Data computation in a multi-domain cloud environment
A gateway device for implementing data security is described herein. The gateway device is coupled between a client device and a server device, and is configured to receive encoded data and a set of operations from the server device in response to a request for cloud services from the client device. The gateway device is configured to decode the encoded data, and to provide the decoded data and the set of operations to the client device. The client device is configured to perform the set of operations on the decoded data, and to incorporate the operation results into an application or interface corresponding to the requested cloud service. The gateway device is configured to encode the operation result data, and to provide the encoded operation result data to the server device for storage.
1. A gateway device coupled between a client device and a server, the gateway device comprising:
an input configured to intercept encoded data and a set of operation identifiers identifying a first set of operations sent by the server to the client device in response to a request by the client device for cloud services associated with a cloud computation operation, the client device configured to execute an application or interface provided by the server, the server is configured to query the client device or the gateway device to identify available operations before sending the set of operation identifiers;
a hardware processor configured to:
identify a second set of operations based on the first set of operations, wherein the gateway device is unable to perform one or more of the first set of operations and is able to perform each of the second set of operations, and wherein the second set of operations, when performed, produce a computational result similar to the first set of operations, when performed;
perform the second set of operations using the encoded data to produce result data; and
provide the result data to the client device, the client device configured to incorporate the result data into the executed application or interface.
2. The gateway device of claim 1 , wherein the gateway device is configured to intercept the encoded data and the set of operation identifiers before the client device receives the encoded data and the set of operation identifiers.
3. The gateway device of claim 1 , wherein the hardware processor is configured to decode the encoded data to produce decoded data, and to perform the second set of operations on the decoded data to produce the result data.
4. The gateway device of claim 1 , wherein the cloud computation operation comprises a set of computational operations different than the first set of operations and the second set of operations.
5. The gateway device of claim 1 , wherein the server is configured to provide executable code to the gateway device, and wherein the gateway device is configured to execute the code.
6. A method comprising:
intercepting, by a gateway device coupled between a server and a client device, encoded data and a set of operation identifiers identifying a first set of operations sent by the server to the client device in response to a request by the client device for cloud services associated with a cloud computation operation, the client device configured to execute an application or interface provided by the server, the server is configured to query the client device or the gateway device to identify available operations before sending the set of operation identifiers;
identifying, by the gateway device, a second set of operations based on the first set of operations, wherein the gateway device is unable to perform one or more of the first set of operations and is able to perform each of the second set of operations, and wherein the second set of operations, when performed, produce a computational result similar to the first set of operations, when performed;
performing, by the gateway device, the second set of operations using the encoded data to produce result data; and
providing, by the gateway device, the result data to the client device, the client device configured to incorporate the result data into the executed application or interface.
7. The method of claim 6 , wherein the gateway device is configured to intercept the encoded data and the set of operation identifiers before the client device receives the encoded data and the set of operation identifiers.
8. The method of claim 6 , wherein the gateway device is configured to decode the encoded data to produce decoded data, and to perform the second set of operations on the decoded data to produce the result data.
9. The method of claim 6 , wherein the cloud computation operation comprises a set of computational operations different than the first set of operations and the second set of operations.
10. The method of claim 6 , wherein the server is configured to provide executable code to the gateway device, and wherein the gateway device is configured to execute the code.
11. A non-transitory computer-readable storage medium storing executable computer instructions that, when executed by a processor of a gateway device coupled between a server and a client device, cause the processor to perform steps comprising:
intercepting, by the gateway device, encoded data and a set of operation identifiers identifying a first set of operations sent by the server to the client device in response to a request by the client device for cloud services associated with a cloud computation operation, the client device configured to execute an application or interface provided by the server, the server is configured to query the client device or the gateway device to identify available operations before sending the set of operation identifiers;
identifying, by the gateway device, a second set of operations based on the first set of operations, wherein the gateway device is unable to perform one or more of the first set of operations and is able to perform each of the second set of operations, and wherein the second set of operations, when performed, produce a computational result similar to the first set of operations, when performed;
performing, by the gateway device, the second set of operations using the encoded data to produce result data; and
providing, by the gateway device, the result data to the client device, the client device configured to incorporate the result data into the executed application or interface.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the gateway device is configured to intercept the encoded data and the set of operation identifiers before the client device receives the encoded data and the set of operation identifiers.
13. The non-transitory computer-readable storage medium of claim 11 , wherein the gateway device is configured to decode the encoded data to produce decoded data, and to perform the second set of operations on the decoded data to produce the result data.
14. The non-transitory computer-readable storage medium of claim 11 , wherein the cloud computation operation comprises a set of computational operations different than the first set of operations and the second set of operations.