Sharing information between nexuses that use different classification schemes for information access control

Patent metadata

Field	Value
Publication number	US-2018107731-A1
Application number	US-201715830326-A
Country	US
Kind code	A1
Filing date	Dec 4, 2017
Priority date	Oct 22, 2012
Publication date	Apr 19, 2018
Grant date	—

Abstract

Systems and methods for sharing information between distributed computer systems connected to one or more data networks. In particular, a replication system implements methodologies for sharing database information between computer systems where the databases use different classification schemes for information access control.

First claim

1 . A method, comprising:
exporting a first copy of data stored by the first database system to a second database system, the data stored by the first database system subject to a first classification designation used by the first database system for classifying information stored by the first database system; during import of the first copy of the data exported:
mapping the first classification designation to a second classification designation used by the second database system for classifying information stored by the second database system; and
causing the second database system to store a second copy of the data subject to the second classification designation.

2 . The method of claim 1 , further comprising:
exporting a third copy of the data from the second database system to the first database system; and during import of the third copy of the data exported:
causing the first database system to store a fourth copy of the data subject to the first classification designation in the first database system.

3 . The method of claim 1 , further comprising:
modifying the second copy of the data in the second database system to produce changed data in the second database system, the changed data subject to the second classification designation in the second database system; exporting a first copy of the changed data from the second database system to the first database system; and during import of the first copy of the changed data exported:
causing the first database system to store a second copy of the changed data subject to the first classification designation in the first database system.

4 . The method of claim 1 , further comprising:
exporting an origin classification to the second database system, the origin classification exported for the first copy of the data exported; during the import of the first copy of the data exported:
determining that the data stored by the first database system is subject to first classification designation in the first database system based on the origin classification; and
wherein the mapping the first classification designation to the second classification designation is performed responsive to determining that the data stored by the first database system is subject to the first classification designation in the first database system.

5 . The method of claim 1 , further comprising:
after the import of the first copy of the data exported: modifying the data stored in the first database system to produced changed data in the first database system, the changed data subject to the first classification designation in the first database system; exporting a first copy of the changed data from the first database system to the second database system; during import of the first copy of the changed data exported:
mapping the first classification designation to the second classification designation; and
causing the second database system to store a second copy of the changed data subject to the second classification designation in the second database system.

6 . The method of claim 1 , wherein the first copy of the data exported reflects a database information item stored in the first database system.

7 . The method of claim 1 , wherein the first classification designation is stored in an access control list associated with the data in the first database system.

8 . One or more non-transitory computer-readable media storing one or more programs for execution by one or more processors, the one or more processors comprising instructions configured for:
exporting a first copy of data stored by the first database system to a second database system, the data stored by the first database system subject to a first classification designation used by the first database system for classifying information stored by the first database system; during import of the first copy of the data exported:
mapping the first classification designation to a second classification designation used by the second database system for classifying information stored by the second database system; and
causing the second database system to store a second copy of the data subject to the second classification designation.

9 . The one or more non-transitory computer-readable media of claim 8 , the instructions further configured for:
exporting a third copy of the data from the second database system to the first database system; and during import of the third copy of the data exported:
causing the first database system to store a fourth copy of the data subject to the first classification designation in the first database system.

10 . The one or more non-transitory computer-readable media of claim 8 , the instructions further configured for:
modifying the second copy of the data in the second database system to produce changed data in the second database system, the changed data subject to the second classification designation in the second database system; exporting a first copy of the changed data from the second database system to the first database system; and during import of the first copy of the changed data exported:
causing the first database system to store a second copy of the changed data subject to the first classification designation in the first database system.

11 . The one or more non-transitory computer-readable media of claim 8 , the instructions further configured for:
exporting an origin classification to the second database system, the origin classification exported for the first copy of the data exported; during the import of the first copy of the data exported:
determining that the data stored by the first database system is subject to first classification designation in the first database system based on the origin classification; and
wherein the mapping the first classification designation to the second classification designation is performed responsive to determining that the data stored by the first database system is subject to the first classification designation in the first database system.

12 . The one or more non-transitory computer-readable media of claim 8 , the instructions further configured for:
after the import of the first copy of the data exported: modifying the data stored in the first database system to produced changed data in the first database system, the changed data subject to the first classification designation in the first database system; exporting a first copy of the changed data from the first database system to the second database system; during import of the first copy of the changed data exported:
mapping the first classification designation to the second classification designation; and
causing the second database system to store a second copy of the changed data subject to the second classification designation in the second database system.

13 . A computing system, comprising:
one or more processors; storage media; one or more programs stored in the storage media and configured for execution by the one or more processors, the one or more programs comprising instructions configured for: exporting a first copy of data stored by the first database system to a second database system, the data stored by the first database system subject to a first classification designation used by the first database system for classifying information stored by the first database system; during import of the first copy of the data exported:
mapping the first classification designation to a second classification designation used by the second database system for classifying information stored by the second database system; and
causing the se

Assignees

• Palantir Technologies Inc

Inventors

• Ducott Iii Richard Allen
• Garrod John Kenneth
• Tasinga Khan

Classifications

• G06F21/6236

  between heterogeneous systems · CPC title

• G06F16/1837

  Management specially adapted to peer-to-peer storage networks (topology management mechanisms of peer-to-peer networks H04L67/1042) · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F16/27

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title

• G06F16/8358

  Query translation · CPC title