IP Library › Granted Patent US 12711261
Granted Patent B2
US 12711261 · App. 18/654,267 · Granted Aug 18, 2026

Sovereign data center staging area

Inventor: Eden Grail Adogla (Seattle, WA)
Assignee: Oracle International Corporation
G06F21/6218G06F21/6236G06F2221/2111G06F2221/2147
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12711261
App. No.
18/654,267
Granted
Aug 18, 2026
Kind
B2
Abstract

Techniques are described for data management. An example method can include detecting data from a second data center in a second region, the data stored in an isolated environment of the first data center. The method can further include determining a validation parameter based at least in part on the first region. The method can further include validating the data based at least in part on the validation parameter. The method can further include processing a first message indicating to release the data from the isolated environment of the isolated environment. The method can further include causing the data to be released from the isolated environment based at least in part on the validating, the first message to release the data, and the second message that the first message originated in the first region.

Claims (57)

1 . A computer-implemented method, comprising:

detecting, by a computing system of a first data center in a first region, data from a second data center in a second region, the data stored in an isolated environment of the first data center;

determining, by the first data center of the computing system, a validation parameter based at least in part on the first region;

validating, by a data valve of the computing system, the data based at least in part on the validation parameter, the data valve implemented between the first data center and the second data center and comprising at least one of a bare metal server or a network interface controller;

processing, by the data valve of the computing system, a first message indicating to release the data from the isolated environment of the isolated environment;

processing, by the data valve the computing system, a second message indicating that the first message originated from a computing device located in the first region; and

causing, by the computing system, the data to be released from the isolated environment based at least in part on the validating, the first message to release the data, and the second message that the first message originated in the first region.

2 . The computer-implemented method of claim 1 , wherein the method further comprises:

selecting a validation technique to be used to validate the data based at least in part on the first region.

3 . The computer-implemented method of claim 1 , wherein causing the data from the isolated environment to be released comprises:

causing the data to be released from the isolated environment to a data base at the first data center.

4 . The computer-implemented method of claim 1 , wherein the method further comprising:

receiving the data from an intermediate computing system via a secure pipeline.

5 . The computer-implemented method of claim 4 , wherein the method further comprises:

causing the data to be inaccessible to the intermediate computing system and a during while validating the data.

6 . The computer-implemented method of claim 1 , wherein the method further comprises:

transmitting, to a human resources system in the second region, a request to determine authorization to transmit the first message, wherein the data is released from the isolated environment is based at least in part on the authorization.

7 . The computer-implemented method of claim 1 , wherein validating the data based at least in part on the validation parameter comprises:

mapping the data to a validation technique, wherein the data is validated using the validation technique.

8 . A computing system of a first data center in a first region, the computing system comprising:

one or more processors; and

one or more computer-readable media having stored thereon a set of instructions that, when executed by the one or more processors, cause the one or more processors to:

detect data from a second data center in a second region stored in an isolated environment of the first data center in a first;

determine by the first data center, a validation parameter based at least in part on the first region;

validate, by a data valve, the data based at least in part on the validation parameter, the data valve implemented between the first data center and the second data center;

process, by the data valve, a first message indicating to release the data from the isolated environment of the isolated environment;

process, by the data valve, a second message indicating that the first message originated from a computing device located in the first region; and

cause the data to be released from the isolated environment based at least in part on the validating, the first message to release the data, and the second message that the first message originated in the first region.

9 . The computing system of claim 8 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

select a validation technique to be used to validate the data based at least in part on the first region.

10 . The computing system of claim 8 , wherein causing the data from the isolated environment to be released comprises:

causing the data to be released from the isolated environment to a data base at the first data center.

11 . The computing system of claim 8 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

receiving the data from an intermediate computing system via a secure pipeline.

12 . The computing system of claim 11 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

causing the data to be inaccessible to the intermediate computing system and a during while validating the data.

13 . The computing system of claim 8 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

transmitting, to a human resources system in the second region, a request to determine authorization to transmit the first message, wherein the data is released from the isolated environment is based at least in part on the authorization.

14 . The computing system of claim 8 , wherein validating the data based at least in part on the validation parameter comprises:

mapping the data to a validation technique, wherein the data is validated using the validation technique.

15 . One or more non-transitory computer-readable media having stored thereon a set of instructions that, when executed by one or more processors of a first data center in a first region, cause the one or more processors to:

detect data from a second data center in a second region, the data stored in an isolated environment of the first data center, the computing system being of a first data center in a first region;

determine, by the first data center, a validation parameter based at least in part on the first region;

validate, by a data valve, the data based at least in part on the validation parameter, the data valve implemented between the first data center and the second data center and comprising at least one of a bare metal server or a network interface controller;

process, by the data valve a first message indicating to release the data from the isolated environment of the isolated environment;

process, by the data valve, a second message indicating that the first message originated from a computing device located in the first region; and

cause the data to be released from the isolated environment based at least in part on the validating, the first message to release the data, and the second message that the first message originated in the first region.

16 . The one or more non-transitory computer-readable media of claim 15 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

select a validation technique to be used to validate the data based at least in part on the first region.

17 . The one or more non-transitory computer-readable media of claim 15 , wherein causing the data from the isolated environment to be released comprises:

causing the data to be released from the isolated environment to a data base at the first data center.

18 . The one or more non-transitory computer-readable media of claim 15 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

receiving the data from an intermediate computing system via a secure pipeline.

19 . The one or more non-transitory computer-readable media of claim 18 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

causing the data to be inaccessible to the intermediate computing system and a during while validating the data.

20 . The one or more non-transitory computer-readable media of claim 15 , wherein the instructions that, when executed by the one or more processors, further cause the one or more processors to:

transmitting, to a human resources system in the second region, a request to determine authorization to transmit the first message, wherein the data is released from the isolated environment is based at least in part on the authorization.