Universal access layer for accessing heterogeneous data stores

Patent metadata

Field	Value
Publication number	US-12182290-B2
Application number	US-202217958677-A
Country	US
Kind code	B2
Filing date	Oct 3, 2022
Priority date	Apr 2, 2020
Publication date	Dec 31, 2024
Grant date	Dec 31, 2024

Abstract

Methods and systems disclosed herein describe a universal access layer that allows a plurality of applications to obtain data and/or information from a plurality of heterogeneous data stores. The universal access layer may include one or more application data objects to validate requests, transform a format of the request, determine which data stores comprise the requested data and/or information, encrypt the request, combine responses into a single response, and retransform the response prior to sending it to the requesting application. By using the universal access layer, applications may improve the speed with which they access data and/or information from the plurality of heterogeneous data stores.

First claim

What is claimed is:

1. A method comprising:
processing one or more requests for a first piece of information and a second piece of information by determining whether the one or more requests complies with a canonical model;
determining, based on the one or more requests complying with the canonical model, whether a device is authorized to access the first piece of information and the second piece of information;
determining that the first piece of information includes personally identifiable information and the second piece of information includes policy data;
determining, based on the device being authorized to access the information, a first location of the first piece of information and a second location of the second piece of information, wherein the first location and the second location are different data stores;
transmitting a first request for the first piece of information to a first data store, the first request being an encrypted request based on the first piece of information including the personally identifiable information;
transmitting a second request for the second piece of information to a second data store, the second request being an unencrypted request based on the second piece of information including the policy data;
combining the first piece of information from the first data store and the second piece of information from the second data store into a response;
transforming the response from the canonical model to a format compatible with the requesting device; and
transmitting, to the device, the transformed response including the first piece of information from the first data store and the second piece of information from the second data store.

2. The method of claim 1 , further comprising:
receiving, by a server computing device, the first piece of information from the first data store; and
receiving, by the server computing device, the second piece of information from the second data store, and wherein the response including the first piece of information and the second piece of information is transmitted from the server computing device.

3. The method of claim 2 , further comprising encrypting, by the server computing device, the first request responsive to the first piece of information including the personally identifiable information.

4. The method of claim 1 , further comprising:
transforming the one or more requests for information into a transformed request based on a determination that the one or more requests does not comply with the canonical model.

5. The method of claim 4 , further comprising verifying an access token included with the one or more requests to determine whether the device is authorized to access the first piece of information or the second piece of information.

6. The method of claim 5 , further comprising parsing, based on verification of the access token, the transformed request to extract a request for information.

7. The method of claim 1 , further comprising:
aggregating, by a server computing device the first piece of information and the second piece of information into the response prior to transmitting the response.

8. The method of claim 1 , further comprising decrypting an encrypted first piece of information received from the first data store prior to combining the first piece of information and the second piece of information into the response.

9. The method of claim 1 , wherein determining the first location of the first piece of information and the second location of the second piece of information further includes:
determining, by a server computing device using a look-up table, the first location of the first piece of information; and
determining, using by the server computing device using the look-up table, the second location of the second piece of information.

10. A server computing device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the server computing device to:
determine whether one or more requests for information received from a computing device complies with a canonical model;
transform, based on a determination that the one or more requests for information does not comply with the canonical model, the one or more requests for information forming a transformed request;
verify an access token included with the one or more requests for information to determine whether the computing device is authorized to access the information;
parse, based on verification of the access token, the transformed request to extract a first request for a first piece of information and a second request for a second piece of information;
transmit the first request for the first piece of information to a first data store, the first request being an encrypted request in response to the first piece of information including personally identifiable information;
transmit the second request for the second piece of information to a second data store, the second request being an unencrypted request in response to the second piece of information omitting the personally identifiable information;
receive the first piece of information from the first data store;
receive the second piece of information from the second data store;
aggregate the first piece of information and the second piece of information into a response;
transform the response from the canonical model to a format compatible with the requesting device; and
transmit, to a computing device, the response including the first piece of information and the second piece of information.

11. The server computing device of claim 10 , wherein determining the first data store and the second data store comprises using a look-up table.

12. The server computing device of claim 10 , wherein the instructions, when executed by the one or more processors, cause the server computing device to:
encrypt, based on a determination that the first request for the first piece of information includes the personally identifiable information, the first request for the first piece of information prior to transmitting the first request to the first data store.

13. The server computing device of claim 10 , wherein the instructions, when executed by the one or more processors, cause the server computing device to:
decrypt an encrypted first piece of information received from the first data store prior to combining the first piece of information and the second piece of information into the response.

14. The server computing device of claim 10 , wherein the instructions, when executed by the one or more processors, cause the server computing device to:
transform the response based on a determination that the one or more requests for information did not comply with the canonical model.

15. One or more non-transitory media storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising:
determining whether a request for a first piece of information and a second piece of information complies with a canonical model;
determining, based on a determination that the request for information complies with the canonical model, whether a device is authorized to access the information;
determining that the first piece of information includes personally identifiable information;
determining, based on the device being authorized to access the information, a first location of the first piece of information and a second location of the second piece of information, wherein the first location and the second location are different data stores;
encrypting a first request for

Assignees

• Allstate Insurance Co

Inventors

• Yang Kevin
• Kamble Hruday
• Gupta Avinash

Classifications

• G06F21/44

  Program or device authentication · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• G06F16/2471

  Distributed queries · CPC title

• G06F16/256

  in federated or virtual databases · CPC title

• G06F16/258

  Data format conversion from or to a database · CPC title