Using smart contracts to manage hyper protect database as a service
Building and using a smart contract in order to resolve the isolation between database users and service operators for hyper-protect database as a service (DBaaS). The use of the smart contract in the hyper-protect DBaaS environment allows the service operator to perform operations on sensitive and secure data in the database owned by a user without necessarily revealing the content of the sensitive and secure data.
1. A computer-implemented method (CIM) comprising:
providing a hyper-protect secure container, with the hyper-protect secure container including a plurality of access layers, with at least a first access layer being accessible by a database user and a second access layer being accessible by a service operator;
identifying a group of managed objects within the hyper-protect secure container that can be managed by a smart contract;
creating the smart contract, with the smart contract including information indicative of a set of user specified instructions for managing the group of managed objects within the hyper-protect secure container, wherein the smart contract includes additional instructions for various functions comprising performing a backup and restore function on data stored in the hyper-protect secure container and monitoring and alerting the database user with respect to meaningful changes to the data;
receiving an agreement between the database user and the service operator to deploy the smart contract to manage the hyper-protect secure container; and
performing, by the smart contract, the set of user specified instructions for the group of managed objects within the hyper-protect secure container.
2. The CIM of claim 1 wherein a first instruction of the set of user specified instructions for the group of managed objects is validating a first condition to execute the smart contract.
3. The CIM of claim 1 wherein a second instruction of the set of user specified instructions for the group of managed objects is validating a first input to execute the smart contract.
4. The CIM of claim 1 wherein a third instruction of the set of user specified instructions for the group of managed objects is validating a first output to execute the smart contract.
5. The CIM of claim 1 wherein a fourth instruction of the set of user specified instructions is generating a filtered output for the database user.
6. The CIM of claim 1 wherein a fifth instruction of the set of user specified instructions is generating a filtered output for the service operator.
7. A computer program product (CPP) comprising:
a machine readable storage device; and
computer code stored on the machine readable storage device, with the computer code including instructions and data for causing a processor(s) set to perform operations including the following:
providing a hyper-protect secure container, with the hyper-protect secure container including a plurality of access layers, with at least a first access layer being accessible by a database user and a second access layer being accessible by a service operator,
identifying a group of managed objects within the hyper-protect secure container that can be managed by a smart contract,
creating the smart contract, with the smart contract including information indicative of a set of user specified instructions for managing the group of managed objects within the hyper-protect secure container, wherein the smart contract includes additional instructions for various functions comprising performing a backup and restore function on data stored in the hyper-protect secure container and monitoring and alerting the database user with respect to meaningful changes to the data,
receiving an agreement between the database user and the service operator to deploy the smart contract to manage the hyper-protect secure container, and
performing, by the smart contract, the set of user specified instructions for the group of managed objects within the hyper-protect secure container.
8. The CPP of claim 7 wherein a first instruction of the set of user specified instructions for the group of managed objects is validating a first condition to execute the smart contract.
9. The CPP of claim 7 wherein a second instruction of the set of user specified instructions for the group of managed objects is validating a first input to execute the smart contract.
10. The CPP of claim 7 wherein a third instruction of the set of user specified instructions for the group of managed objects is validating a first output to execute the smart contract.
11. The CPP of claim 7 wherein a fourth instruction of the set of user specified instructions is generating a filtered output for the database user.
12. The CPP of claim 7 wherein a fifth instruction of the set of user specified instructions is generating a filtered output for the service operator.
13. A computer system (CS) comprising:
a processor(s) set;
a machine readable storage device; and
computer code stored on the machine readable storage device, with the computer code including instructions and data for causing the processor(s) set to perform operations including the following:
providing a hyper-protect secure container, with the hyper-protect secure container including a plurality of access layers, with at least a first access layer being accessible by a database user and a second access layer being accessible by a service operator,
identifying a group of managed objects within the hyper-protect secure container that can be managed by a smart contract,
creating the smart contract, with the smart contract including information indicative of a set of user specified instructions for managing the group of managed objects within the hyper-protect secure container, wherein the smart contract includes additional instructions for various functions comprising performing a backup and restore function on data stored in the hyper-protect secure container and monitoring and alerting the database user with respect to meaningful changes to the data,
receiving an agreement between the database user and the service operator to deploy the smart contract to manage the hyper-protect secure container, and
performing, by the smart contract, the set of user specified instructions for the group of managed objects within the hyper-protect secure container.
14. The CS of claim 13 wherein a first instruction of the set of user specified instructions for the group of managed objects is validating a first condition to execute the smart contract.
15. The CS of claim 13 wherein a second instruction of the set of user specified instructions for the group of managed objects is validating a first input to execute the smart contract.
16. The CS of claim 13 wherein a third instruction of the set of user specified instructions for the group of managed objects is validating a first output to execute the smart contract.
17. The CS of claim 13 wherein a fourth instruction of the set of user specified instructions is generating a filtered output for the database user.
18. The CS of claim 13 wherein a fifth instruction of the set of user specified instructions is generating a filtered output for the service operator.