Virtual datacenter private sublets for quarantined access to data
View Patent ↗Technologies are generally described for providing a system that allows data use clients direct access to perform complex analysis on data assets without compromising the assets by sharing the data contained may set up the data assets in virtual datacenters (VDCs) within a physical datacenter and open additional resources within the VDCs to data use clients. The data use clients may be enabled to upload and execute analysis applications with access to valuable data. Data traffic exiting the VDCs through such applications, however, may be controlled by a supervisor that analysis an output and enforces limitations on content and/or volume based on a level of purchased access.
1. A method to control analysis of virtual datacenter managed data, the method comprising:
receiving one or more control rules associated with access to managed data, wherein the one or more control rules are provided by data owners that own the managed data in a datacenter, wherein the one or more control rules include: a prevention limitation and a permission limitation associated with the managed data, and wherein the prevention limitation includes a prevention of bulk transfers of the managed data and the permission limitation includes a contractual permission to avow outputs of the managed data that includes an amount of the managed data from an archive;
receiving task code associated with performing analysis tasks on the managed data from a data use client, wherein the analysis tasks include at least one from a set of: an execution of a complex analysis and a management of a complex search associated with the managed data;
analyzing the received task code to ensure that the received task code meets security rules of the datacenter;
executing the received task code to perform the analysis tasks on the managed data:
controlling delivery of analysis results to the data use client based on the one or more control rues and based on control parameters, wherein the control parameters are derived from the received task code;
storing monitoring the analysis results associated with the managed data; and
providing the monitoring results as a feedback to the data use client.
2. The method according to claim 1 , further comprising; controlling the performance of the analysis tasks based on the one or more control rules.
3. The method according to claim 1 , wherein the delivery of the analysis results is controlled by a gatekeeper of the datacenter, and wherein the gatekeeper that operates the managed data.
4. The method according to claim 3 , further comprising; providing a report associated with the delivery of the analysis results to the data owners, wherein the data owners provide the one or more control rules.
5. The method according to claim 4 , wherein the report includes one or more of a summary of the performed analysis tasks, a summary of analyzed data, and the analyzed data.
6. The method according to claim 4 , wherein the one or more control rules include parameters defined by the data owners for the performance of the analysis tasks.
7. The method according to claim 1 , wherein the managed data is operated through extensible virtual datacenters configured within the datacenters wherein the extensible virtual datacenters operate the managed data.
8. The method according to claim 7 , further comprising: expanding the extensible virtual datacenters in response to receiving additional analysis tasks.
9. The method according to claim 1 , further comprising receiving at least one of custom code and custom parameters to be used in conjunction with the received task code to perform the analysis tasks at the datacenter.
10. An apparatus to control analysis of virtual datacenter managed data, the apparatus comprising:
a memory configured to store instructions;
a communication module; and
a processing unit configured to execute a data delivery control application that controls data traffic between a datacenter and data owners in conjunction with the instructions, wherein the data delivery control application is configured to:
receive one or more control rules associated with access to managed data from the data owners that own the managed data in the datacenter, wherein the one or more control rules include: a prevention limitation, and a permission limitation associated with the managed data, and wherein the prevention limitation includes a prevention of bulk transfers of the managed data and the permission limitation includes a contractual permission to allow outputs of the managed data that includes an amount of the managed data from an archive;
receive task code associated with performing analysis tasks on the managed data from a data use client, wherein the analysis tasks include at least one from a set of: an execution of a complex analysis and a management of a complex search associated with the managed data;
analyze the received task code to ensure that the received task code meets security rules of the datacenter;
execute the received task code to perform the analysis tasks on the managed data; and
control delivery of analysis results to the data use client based on the one or more control rules and based on control parameters, wherein the control parameters are derived from the received task code.
11. The apparatus according to claim 10 , wherein the data delivery control application is further configured to receive from the data owners one or more parameters associated with the one or more control rules received from one of a server of the datacenter operating the managed data and the data owners.
12. The apparatus according to claim 10 , wherein the data delivery control application is further configured to add one of a random delay and an additional filtering process to the delivery of the analysis results.
13. A computer-readable memory device having instructions stored thereon to control analysis of virtual datacenter managed data, the instructions comprising:
receiving one or more control rules associated with access to managed data from data owners that own the managed data in a datacenter, wherein the one or more control rules include: a prevention limitation, and a permission limitation associated with the managed data, and wherein the prevention limitation includes a prevention of bulk transfers of the managed data and the permission limitation includes a contractual permission to allow outputs of the managed data that includes an amount of the managed data from an archive;
receiving task code associated with performing analysis tasks on the managed data from a data use client, wherein the analysis tasks include at least one from a set of: an execution of a complex analysis and a management of a complex search associated with the managed data;
analyzing the received task code to ensure that the received task code meets security rules of the datacenter;
executing the received task code to perform the analysis tasks on the managed data;
controlling delivery of analysis results to the data use client based on control parameters and based on the one or more control rules that limit delivery of the analysis results based on at least one of a content and an amount of the results, wherein the control parameters are derived from the received task code;
storing monitoring results associated with the managed data; and
providing the monitoring results as a feedback to the data use client.
14. The computer-readable memory device of claim 13 , wherein the instructions further comprise:
controlling the performance of the analysis tasks based on the one or more control rules.
15. The computer-readable memory device of claim 13 , wherein the instructions are executed by a gatekeeper of the datacenter that operates the managed data.
16. The computer-readable memory device of claim 15 , wherein the instructions further comprise:
providing a report associated with the delivery of the analysis results to the data owners that provide the one or more control rules.
17. The computer-readable memory device of claim 16 , wherein the one or more control rules include parameters defined by the data owners for the performance of the analysis tasks.
18. The computer-readable memory device of claim 13 , wherein the managed data is operated through extensible virtual datacenters configured within the datacenter that operates the managed data, and the instructions further comprise:
expanding the extensible virtual datacenters in response to receiving additional analysis tasks.
19. The computer-readable memory device of claim 13 , wherein the instructions further comprise:
receiving at least one of custom code and custom parameters to be used in conjunction with the received task code to perform the analysis tasks at the datacenter.
20. The computer-readable memory device of claim 13 , wherein the instructions further comprise:
providing the data owners at least one of a status message and an incoming data use client command as the managed data is analyzed.