SECURE CONNECTIONS IN AN INTERACTIVE ANALYTIC VISUALIZATION INFRASTRUCTURE

• US 20160323249A1
• Filed: 08/10/2015
• Published: 11/03/2016
• Est. Priority Date: 04/30/2015
• Status: Active Grant

• Current Assignee: iCharts LLC
• Original Assignee: iCharts, Inc.
• Inventors: Duncker, Seymour, Deolalikar, Deepak, Adams, Kevin, Yruski, Andrey
• Granted Patent: US 9,665,654 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2379 Updates performed during online database operations; commit processing
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method and system is described securely capturing up-to-date data and presenting the up-to-date data in an analytic visualization. An update server receives a data request from a container that can display the analytic visualization. The update server generates a data processing instruction and transmits it to a data server. The update server then receives a processed data set from the data server, generates a visualization update based on the processed data set, and transmits the visualization update to the container. The container can then display the analytic visualization with up-to-date data from the data server. Because the data processing is performed at the data server, the remaining data on the data server is never moved through the network and remains secure. The update server can also receive from the container, and transmit to the data server, an identifier whose permissions limit data access from the data server.

Claims

1. A method of securely providing analytic visualization data, comprising:

receiving a data request from a container, wherein execution of the container by a processor displays an analytic visualization;

receiving an identifier from the container;

generating a data processing instruction based on the data request;

transmitting the data processing instruction and the identifier to a data server containing a data source, the data processing instruction requesting that the data server locally select a subset of the data source and locally produce a processed data set including the subset, wherein the subset includes data from the data source based on a permission setting associated with the identifier;

receiving the processed data set from the data server without receiving any additional data from the data set, where the additional data is not in the subset;

generating a visualization update including the processed data set; and

transmitting the visualization update to the container.

2. The method of claim 1, wherein the visualization update includes the processed data set and a metadata data set, and wherein the container is operable to generate an updated version of the analytic visualization after receiving the visualization update using the processed data set and the metadata data set.

3. The method of claim 1, wherein the visualization update includes data corresponding to an updated version of the analytic visualization.

4. The method of claim 1, wherein the identifier is one of an OAuth token, a browser cookie, a symmetric key, a public key, a temporary security token, a certificate signed by a certificate authority, a Lightweight Directory Access Protocol (LDAP) token, a Remote Authentication Dial In User Service (RADIUS) token, a Security Assertion Markup Language (SAML) token, an Active Directory token, an Extensible Markup Language (XML) based token, or a data set including at least one user-specific descriptor.

5. The method of claim 1, wherein the identifier includes a user-specific descriptor, the user-specific descriptor including at least one of a name, a username, a user account, a telephone number, an email address, a password, a PIN number, a social security number, a driver'"'"'s license number, an identification number, a biometric dataset, a user-specific code, a user-specific barcode, a user-specific icon, an image, or an identifying trait.

6. The method of claim 1, wherein the permission data is stored alongside the identifier, is received from the container alongside the identifier, and is transmitted to the data server alongside the identifier.

7. The method of claim 1, wherein the permission data is stored separately from the identifier but is accessible to the data server from a security server.

8. The method of claim 1, wherein at least part of the data source is stored at an external data server that is communicatively coupled to the data server.

9. The method of claim 1, wherein the container is embedded in a portal, and wherein the portal is a network entity accessible through the public Internet.

10. The method of claim 1, wherein the container is embedded in a portal, and wherein the portal is a private network entity such that access to the portal is limited to a predetermined one or more individuals.

11. A system for securely providing analytic visualization data, comprising:

a data server plugin within a data server memory of a data server; and

an update server communicatively coupled to the data server, the update server having an update server memory and an update server processor, wherein execution of instructions stored in the update server memory by the update server processor;

receives a data request from a container, wherein execution of the container by a processor displays an analytic visualization,

receives an identifier from the container,

generates a data processing instruction based on the data request;

transmits the data processing instruction and the identifier to a data server containing a data source, the data processing instruction requesting that the data server locally select a subset of the data source and locally produce a processed data set including the subset, wherein the subset includes data from the data source based on a permission setting associated with the identifier,

receives the processed data set from the data server without receiving any additional data from the data source, where the additional data is not in the subset,

generates a visualization update including the processed data set; and

transmits the visualization update to the container.

12. The system of claim 11, wherein the visualization update includes the processed data set and a metadata data set, and wherein the container is operable to generate an updated version of the analytic visualization after receiving the visualization update using the processed data set and the metadata data set.

13. The system of claim 11, wherein the visualization update includes data corresponding to an updated version of the analytic visualization.

14. The system of claim 11, wherein the identifier is a user-specific descriptor including at least one of a name, a username, a user account, a telephone number, an email address, a password, a PIN number, a social security number, a driver'"'"'s license number, an identification number, a biometric dataset, a user-specific code, a user-specific barcode, a user-specific icon, an image, or an identifying trait.

15. The system of claim 11, wherein the permission data is stored alongside the identifier, is received by the update server from the container alongside the identifier, and is transmitted to the data server from the update server alongside the identifier.

16. The system of claim 11, wherein the permission data is stored separately from the identifier but is accessible to the data server from a security server.

17. The system of claim 11, wherein at least part of the data source is stored at an external data server that is communicatively coupled to at least one of the data server or the update server.

18. The system of claim 11, wherein the container is embedded in a portal, and wherein the portal is a public Internet entity.

19. The system of claim 11, wherein the container is embedded in a portal, and wherein the portal is a private network entity such that access to the portal is limited to a predetermined one or more individuals.

20. A non-transitory computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method for providing analytic visualization data, the method comprising:

receiving a data request from a container, wherein execution of the container by a portal processor displays an analytic visualization;

receiving an identifier from the container;

generating a data processing instruction based on the data request;

transmitting the data processing instruction and the identifier to a data server containing a data source, the data processing instruction requesting that the data server locally select a subset of the data source and locally produce a processed data set including the subset, wherein the subset includes data from the data source based on a permission setting associated with the identifier;

receiving the processed data set from the data server without receiving any additional data from the data source, where the additional data is not in the subset;

generating a visualization update including the processed data set; and

transmitting the visualization update to the container.