Systems and methods for data distribution using a publication subscriber model with a federation of trusted data distribution networks

Patent metadata

Field	Value
Publication number	US-11595476-B2
Application number	US-201916513383-A
Country	US
Kind code	B2
Filing date	Jul 16, 2019
Priority date	Feb 17, 2017
Publication date	Feb 28, 2023
Grant date	Feb 28, 2023

Abstract

Federation of trusted data distribution systems is accomplished by treating an entire data distribution network as either a publisher or subscriber to a feed in another data distribution network. A first data feed is created in a first data feed management subsystem associated with a first data distribution network. A second data feed related to the first data feed is created in a second data feed management subsystem associated with a second data distribution network. A first data access policy is associated with the second data feed and a publisher for the second data feed is created in the second data distribution network. The identity and authentication of a second subscriber to the second data feed in the second data distribution network is managed by referencing the first data access policy.

First claim

What is claimed:

1. A method comprising:
receiving a first data feed from a data provider in a first data distribution network;
sending instructions to create a second data feed related to the first data feed in a second data feed management subsystem in a second data distribution network;
associating an action policy with the second data feed, the action policy specifying whether a given authenticated ID is allowed to modify the second data feed that is related to the first data feed and that will be made accessible via a publisher to a plurality of subscribers;
creating a first data subscriber to the first data feed in a first data feed management subsystem in the first data distribution network;
creating the publisher for the second data feed in the second data distribution network, wherein the publisher is accessible to the plurality of subscribers in the second data distribution network, and wherein the creating the publisher for the second data feed comprises:
routing the first data subscriber to the second data distribution network; and
designating the first data subscriber as the publisher for the second data feed; and

subscribing a second data subscriber of the plurality of subscribers to the second data feed, wherein managing identity and authentication of the second data subscriber to access the second data feed in the second data distribution network is by referencing the action policy.

2. The method of claim 1 , further comprising receiving a request for access to the second data feed from the second data subscriber in the second data distribution network.

3. The method of claim 1 , wherein the associating the action policy comprises accessing a policy engine to determine what actions an entity is allowed to take with respect to the second data feed management subsystem.

4. The method of claim 1 , wherein the second data feed is identical to the first data feed.

5. The method of claim 1 , wherein the associating the action policy with the second data feed comprises accessing a policy engine that determines what actions an entity is allowed to take with respect to the first data feed management subsystem.

6. A system comprising:
a first data distribution network comprising:
a first data movement infrastructure;
a first identity management and authentication subsystem;
a first policy engine; and
a first data feed management subsystem;

a second data distribution network comprising:
a second data movement infrastructure;
a second identity management and authentication subsystem;
a second policy engine; and
a second data feed management subsystem; and
a processor, coupled to a memory, that executes executable instructions to perform operations, the operations comprising:
receiving a first data feed from a data provider in the first data distribution network;
sending instructions to create a second data feed related to the first data feed in the second data feed management subsystem;
associating an action policy with the second data feed, the action policy specifying whether a given authenticated ID is allowed to modify the second data feed that is related to the first data feed and that will be made accessible via a publisher to a plurality of subscribers;
creating a first data subscriber to the first data feed in the first data distribution network;
creating the publisher for the second data feed in the second data distribution network, wherein the publisher is accessible to the plurality of subscribers in the second data distribution network, and wherein the creating the publisher for the second data feed comprises:
routing the first data subscriber to the second data distribution network; and
designating the first data subscriber as the publisher for the second data feed; and

subscribing a second data subscriber of the plurality of subscribers to the second data feed, wherein managing identity and authentication of the second data subscriber to access the second data feed in the second data distribution network is by referencing the action policy.

7. The system of claim 6 , wherein the operations further comprise receiving a request for access to the second data feed from the second data subscriber in the second data distribution network.

8. The system of claim 7 , wherein the associating the action policy comprises determining what actions an entity is allowed to take with respect to the second data feed management subsystem.

9. The system of claim 8 , wherein the associating the action policy comprises accessing a policy engine to determine what actions the entity is allowed to take with respect to the second data feed management subsystem.

10. The system of claim 6 , wherein the operations further comprise authenticating the second data subscriber.

11. The system of claim 6 , wherein the associating the action policy with the second data feed comprises accessing a policy engine that determines what actions an entity is allowed to take with respect to the first data feed management subsystem.

12. The system of claim 6 , wherein the executable instructions are on a read-only memory device.

13. The system of claim 6 , wherein the executable instructions are on a CD-ROM disk or a DVD-ROM disk.

14. The system of claim 6 , wherein the executable instructions are on a hard disk drive.

15. A non-transitory computer-readable storage medium having computer-executable instructions that, when executed, cause a computer system to:
receive a first data feed from a data provider in a first data distribution network;
send instructions to create a second data feed related to the first data feed in a second data feed management subsystem in a second data distribution network;
associate an action policy with the second data feed, the action policy specifying whether a given authenticated ID is allowed to modify the second data feed that is related to the first data feed and that will be made accessible via a publisher to a plurality of subscribers;
create a first data subscriber to the first data feed in the first data distribution network;
create the publisher for the second data feed in the second data distribution network, wherein the publisher is accessible to the plurality of subscribers in the second data distribution network, and wherein creation of the publisher for the second data feed comprises:
routing the first data subscriber to the second data distribution network; and
designating the first data subscriber as the publisher for the second data feed; and

subscribe a second data subscriber of the plurality of subscribers to the second data feed, wherein managing identity and authentication of the second data subscriber to access the second data feed in the second data distribution network is by referencing the action policy.

16. The non-transitory computer-readable storage medium of claim 15 , further comprising instructions that, when executed, cause the computer system to receive a request for access to the second data feed from the second data subscriber in the second data distribution network.

17. The non-transitory computer-readable storage medium of claim 15 , wherein associating the action policy comprises accessing a policy engine to determine what actions an entity is allowed to take with respect to the second data feed management subsystem.

18. The non-transitory computer-readable storage medium of claim 15 , wherein the non-transitory computer-readable storage medium comprises a read-only memory device.

19. The non-transitory computer-readable storage medium of claim 15 ,

Assignees

• At & T Ip I Lp

Inventors

• Rath Christopher

Classifications

• H04L67/1097 Primary

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L67/55

  Push-based network services · CPC title

• H04L67/06

  specially adapted for file transfer, e.g. file transfer protocol [FTP] · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title