Data virtualization using copy data tokens

• US 10,613,938 B2
• Filed: 07/01/2015
• Issued: 04/07/2020
• Est. Priority Date: 07/01/2015
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Actifio, Inc. (Alphabet Inc.)
• Inventors: Blumenau, Steven M., Sullivan, James, Murphy, Christopher
• Primary Examiner(s): Traore, Fatoumata
• Application Number:
  US14/789,345
• Publication Number:
  US 20170004314A1
• Time in Patent Office: 1,742 Days
• CPC Class Codes: G06F 11/14 Error detection or correction of the data by redundancy in operation G06F11/16 takes precedence
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Computerized systems and methods are provided for data virtualization using copy data tokens. A data token is stored that defines attributes associated with copy data, including source data, transformation data, and access data for the copy data. The access data is indicative of a set of access settings for the copy data that define how an instance of the copy data is to be created for the user, and a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access. The data token is transmitted to a remote computer storing the copy data based on the source data in the data token. A copy of the copy data that was generated based on the preparation information and the access data is received.

Claims

1. A computerized method for using a data token to automatically manage access to copy data associated with the data token, the data token defining attributes for the copy data associated with the data token to facilitate the automatic management of the copy data, the computerized method comprising:

storing, by a computing device with a processor and memory, the data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising;

source data for the copy data indicative of the data source for the copy data;

transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and

access data for the copy data indicative of;

a set of access settings for the copy data that define how an instance of the copy data is to be created for the user; and

a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access;

transmitting, by the computing device, the data token to a remote computer storing the copy data based on the source data in the data token; and

receiving, by the computing device, a customized copy of the copy data that the remote computer generated for the user from the copy data, the customized copy including modifications to the copy data based on the transformation data and the access data in the data token, thereby using the data token to automatically manage access to copy data associated with the data token for the user.

2. The computerized method of claim 1, wherein:

the copy data comprises a first subset and a second subset; and

the remote computer generates the customized copy of the copy data to comprise the first subset of the copy data and not the second subset of the copy data based on the transformation data.

3. The computerized method of claim 1, wherein the source data comprises at least one of:

a source address that defines how to access the copy data;

an access method that defines a method for accessing the copy data; and

an access protocol that defines a protocol to use to access the copy data.

4. The computerized method of claim 1, wherein the transformation data comprises at least one of the following:

a set of pre-processing parameters configured to protect security of information contained in the copy data;

a set of subsetting parameters configured to intelligently select a subset of the copy data if a full set of data in the copy data is not desired;

a set of masking parameters configured to mask one or more data fields in the copy data; and

a set of data quality parameters configured to degrade a quality of the copy data.

5. The computerized method of claim 1, wherein the set of access settings comprise at least one of the following:

a server address that specifies a server for the remote computer to mount the copy of the copy data;

an access method that defines a method for copying the copy data to the server; and

an access protocol that defines a protocol to use to copy the copy data to the server.

6. The computerized method of claim 1, wherein storing the data token further comprises encrypting the data token and storing the encrypted data token.

7. A computerized apparatus for using a data token to automatically manage access to copy data associated with the data token, the data token defining attributes for the copy data associated with the data token to facilitate the automatic management of the copy data, the apparatus comprising:

a processor configured to run a module stored in memory that is configured to cause the processor to;

store the data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising;

source data for the copy data indicative of the data source for the copy data;

transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and

access data for the copy data indicative of;

a set of access settings for the copy data that define how an instance of the copy data is to be created for the user; and

a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access;

transmit the data token to a remote computer storing the copy data based on the source data in the data token; and

receive a customized copy of the copy data that the remote computer generated for the user from the copy data, the customized copy including modifications to the copy data based on the transformation data and the access data in the data token, thereby using the data token to automatically manage access to copy data associated with the data token for the user.

8. The computerized apparatus of claim 7, wherein:

the copy data comprises a first subset and a second subset; and

the remote computer generates the customized copy of the copy data to comprise the first subset of the copy data and not the second subset of the copy data based on the transformation data.

9. The computerized apparatus of claim 8, wherein the transformation data comprises at least one of the following:

a set of pre-processing parameters configured to protect security of information contained in the copy data;

a set of subsetting parameters configured to intelligently select a subset of the copy data if a full set of data in the copy data is not desired;

a set of masking parameters configured to mask one or more data fields in the copy data; and

a set of data quality parameters configured to degrade a quality of the copy data.

10. The computerized apparatus of claim 7, wherein the source data comprises at least one-of the following:

a source address that defines how to access the copy data;

an access method that defines a method for accessing the copy data; and

an access protocol that defines a protocol to use to access the copy data.

11. The computerized apparatus of claim 7, wherein the set of access settings comprise at least one of the following:

a server address that specifies a server for the remote computer to mount the copy of the copy data;

an access method that defines a method for copying the copy data to the server; and

an access protocol that defines a protocol to use to copy the copy data to the server.

12. The computerized apparatus of claim 7, wherein storing the data token further comprises encrypting the data token and storing the encrypted data token.

13. A non-transitory computer readable medium having executable instructions operable to cause an apparatus to:

store a data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising;

source data for the copy data indicative of the data source for the copy data;

transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and

access data for the copy data indicative of;

a set of access settings for the copy data that define how an instance of the copy data is to be created for the user; and

a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access;

transmit the data token to a remote computer storing the copy data based on the source data in the data token; and

receive a customized copy of the copy data that the remote computer generated for the user from the copy data, the customized copy including modifications to the copy data based on the transformation data and the access data in the data token, thereby using the data token to automatically manage access to copy data associated with the data token for the user.

14. The non-transitory computer readable medium of claim 13, wherein:

the copy data comprises a first subset and a second subset; and

the remote computer generates the customized copy of the copy data to comprise the first subset of the copy data and not the second subset of the copy data based on the transformation data.

15. The non-transitory computer readable medium of claim 14, wherein the transformation data comprises at least one of the following:

a set of pre-processing parameters configured to protect security of information contained in the copy data;

a set of subsetting parameters configured to intelligently select a subset of the copy data if a full set of data in the copy data is not desired;

a set of masking parameters configured to mask one or more data fields in the copy data; and

a set of data quality parameters configured to degrade a quality of the copy data.

16. The non-transitory computer readable medium of claim 13, wherein the source data comprises at least one of the following:

a source address that defines how to access the copy data;

an access method that defines a method for accessing the copy data; and

an access protocol that defines a protocol to use to access the copy data.

17. The non-transitory computer readable medium of claim 13, wherein the set of access settings comprise at least one-of the following:

a server address that specifies a server for the remote computer to mount the copy of the copy data;

an access method that defines a method for copying the copy data to the server; and

an access protocol that defines a protocol to use to copy the copy data to the server.

18. The non-transitory computer readable medium of claim 13, wherein storing the data token further comprises encrypting the data token and storing the encrypted data token.