Granted Patent B2

US 12,505,246 · App. 18/365,494 · Granted Dec 23, 2025

Inventors: Srivatsan Srinivasan (Lake Stevens, WA); Priyadarshni Natarajan (Redmond, WA); Lars F. Joreteg (Eureka, CA); John Jose Anto Gerard Arokiasamy (Chaska, MN)

Assignee: Optum, Inc.

G06F21/6227G06F21/6254G06F2221/2113G06F2221/2141

Abstract

Claims (81)

1 . A computer-implemented method comprising:

receiving, by one or more processors, a federated query from a user device that references one or more data segments from a plurality of third-party data sources;

determining, by the one or more processors, a user identifier associated with the federated query;

determining, by the one or more processors, one or more access controls for the plurality of third-party data sources based on the user identifier;

generating, by the one or more processors, an execution plan for resolving the federated query via one or more executable tasks with respect to the plurality of third-party data sources;

generating, by the one or more processors and using a first portion of the execution plan, result data that comprises information aggregated from the plurality of third-party data sources in accordance with the federated query; and

generating, by the one or more processors and using a second portion of the execution plan, user result data that selectively provides a visual data obfuscation for a portion of the information for the result data in accordance with the one or more access controls for the plurality of third-party data sources.

2 . The computer-implemented method of claim 1 , wherein receiving the federated query comprises:

receiving the federated query via an application programming interface (API) gateway of a federated query system communicatively coupled to the plurality of third-party data sources.

3 . The computer-implemented method of claim 1 , further comprising:

providing a query response with the user result data to the user device to render masked visual data associated with the user result data via a user interface of the user device.

4 . The computer-implemented method of claim 3 , further comprising:

configuring the masked visual data to overlay a visual mask over one or more values of the user result data.

5 . The computer-implemented method of claim 1 , further comprising:

storing the result data in a cache memory; and

based on an attribute set associated with the federated query,

generating a first version of the user result data that masks a first portion of the information for the result data in accordance with the one or more access controls, or

generating a second version of the user result data that masks a second portion of the information for the result data in accordance with the one or more access controls.

6 . The computer-implemented method of claim 1 , further comprising:

determining data policy information associated with the one or more data segments;

generating the one or more access controls based on the data policy information and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data policy information and the user identifier.

7 . The computer-implemented method of claim 1 , further comprising:

receiving data source information from an orchestration engine associated with the plurality of third-party data sources;

generating the one or more access controls based on the data source information and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data source information and the user identifier.

8 . The computer-implemented method of claim 1 , further comprising:

determining data policy information associated with the one or more data segments;

receiving data source information from an orchestration engine associated with the plurality of third-party data sources;

generating the one or more access controls based on the data policy information, the data source information, and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data policy information, the data source information, and the user identifier.

9 . The computer-implemented method of claim 1 , further comprising:

parsing the federated query into a syntax tree representing a sequence for the one or more executable tasks with respect to the plurality of third-party data sources;

configuring the syntax tree based on the one or more access controls; and

generating the execution plan based on the syntax tree associated with the one or more access controls.

10 . A system comprising:

one or more processors; and

one or more memories storing processor-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving a federated query from a user device that references one or more data segments from a plurality of third-party data sources;

determining a user identifier associated with the federated query;

determining one or more access controls for the plurality of third-party data sources based on the user identifier;

generating an execution plan for resolving the federated query via one or more executable tasks with respect to the plurality of third-party data sources;

generating, using a first portion of the execution plan, result data that comprises information aggregated from the plurality of third-party data sources in accordance with the federated query; and

generating, using a second portion of the execution plan, user result data that selectively provides a visual data obfuscation for a portion of the information for the result data in accordance with the one or more access controls for the plurality of third-party data sources.

11 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

providing a query response with the user result data to the user device to render masked visual data associated with the user result data via a user interface of the user device.

12 . The system of claim 11 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

configuring the masked visual data to overlay a visual mask over one or more values of the user result data.

13 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

storing the result data in a cache memory; and

based on an attribute set associated with the federated query,

generating a first version of the user result data that masks a first portion of the information for the result data in accordance with the one or more access controls, or

generating a second version of the user result data that masks a second portion of the information for the result data in accordance with the one or more access controls.

14 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

determining data policy information associated with the one or more data segments;

generating the one or more access controls based on the data policy information and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data policy information and the user identifier.

15 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

receiving data source information from an orchestration engine associated with the plurality of third-party data sources;

generating the one or more access controls based on the data source information and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data source information and the user identifier.

16 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

determining data policy information associated with the one or more data segments;

receiving data source information from an orchestration engine associated with the plurality of third-party data sources;

generating the one or more access controls based on the data policy information, the data source information, and the user identifier; and

generating the user result data in accordance with the one or more access controls associated with the data policy information, the data source information, and the user identifier.

17 . The system of claim 10 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

parsing the federated query into a syntax tree representing a sequence for the one or more executable tasks with respect to the plurality of third-party data sources;

configuring the syntax tree based on the one or more access controls; and

generating the execution plan based on the syntax tree associated with the one or more access controls.

18 . One or more non-transitory computer-readable storage media storing processor-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving a federated query from a user device that references one or more data segments from a plurality of third-party data sources;

determining a user identifier associated with the federated query;

determining a one or more access controls for the plurality of third-party data sources based on the user identifier;

generating an execution plan for resolving the federated query via one or more executable tasks with respect to the plurality of third-party data sources;

generating, using a first portion of the execution plan, result data that comprises information aggregated from the plurality of third-party data sources in accordance with the federated query; and

generating, using a second portion of the execution plan, user result data that selectively provides a visual data obfuscation for a portion of the information for the result data in accordance with the one or more access controls for the plurality of third-party data sources.

19 . The one or more non-transitory computer-readable storage media of claim 18 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

providing a query response with the user result data to the user device to render masked visual data associated with the user result data via a user interface of the user device.

20 . The one or more non-transitory computer-readable storage media of claim 19 , wherein the processor-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

configuring the masked visual data to overlay a visual mask over one or more values of the user result data.

Assignments (2)

Continuity (1)

References Cited (171)