Data virtualization using copy data tokens

Patent metadata

Field	Value
Publication number	US-10613938-B2
Application number	US-201514789345-A
Country	US
Kind code	B2
Filing date	Jul 1, 2015
Priority date	Jul 1, 2015
Publication date	Apr 7, 2020
Grant date	Apr 7, 2020

Abstract

Computerized systems and methods are provided for data virtualization using copy data tokens. A data token is stored that defines attributes associated with copy data, including source data, transformation data, and access data for the copy data. The access data is indicative of a set of access settings for the copy data that define how an instance of the copy data is to be created for the user, and a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access. The data token is transmitted to a remote computer storing the copy data based on the source data in the data token. A copy of the copy data that was generated based on the preparation information and the access data is received.

First claim

The invention claimed is:

1. A computerized method for using a data token to automatically manage access to copy data associated with the data token, the data token defining attributes for the copy data associated with the data token to facilitate the automatic management of the copy data, the computerized method comprising:
storing, by a computing device with a processor and memory, the data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising:
source data for the copy data indicative of the data source for the copy data;
transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and
access data for the copy data indicative of:
a set of access settings for the copy data that define how an instance of the copy data is to be created for the user; and
a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access;

transmitting, by the computing device, the data token to a remote computer storing the copy data based on the source data in the data token; and
receiving, by the computing device, a customized copy of the copy data that the remote computer generated for the user from the copy data, the customized copy including modifications to the copy data based on the transformation data and the access data in the data token, thereby using the data token to automatically manage access to copy data associated with the data token for the user.

2. The computerized method of claim 1 , wherein:
the copy data comprises a first subset and a second subset; and
the remote computer generates the customized copy of the copy data to comprise the first subset of the copy data and not the second subset of the copy data based on the transformation data.

3. The computerized method of claim 1 , wherein the source data comprises at least one of:
a source address that defines how to access the copy data;
an access method that defines a method for accessing the copy data; and
an access protocol that defines a protocol to use to access the copy data.

4. The computerized method of claim 1 , wherein the transformation data comprises at least one of the following:
a set of pre-processing parameters configured to protect security of information contained in the copy data;
a set of subsetting parameters configured to intelligently select a subset of the copy data if a full set of data in the copy data is not desired;
a set of masking parameters configured to mask one or more data fields in the copy data; and
a set of data quality parameters configured to degrade a quality of the copy data.

5. The computerized method of claim 1 , wherein the set of access settings comprise at least one of the following:
a server address that specifies a server for the remote computer to mount the copy of the copy data;
an access method that defines a method for copying the copy data to the server; and
an access protocol that defines a protocol to use to copy the copy data to the server.

6. The computerized method of claim 1 , wherein storing the data token further comprises encrypting the data token and storing the encrypted data token.

7. A computerized apparatus for using a data token to automatically manage access to copy data associated with the data token, the data token defining attributes for the copy data associated with the data token to facilitate the automatic management of the copy data, the apparatus comprising:
a processor configured to run a module stored in memory that is configured to cause the processor to:
store the data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising:
source data for the copy data indicative of the data source for the copy data;
transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and
access data for the copy data indicative of:
a set of access settings for the copy data that define how an instance of the copy data is to be created for the user; and
a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access;

transmit the data token to a remote computer storing the copy data based on the source data in the data token; and
receive a customized copy of the copy data that the remote computer generated for the user from the copy data, the customized copy including modifications to the copy data based on the transformation data and the access data in the data token, thereby using the data token to automatically manage access to copy data associated with the data token for the user.

8. The computerized apparatus of claim 7 , wherein:
the copy data comprises a first subset and a second subset; and

the remote computer generates the customized copy of the copy data to comprise the first subset of the copy data and not the second subset of the copy data based on the transformation data.

9. The computerized apparatus of claim 8 , wherein the transformation data comprises at least one of the following:
a set of pre-processing parameters configured to protect security of information contained in the copy data;
a set of subsetting parameters configured to intelligently select a subset of the copy data if a full set of data in the copy data is not desired;
a set of masking parameters configured to mask one or more data fields in the copy data; and
a set of data quality parameters configured to degrade a quality of the copy data.

10. The computerized apparatus of claim 7 , wherein the source data comprises at least one-of the following:
a source address that defines how to access the copy data;
an access method that defines a method for accessing the copy data; and
an access protocol that defines a protocol to use to access the copy data.

11. The computerized apparatus of claim 7 , wherein the set of access settings comprise at least one of the following:
a server address that specifies a server for the remote computer to mount the copy of the copy data;
an access method that defines a method for copying the copy data to the server; and
an access protocol that defines a protocol to use to copy the copy data to the server.

12. The computerized apparatus of claim 7 , wherein storing the data token further comprises encrypting the data token and storing the encrypted data token.

13. A non-transitory computer readable medium having executable instructions operable to cause an apparatus to:
store a data token that defines attributes associated with copy data, wherein the copy data comprises both a full copy of data at a data source and one or more incremental changes to the data at the data source over time, the attributes comprising:
source data for the copy data indicative of the data source for the copy data;
transformation data for the copy data indicative of a set of modifications for the copy data specifying how the copy data is modified when creating an instance of the copy data; and
access data for the copy data indicative of:
a set of access settings for the copy data that define how an instance of the

Assignees

• Actifio Inc

Inventors

• Blumenau Steven M
• Sullivan James
• Murphy Christopher

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/335 Primary

  for accessing specific resources, e.g. using Kerberos tickets · CPC title

• G06F11/14 Primary

  Error detection or correction of the data by redundancy in operations (error detection or correction of the data by redundancy in hardware G06F11/16) · CPC title