Multi-zone secure artificial intelligence exchange and hub
In general, this disclosure describes a multi-zone secure AI exchange. The multi-zone secure AI exchange may be implemented in a multi-cloud, multi-data center environment, where each zone may be in a different cloud or data center. The multi-zone secure AI exchange may include a data repository, a data exchange, and shared services. The data repository may be configured to store algorithms and datasets, each having a respective owning user. The data exchange may receive datasets and algorithms from the data repository, and may perform the algorithms to produce output data. Each of the data repository, data exchange, and shared services may have a different level of security. The data repository may implement the highest level of security, allowing the owner user, and only the owning user, to control how their data and algorithms move in and out of the data repository, or are changed while in the data repository.
1. A system comprising:
a data repository associated with a first set of one or more security parameters, the data repository configured to store a plurality of datasets and a plurality of algorithms, each of the plurality of datasets associated with a corresponding dataset owner and each of the plurality of algorithms associated with a corresponding algorithm owner;
a data exchange associated with a second set of one or more security parameters, the data exchange configured to:
receive a dataset of the plurality of datasets and an algorithm of the plurality of algorithms, and
selectively allow access to the dataset and the algorithm in accordance with the second set of one or more security parameters,
selectively allow access to result data produced by the algorithm in accordance with a third set of one or more security parameters; and
a shared service associated with a third set of one or more security parameters, the shared service including a marketplace application configured to receive commands from dataset owners and algorithm owners, the commands including commands to grant, to the algorithm, read access to the dataset in the data exchange.
2. The system of claim 1 , wherein the first set of one or more security parameters are configured to provide a higher level of security than the second set of one or more security parameters, and the second set of one or more security parameters are configured to provide a higher level of security than the third set of one or more security parameters.
3. The system of claim 1 , wherein the first set of one or more security parameters are configured to restrict access to each of the plurality of datasets to the corresponding dataset owner and each of the plurality of algorithms to the corresponding algorithm owner.
4. The system of claim 1 , wherein the second set of one or more security parameters are configured to allow access to the corresponding dataset owner of the one or more of the plurality of datasets and the corresponding algorithm owner of the one or more of the plurality of algorithms, and a user granted access by the corresponding dataset owner or the corresponding algorithm owner.
5. The system of claim 1 , wherein the third set of one or more security parameters are configured to allow access to the marketplace application by one or more members, the one or more members including the corresponding dataset owner and the corresponding algorithm owner.
6. The system of claim 1 , further comprising:
a first firewall configured to enforce at least one of the first set of one or more security parameters;
a second firewall configured to enforce at least one of the second set of one or more security parameters; and
a third firewall configured to enforce at least one of the third set of one or more security parameters.
7. The system of claim 1 , wherein the marketplace application is configured to, in response to a transaction request, provision a first space in the data exchange to receive the algorithm, and provision a second space in the data exchange to receive the dataset, wherein the first space is different from the second space and wherein the first space is configured with different security parameters than the second space.
8. The system of claim 1 , wherein the shared services are provided via a public cloud system.
9. The system of claim 1 , wherein the data exchange, the data repository, and the shared services are hosted on different systems from one another.