Systems and methods for multi-region data center connectivity

Patent metadata

Field	Value
Publication number	US-11803663-B2
Application number	US-202217740480-A
Country	US
Kind code	B2
Filing date	May 10, 2022
Priority date	Mar 24, 2017
Publication date	Oct 31, 2023
Grant date	Oct 31, 2023

Abstract

Disclosed is a multi-region data center connectivity solution for seamless integration between multi-region data center users and content. The solution supports user pinning (e.g., users and their personal content can be pinned to a particular geographical location/data center); protects personal content (e.g., personal content uploaded by a user is stored in that user's pinned geographical location/data center); and enables data sharing between multi-region data center users in a manner that is seamless and transparent to end users, while respecting user privacy, complying with data sovereignty requirements, and maintaining system anonymity.

First claim

What is claimed is:

1. A method, comprising:
searching, by a first data center computer utilizing information of a second user provided by a first user of the first data center computer, the second user in a database local to the first data center computer;
responsive to the information of the second user not being found in the database local to the first data center computer, searching, by the first data center computer through a trusted connection with a second data center computer, the second user in a database local to the second data center computer, the first data center computer and the second data center computer operating distinctly and independently of each other and in different geographical regions that have different data protection or privacy requirements;
generating, by the first data center computer utilizing limited user data of the second user stored in the database local to the second data center computer, a unique identifier for the second user;
generating, by the first data center computer, an entry containing the limited user data of the second user and the unique identifier for the second user;
storing, by the first data center computer, the entry in a trust table local to the first data center computer, the entry representing the second user of the second data center computer in the first data center computer;
generating, by the first data center computer, a trust user identifier structure using the unique identifier for the second user;
storing, by the first data center computer, the trust user identifier structure in an entry for a share, the share having a share identifier and stored in the first data center computer; and
requesting, by the first data center computer, the second data center computer to create an entry representing the share based on the share identifier and permission information associated with the share for the second user such that the share stored in the first data center computer is shared by the first user of the first data center computer to the second user of the second data center computer.

2. The method according to claim 1 , wherein the information of the second user provided by the first user of the first data center computer comprises an email address of the second user.

3. The method according to claim 1 , further comprising:
communicating the share identifier and the permission information associated with the share for the second user from the first data center computer to the second data center computer, the permission information comprising a permission for the second user to view or modify content in the share.

4. The method according to claim 1 , wherein the limited user data comprises a name and an email address of the second user.

5. The method according to claim 1 , further comprising:
providing a user interface on a user device of the first user for managing a permission level of the second user.

6. The method according to claim 1 , wherein the share is owned by the first user.

7. The method according to claim 6 , wherein a file uploaded to the share by the second user is stored in the first data center computer and owned by the first user.

8. A system, comprising:
a processor;
a non-transitory computer-readable medium; and
instructions stored on the non-transitory computer-readable medium and translatable by the processor for hosting an instance of an application on a first data center computer, the instructions when translated by the processor perform:
searching, utilizing information of a second user provided by a first user of the first data center computer, the second user in a database local to the first data center computer;
responsive to the information of the second user not being found in the database local to the first data center computer, searching, through a trusted connection with a second data center computer, the second user in a database local to the second data center computer, the first data center computer and the second data center computer operating distinctly and independently of each other and in different geographical regions that have different data protection or privacy requirements;
generating, utilizing limited user data of the second user stored in the database local to the second data center computer, a unique identifier for the second user;
generating an entry containing the limited user data of the second user and the unique identifier for the second user;
storing the entry in a trust table local to the first data center computer, the entry representing the second user of the second data center computer in the first data center computer;
generating a trust user identifier structure using the unique identifier for the second user;
storing the trust user identifier structure in an entry for a share, the share having a share identifier and stored in the first data center computer; and
requesting the second data center computer to create an entry representing the share based on the share identifier and permission information associated with the share for the second user such that the share stored in the first data center computer is shared by the first user of the first data center computer to the second user of the second data center computer.

9. The system of claim 8 , wherein the information of the second user provided by the first user of the first data center computer comprises an email address of the second user.

10. The system of claim 8 , wherein the instructions when translated by the processor further perform:
communicating the share identifier and the permission information associated with the share for the second user from the first data center computer to the second data center computer, the permission information comprising a permission for the second user to view or modify content in the share.

11. The system of claim 8 , wherein the limited user data comprises a name and an email address of the second user.

12. The system of claim 8 , wherein the instructions when translated by the processor further perform:
providing a user interface on a user device of the first user for managing a permission level of the second user.

13. The system of claim 8 , wherein the share is owned by the first user.

14. The system of claim 13 , wherein a file uploaded to the share by the second user is stored in the first data center computer and owned by the first user.

15. A computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor of a first data center computer for:
searching, utilizing information of a second user provided by a first user of the first data center computer, the second user in a database local to the first data center computer;
responsive to the information of the second user not being found in the database local to the first data center computer, searching, through a trusted connection with a second data center computer, the second user in a database local to the second data center computer, the first data center computer and the second data center computer operating distinctly and independently of each other and in different geographical regions that have different data protection or privacy requirements;
generating, utilizing limited user data of the second user stored in the database local to the second data center computer, a unique identifier for the second user;
generating an entry containing the limited user data of the second user and the unique identifier for the second user;
storing the entry in a trust table local to the first data center computer, the entry representing the second user of the second

Assignees

• Open Text Sa Ulc

Inventors

• Beckman Gregory
• O'Toole Ryan Cathal Robert
• Turner Paul

Classifications

• G06F21/6254 Primary

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• G06F16/9535

  Search customisation based on user profiles and personalisation · CPC title

• G06F16/9537

  Spatial or temporal dependent retrieval, e.g. spatiotemporal queries · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title