of claim 17 wherein the apparatus is caused to further perform:

determining a query from the one or more requesting devices for at least one of the one or more instances;

causing, at least in part, a designation of the at least one of the one or more instances as at least one node of the graph; and

processing and/or facilitating a processing of the one or more monadic elements associated with a traversal of the graph to the at least one node to determine whether the one or more access capabilities associated with the one or more requesting devices feed to monadic termination,

wherein the granting of the access to the at least one view is based, at least in part, on the monadic termination.