Managing data access via hybrid cloud and multi-cloud data stores

Patent metadata

Field	Value
Publication number	US-12585796-B2
Application number	US-202418761614-A
Country	US
Kind code	B2
Filing date	Jul 2, 2024
Priority date	Jul 2, 2024
Publication date	Mar 24, 2026
Grant date	Mar 24, 2026

Abstract

Managing data access, including receiving, at a front end presentation layer managed, a read/write request associated with data, the server information handling system in communication with the client information handling system; validating, at a business logic layer, the read/write request; identifying, by the business logic layer and from a database layer, a location of data associated with the read/write request that is stored at a data store, the location of the data store distinct from a location of the server information handling system; identifying, by the business logic layer and from the database layer, encryption keys associated with the data; requesting, by the business logic layer and from the data store, the data based on i) the location of the data store storing the data, and ii) the encryption keys associated with the data; providing, by the data store, a response to the read/write request, the response including the data.

First claim

What is claimed is:

1 . A computer-implemented method of managing data access, including:
receiving, at a front end presentation layer of a server information handling system and from a client information handling system, a deployment request for data; receiving, at the front end presentation layer of the server information handling system and from the client information handling system, input indicating the location of storage of the data and encryption keys; updating, by a business logic layer of the server information handling system, a table at the database layer indicating i) the location of storage of the data and ii) the encryption keys; storing, by the database layer of the server information handling system, the data at the data store that is indicated by the location of the user input; receiving, at the front end presentation layer managed by the server information handling system and from the client information handling system, a read/write request associated with the data, the server information handling system in communication with the client information handling system; validating, at the business logic layer of the server information handling system, the read/write request; identifying, by the business logic layer and from a database layer of the server information handling system, a location of data associated with the read/write request that is stored at a data store, the location of the data store distinct from a location of the server information handling system; identifying, by the business logic layer and from the database layer, encryption keys associated with the data; requesting, by the business logic layer and from the data store, the data based on i) the location of the data store storing the data, and ii) the encryption keys associated with the data; and providing, by the data store and to the client information handling system, a response to the read/write request, the response including the data.

2 . The computer-implemented method of claim 1 , wherein the location of the data store is a separate cloud data store distinct from a cloud infrastructure of the server information handling system.

3 . The computer-implemented method of claim 1 , wherein the location of the data store is included by a cloud infrastructure of the client information handling system.

4 . The computer-implemented method of claim 1 , further including:
receiving, at the front end presentation layer managed by the server information handling system and from an additional client information handling system, an additional read/write request associated with additional data, the server information handling system in communication with the additional client information handling system; validating, at the business logic layer management by the server information handling system, the additional read/write request; identifying, by the business logic layer and from the database layer of the server information handling system, a location of the additional data associated with the additional read/write request that is stored at an additional data store, the location of the additional data store distinct from the location of the server information handling system and distinct from the location of the data store; identifying, by the business logic layer and from the database layer, additional encryption keys associated with the additional data; requesting, by the business logic layer and from the additional data store, the additional data based on i) the location of the additional data store storing the additional data, and ii) the additional encryption keys associated with the additional data; and providing, by the additional data store and to the additional client information handling system, an additional response to the additional read/write request, the additional response including the additional data.

5 . An information handling system comprising a processor having access to memory media storing instructions executable by the processor to perform operations, comprising:
receiving, at a front end presentation layer of a server information handling system and from a client information handling system, a deployment request for data; receiving, at the front end presentation layer of the server information handling system and from the client information handling system, input indicating the location of storage of the data and encryption keys; updating, by a business logic layer of the server information handling system, a table at the database layer indicating i) the location of storage of the data and ii) the encryption keys; storing, by the database layer of the server information handling system, the data at the data store that is indicated by the location of the user input; receiving, at the front end presentation layer managed by the server information handling system and from the client information handling system, a read/write request associated with the data, the server information handling system in communication with the client information handling system; validating, at the business logic layer of the server information handling system, the read/write request; identifying, by the business logic layer and from a database layer of the server information handling system, a location of data associated with the read/write request that is stored at a data store, the location of the data store distinct from a location of the server information handling system; identifying, by the business logic layer and from the database layer, encryption keys associated with the data; requesting, by the business logic layer and from the data store, the data based on i) the location of the data store storing the data, and ii) the encryption keys associated with the data; and providing, by the data store and to the client information handling system, a response to the read/write request, the response including the data.

6 . The information handling system of claim 5 , wherein the location of the data store is a separate cloud data store distinct from a cloud infrastructure of the server information handling system.

7 . The information handling system of claim 5 , wherein the location of the data store is included by a cloud infrastructure of the client information handling system.

8 . The information handling system of claim 5 , the operations further including:
receiving, at the front end presentation layer managed by the server information handling system and from an additional client information handling system, an additional read/write request associated with additional data, the server information handling system in communication with the additional client information handling system; validating, at the business logic layer management by the server information handling system, the additional read/write request; identifying, by the business logic layer and from the database layer of the server information handling system, a location of the additional data associated with the additional read/write request that is stored at an additional data store, the location of the additional data store distinct from the location of the server information handling system and distinct from the location of the data store; identifying, by the business logic layer and from the database layer, additional encryption keys associated with the additional data; requesting, by the business logic layer and from the additional data store, the additional data based on i) the location of the additional data store storing the additional data, and ii) the additional encryption keys associated with the additional data; and providing, by the additional data store and to the additional client information handling system, an additional response to the additional read

Assignees

• Dell Products Lp

Inventors

• Chinnu Govindasamy
• Vajravel Gokul Thiruchengode
• Jain Shailesh Hastimal

Classifications

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title