Secure connections in an interactive analytic visualization infrastructure

• US 9,665,654 B2
• Filed: 08/10/2015
• Issued: 05/30/2017
• Est. Priority Date: 04/30/2015
• Status: Expired due to Fees

• Current Assignee: iCharts LLC
• Original Assignee: iCharts, Inc.
• Inventors: Yruski, Andrey, Duncker, Seymour, Deolalikar, Deepak, Adams, Kevin
• Primary Examiner(s): BAYOU, YONAS A
• Application Number:
  US14/822,636
• Publication Number:
  US 20160323249A1
• Time in Patent Office: 659 Days
• CPC Class Codes: G06F 16/2379 Updates performed during online database operations; commit processing
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method and system is described securely capturing up-to-date data and presenting the up-to-date data in an analytic visualization. An update server receives a data request from a container that can display the analytic visualization. The update server generates a data processing instruction and transmits it to a data server. The update server then receives a processed data set from the data server, generates a visualization update based on the processed data set, and transmits the visualization update to the container. The container can then display the analytic visualization with up-to-date data from the data server. Because the data processing is performed at the data server, the remaining data on the data server is never moved through the network and remains secure. The update server can also receive from the container, and transmit to the data server, an identifier whose permissions limit data access from the data server.

Claims

1. A method of securely providing analytic visualization data, comprising:

receiving a data request from a container at an update server, wherein a viewer device displays an analytic visualization via the container;

receiving an identifier from the viewer device at the update server;

generating a data processing instruction at the update server based on the data request;

transmitting the data processing instruction and the identifier from the update server to a data server storing a data source in response to receipt of the data request and the identifier at the update server, the data processing instruction requesting that the data server locally select a subset of the data source based on the data request and on a permission setting associated with the identifier;

receiving the subset of the data source from the data server at the update server without receiving any additional data from the data source that is not in the subset of the data source;

generating a visualization update at the update server based on the subset of the data source; and

transmitting the visualization update from the update server to the container, thereby causing the viewer device to display an updated version of the analytic visualization via the container.

2. The method of claim 1, wherein the visualization update includes the subset of the data source and a metadata data set, and wherein the container is operable to generate the updated version of the analytic visualization using the subset of the data source and the metadata data set after receiving the visualization update from the update server.

3. The method of claim 1, wherein generating the visualization update at the update server includes generating the updated version of the analytic visualization at the update server, and wherein the visualization update includes data corresponding to the updated version of the analytic visualization.

4. The method of claim 1, wherein the identifier is one of an OAuth token, a browser cookie, a symmetric key, a public key, a temporary security token, a certificate signed by a certificate authority, a Lightweight Directory Access Protocol (LDAP) token, a Remote Authentication Dial In User Service (RADIUS) token, a Security Assertion Markup Language (SAML) token, an Active Directory token, an Extensible Markup Language (XML) based token, or a data set including at least one user-specific descriptor.

5. The method of claim 1, wherein the identifier includes at least one of a name, a username, a user account, a telephone number, an email address, a password, a PIN number, a social security number, a driver'"'"'s license number, an identification number, a biometric dataset, a user-specific code, a user-specific barcode, a user-specific icon, an image, or an identifying user trait.

6. The method of claim 1, wherein the permission setting is stored alongside the identifier, is received from the container alongside the identifier, and is transmitted to the data server alongside the identifier.

7. The method of claim 1, wherein the permission setting is stored separately from the identifier but is accessible to the data server via a security server.

8. The method of claim 1, wherein at least part of the data source is stored at an external data server that is communicatively coupled to the data server.

9. The method of claim 1, wherein the container is embedded in a portal, and wherein the portal is a network entity accessible through the public Internet.

10. The method of claim 1, wherein the container is embedded in a portal, and wherein the portal is a private network entity such that access to the portal is limited to a predetermined one or more individuals.

11. A system for securely providing analytic visualization data, comprising:

a data server plugin within a data server memory of a data server; and

an update server communicatively coupled to the data server and to a viewer device, the update server having an update server memory and an update server processor, wherein execution of instructions stored in the update server memory by the update server processor causes the update server to;

receive a data request from a container, wherein the viewer device displays an analytic visualization via the container,

receive an identifier from the viewer device,

generate a data processing instruction based on the data request;

transmit the data processing instruction and the identifier to a data server storing a data source in response to receipt of the data request and the identifier, the data processing instruction requesting that the data server locally select a subset of the data source based on the data request and on a permission setting associated with the identifier,

receive the subset of the data source from the data server without receiving any additional data from the data source that is not in the subset of the data source,

generate a visualization update based on the subset of the data source; and

transmit the visualization update to the container, thereby causing the viewer device to display an updated version of the analytic visualization via the container.

12. The system of claim 11, wherein the visualization update includes the subset of the data source and a metadata data set, and wherein the container is operable to generate the updated version of the analytic visualization using the subset of the data source and the metadata data set after receiving the visualization update from the update server.

13. The system of claim 11, wherein generating the visualization update includes generating the updated version of the analytic visualization, and wherein the visualization update includes data corresponding to the updated version of the analytic visualization.

14. The system of claim 11, wherein the identifier includes at least one of a name, a username, a user account, a telephone number, an email address, a password, a PIN number, a social security number, a driver'"'"'s license number, an identification number, a biometric dataset, a user-specific code, a user-specific barcode, a user-specific icon, an image, or an identifying user trait.

15. The system of claim 11, wherein the permission setting is stored alongside the identifier, is received by the update server from the container alongside the identifier, and is transmitted to the data server from the update server alongside the identifier.

16. The system of claim 11, wherein the permission setting is stored separately from the identifier but is accessible to the data server from a security server.

17. The system of claim 11, wherein at least part of the data source is stored at an external data server that is communicatively coupled to at least one of the data server or the update server.

18. The system of claim 11, wherein the container is embedded in a portal, and wherein the portal is a public Internet entity.

19. The system of claim 11, wherein the container is embedded in a portal, and wherein the portal is a private network entity such that access to the portal is limited to a predetermined one or more individuals.

20. A non-transitory computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method for providing analytic visualization data, the method comprising:

receiving a data request from a container, wherein a viewer device displays an analytic visualization via the container;

receiving an identifier from the viewer device;

generating a data processing instruction based on the data request;

transmitting the data processing instruction and the identifier to a data server storing a data source in response to receipt of the data request and the identifier, the data processing instruction requesting that the data server locally select a subset of the data source based on the data request and on a permission setting associated with the identifier;

receiving the subset of the data source from the data server without receiving any additional data from the data source that is not in the subset of the data source;

generating a visualization update based on the subset of the data source; and

transmitting the visualization update to the container, thereby causing the viewer device to display an updated version of the analytic visualization via the container.