Systems and methods for securely using cloud services on on-premises data
The present disclosure relates to systems and methods for providing cloud-based services securely to on-premises networks or other infrastructure. More particularly, the present disclosure relates to systems and methods for enriching first-party data (e.g., data collected directly by an on-premises server) stored within on-premises networks by enabling the on-premises networks to retrieve and process third-party data stored on cloud-based networks. As a technical benefit, cloud-based services can be performed on the first-party data within the on-premises networks.
1. A computer-implemented method comprising:
receiving, by an on-premises network, an executable code corresponding to one or more cloud-based services;
configuring, by the on-premises network, a private pixel server and a first-party profile database within the on-premises network, based on the executable code, to track interactions between a web server associated with the on-premises network and one or more users within the on-premises network, wherein tracking the interactions enables the first-party profile database to:
collect first-party user data corresponding to each user of the one or more users within the on-premises network; and
generate a virtual private cloud that is accessible by the one or more users with the on-premises network;
storing, by the on-premises network, the first-party user data in the virtual private cloud;
accessing, by the on-premises network, the virtual private cloud to select portions from the first-party user data for which the one or more users have provided consent, wherein the consent enables the selected portions to be uploaded to a cloud-based network;
transmitting, by the on-premises network, the selected portions of the first-party user data to the cloud-based network;
receiving, by the on-premises network from the cloud-based network, third-party user data corresponding to the selected portions of the first-party user data;
enriching, by the on-premises network, the first-party user data with the received third-party user data; and
processing, by the on-premises network, the enriched first-party user data within the on-premises network.
2. The computer-implemented method of claim 1 , wherein the first-party user data is stored at the first-party profile database within the on-premises network in association with first-party user identifiers (IDs) corresponding to the one or more users.
3. The computer-implemented method of claim 1 , wherein the first-party user data cannot be transmitted outside the on-premises network without consent of a user associated with the first-party user data.
4. The computer-implemented method of claim 1 , wherein the third-party user data is collected by the cloud-based network includes aggregated and de-identified online behavior data of the one or more users.
5. The computer-implemented method of claim 1 , further comprising linking the first-party user data to the third-party user data.
6. The computer-implemented method of claim 5 , wherein the linking of the first-party user data to the third-party user data comprises:
determining a first-party user identifier (ID) associated with the first-party user data; and
determining using the first-party user identifier (ID) associated with the first-party user data, one or more third-party user identifiers (IDs) associated the third-party user data.
7. The computer-implemented method of claim 6 , wherein the linking is performed by using one of identity linkage techniques, probabilistic linkage techniques or deterministic linkage techniques.
8. The computer-implemented method of claim 1 , further comprising:
generating, based on the executable code, an interface with the cloud-based network, wherein the interface enables the one or more users within the on-premises network to:
generate access keys that provide the one or more users, access to the first-party user data stored within the on-premises network.
9. The computer-implemented method of claim 8 , wherein the access keys are not shared with users outside the on-premises network.
10. A system, comprising:
an on-premises network;
a cloud-based network; and
a non-transitory computer-readable storage medium containing instructions which, when executed on one or more processors, cause the one or more processors to perform operations including:
receiving, by the on-premises network from the cloud-based network, an executable code corresponding to one or more cloud-based services;
configuring, by the on-premises network, a private pixel server and a first-party profile database within the on-premises network, based on the executable code, to track interactions between a web server associated with the on-premises network and one or more users within the on-premises network, wherein tracking the interactions enables the first-party profile database to:
collect first-party user data corresponding to each user of the one or more users within the on-premises network; and
generate a virtual private cloud that is accessible by the one or more users with the on-premises network;
storing, by the on-premises network, the first-party user data in the virtual private cloud;
accessing, by the on-premises network, the virtual private cloud to select portions from the first-party user data for which the one or more users have provided consent, wherein the consent enables the selected portions to be uploaded to the cloud-based network;
transmitting, by the on-premises network, the selected portions of the first-party user data to the cloud-based network;
receiving, by the on-premises network from the cloud-based network, third-party user data corresponding to the selected portions of the first-party user data;
enriching, by the on-premises network, the first-party user data with the received third-party user data; and
processing, by the on-premises network, the enriched first-party user data within the on-premises network.
11. The system of claim 10 , wherein the first-party user data is stored at the first-party profile database within the on-premises network in association with first-party user identifiers IDs corresponding to the one or more users.
12. The system of claim 10 , wherein the first-party user data cannot be transmitted outside the on-premises network without consent of a user associated with the first-party user data.
13. The system of claim 10 , wherein the third-party user data is collected by the cloud-based network includes aggregated and de-identified online behavior data of the one or more users.
14. The system of claim 10 , wherein the operations further comprise linking the first-party user data to the third-party user data.
15. The system of claim 14 , wherein the linking of the first-party user data to the third-party user data comprises:
determining a first-party user identifier (ID) associated with the first-party user data; and
determining using the first-party user identifier (ID) associated with the first-party user data, one or more third-party user identifiers (IDs) associated the third-party user data.
16. The system of claim 14 , wherein the linking is performed by using identity one of linkage techniques, probabilistic linkage techniques or deterministic linkage techniques.
17. The system of claim 10 , wherein the operations further comprises:
generating, based on the executable code, an interface with the cloud-based network, wherein the interface enables the one or more users within the on-premises network to:
generate access keys that provide the one or more users, access to the first-party user data stored within the on-premises network.
18. The system of claim 17 , wherein the access keys are not shared with users outside the on-premises network.
19. One or more non-transitory computer-readable media having computer-executable instructions stored thereon that, when executed by a processing system, cause the processing system to perform operations comprising:
receiving, by an on-premises network, an executable code corresponding to one or more cloud based services;
configuring, by the on-premises network, a private pixel server and a first-party profile database within the on-premises network, based on the executable code, to track interactions between a web server associated with the on-premises network and one or more users within the on-premises network, wherein tracking the interactions enables the first-party profile database to:
collect first-party user data corresponding to each user of the one or more users within the on-premises network; and
generate a virtual private cloud that is accessible by the one or more users with the on-premises network;
storing, by the on-premises network, the first-party user data in the virtual private cloud;
accessing, by the on-premises network, the virtual private cloud to select portions from the first-party user data for which the one or more users have provided consent, wherein the consent enables the selected portions to be uploaded to a cloud-based network;
transmitting, by the on-premises network, the selected portions of the first-party user data to the cloud-based network;
receiving, by the on-premises network from the cloud-based network, third-party user data corresponding to the selected portions of the first-party user data;
enriching, by the on-premises network, the first-party user data with the received third-party user data; and
processing, by the on-premises network, the enriched first-party user data within the on-premises network.
20. The computer-readable media of claim 19 , wherein the first-party user data is stored at the first-party profile database within the on-premises network in association with first-party user IDs corresponding to the one or more users.