Data Certification Process for Cloud Database Platform

Patent metadata

Field	Value
Publication number	US-2025307453-A1
Application number	US-202519236162-A
Country	US
Kind code	A1
Filing date	Jun 12, 2025
Priority date	Dec 14, 2021
Publication date	Oct 2, 2025
Grant date	—

Abstract

Methods, systems, and apparatuses for providing access to records of a database stored on a database server in a cloud database platform are described herein. A data sharing platform may determine a shared view definition for access to the database. The data sharing platform may determine rules that specify criteria that limit access to the records stored by the database. The one or more first rules may be received via a user interface. The data sharing platform may perform, based on the rules, a data access certification process on the records stored by the database to generate a table of certification results. The data sharing platform may generate, based on the table of certification results, and without modifying the records stored by the database, a limited consumer view definition. Based on updates to the records, a new limited consumer view definition may be generated.

First claim

What is claimed is:

1 . A data sharing platform configured to provide access to records of a database stored on a database server, the data sharing platform comprising:
one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the data sharing platform to:
obtain, based on one or more first rules that specify criteria, associated with consumer permissions to access the database via a cloud database platform, that limit consumer access to the records stored by the database, certification results by causing the data sharing platform to:
generate a data certification result for each record stored by the database based on determining, for each record, whether a given record satisfies the criteria of the one or more first rules based on one or more fields of the given record, wherein the data certification result indicates, for each record, whether the record satisfies the criteria of the one or more first rules; and

cause, based on a query, based on the certification results, and without modifying the records stored by the database, a first virtual warehouse provided by the cloud database platform to provide access to a first portion of the records in compliance with the criteria of the one or more first rules and exclude a second portion of the records not in compliance with the criteria of the one or more first rules.

2 . The data sharing platform of claim 1 , wherein the instructions, when executed by the one or more processors, further cause the data sharing platform to:
cause output of a result of the query to a consumer authorized to access the database.

3 . The data sharing platform of claim 1 , wherein the instructions, when executed by the one or more processors, further cause the data sharing platform to:
receive an update to the one or more first rules; obtain, based on the update to the one or more first rules, second certification results; and cause, based on the second certification results, the first virtual warehouse to provide access to a third portion of the records.

4 . The data sharing platform of claim 1 , wherein the instructions, when executed by the one or more processors, cause the data sharing platform to obtain the certification results by further causing the data sharing platform to:
add, to the certification results and based on at least one of the one or more first rules, an indication that a first value in a first field should be replaced with a second value.

5 . The data sharing platform of claim 1 , wherein at least one of the one or more first rules prevent one or more of:
output of invalid values; output of values outside of a predefined range; or output of values that do not match a regular expression pattern.

6 . The data sharing platform of claim 1 , wherein at least one rule of the one or more first rules prevent output of data outside a time period specified by the at least one rule.

7 . The data sharing platform of claim 1 , wherein at least one of the one or more first rules is configured to cause output of an alert based on a determination that more than a predetermined percentage of the records is not output based on the one or more first rules.

8 . A method for providing access to records of a database stored on a database server, the method comprising:
obtaining, based on one or more first rules that specify criteria, associated with consumer permissions to access the database via a cloud database platform, that limit consumer access to the records stored by the database, certification results by:
generating a data certification result for each record stored by the database based on determining, for each record, whether a given record satisfies the criteria of the one or more first rules based on one or more fields of the given record, wherein the data certification result indicates, for each record, whether the record satisfies the criteria of the one or more first rules; and
causing, based on a query, based on the certification results, and without modifying the records stored by the database, a first virtual warehouse provided by the cloud database platform to provide access to a first portion of the records in compliance with the criteria of the one or more first rules and exclude a second portion of the records not in compliance with the criteria of the one or more first rules.

9 . The method of claim 8 , further comprising:
causing output of a result of the query to a consumer authorized to access the database.

10 . The method of claim 8 , further comprising:
receiving an update to the one or more first rules; obtaining, based on the update to the one or more first rules, second certification results; and causing, based on the second certification results, the first virtual warehouse to provide access to a third portion of the records.

11 . The method of claim 8 , wherein the obtaining the data certification results further comprises:
adding, to the certification results and based on at least one of the one or more first rules, an indication that a first value in a first field should be replaced with a second value.

12 . The method of claim 8 , wherein at least one of the one or more first rules prevent one or more of:
output of invalid values; output of values outside of a predefined range; or output of values that do not match a regular expression pattern.

13 . The method of claim 8 , wherein at least one rule of the one or more first rules prevent output of data outside a time period specified by the at least one rule.

14 . The method of claim 8 , wherein at least one of the one or more first rules is configured to cause output of an alert based on a determination that more than a predetermined percentage of the records is not output based on the one or more first rules.

15 . One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors of a data sharing platform, cause the data sharing platform to provide access to records of a database stored on a database server by causing the data sharing platform to:
obtain, based on one or more first rules that specify criteria, associated with consumer permissions to access the database via a cloud database platform, that limit consumer access to the records stored by the database, certification results by causing the data sharing platform to:
generate a data certification result for each record stored by the database based on determining, for each record, whether a given record satisfies the criteria of the one or more first rules based on one or more fields of the given record, wherein the data certification result indicates, for each record, whether the record satisfies the criteria of the one or more first rules; and
cause, based on a query, based on the certification results, and without modifying the records stored by the database, a first virtual warehouse provided by the cloud database platform to provide access to a first portion of the records in compliance with the criteria of the one or more first rules and exclude a second portion of the records not in compliance with the criteria of the one or more first rules.

16 . The non-transitory computer-readable media of claim 15 , wherein the instructions, when executed by the one or more processors, further cause the data sharing platform to:
cause output of a result of the query to a consumer authorized to access the database.

17 . The non-transitory computer-readable media of claim 15 , wherein the instructions, when executed by the one or more p

Assignees

• Capital One Services Llc

Inventors

• Gurram Nagender
• Batra Yudhish
• Salim Syed Shamaz
• Kandukuri Praveen

Classifications

• G06F16/2445

  Data retrieval commands; View definitions · CPC title

• G06F16/256

  in federated or virtual databases · CPC title

• G06F16/24575

  using context · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F16/2365

  Ensuring data consistency and integrity · CPC title