Granted Patent B2

US 12,335,094 · App. 18/048,530 · Granted Jun 17, 2025

Inventors: Sima Nadler (Kochav Ya'ir, IL); Ronen Itshak Kat (Kochav Ya'ir, IL); Michael Factor (Haifa, IL); Shlomit Koyfman (Kiryat Yam, IL); Roee Shlomo (Petah Tikva, IL)

Assignee: International Business Machines Corporation

H04L41/084G06F21/6218

Abstract

Claims (55)

1. A system comprising:

a processor set; and

a computer-readable storage medium having program instructions stored therein;

wherein:

the processor set executes the program instructions, causing the processor set to:

receive, from a user, a specified workload including a request for a dataset;

generate a data plane made up of data plane components, the data plane generated according to required capabilities of the specified workload based on workload metadata, dataset metadata, data plane component metadata, data governance decisions, and information technology (IT) system metrics provided in the specified workload, the workload metadata indicating the requested dataset and a workload context;

generate a plotter of the specified workload, the plotter containing a graph indicating a flow of data among the data plane components from a first data plane component to a second data plane component across a public cloud environment and a private cloud environment and indicating how to deploy and configure the required capabilities in the graph; and

apply the data plane components for the specified workload according to the plotter across a plurality of computing devices belonging to clusters of cloud instances for the public or private cloud environments, the data plane being deployed onto the plurality of computing devices.

2. The system of claim 1 , further causing the processor set to:

automatically process the request for a dataset without using dataset access credentials from the specified workload, the credentials provided directly to the data plane components accessing the dataset.

3. The system of claim 1 , further causing the processor set to:

provide a virtual endpoint to the specified workload for accessing the requested dataset of the specified workload.

4. The system of claim 1 , further causing the processor set to:

determine the required capabilities to be included in the data plane and in which cluster of cloud instances the required capabilities are to be deployed, and the plotter for the specified workload includes a blueprint for each environment and cluster in which data plane components are to be deployed.

5. The system of claim 1 , further causing the processor set to:

receive an updated data governance policy decision and enforce the updated data governance policy decision by restricting access to or altering the dataset with respect to the specified workload.

6. The system of claim 1 , further causing the processor set to:

receive an infrastructure configuration policy with respect to the required capabilities, and generate the data plane based on the infrastructure configuration policy, the data governance decisions, and the workload context.

7. A computer-implemented method comprising:

receiving, from a user device, a specified workload including a request for a dataset;

generating a data plane made up of data plane components, the data plane generated according to required capabilities of the specified workload based on workload metadata, dataset metadata, data plane component metadata, data governance decisions, and information technology (IT) system metrics provided in the specified workload, the workload metadata indicating the requested dataset and a workload context;

generating a plotter of the specified workload, the plotter containing a graph indicating a flow of data among the data plane components from a first data plane component to a second data plane component across a public cloud environment and a private cloud environment and indicating how to deploy and configure the required capabilities; and

applying the data plane components for the specified workload according to the plotter across a plurality of computing devices belonging to clusters of cloud instances for the public or private cloud environments, the data plane being deployed onto the plurality of computing devices.

8. The computer-implemented method of claim 7 , further comprising:

providing a virtual endpoint to the specified workload for accessing the requested dataset of the specified workload.

9. The computer-implemented method of claim 7 , further comprising:

declaring certain capabilities in a data path by:

generating a control plane having information including: a type of a service, capabilities of the service, transforms performed by the service, deployment instructions, and parameters received by the service.

10. The computer-implemented method of claim 7 , further comprising:

indicating a requirement of the specified workload.

11. The computer-implemented method of claim 7 , further comprising:

collecting information on the requested dataset; and

determining relevant governance restrictions regarding actions taken on the requested dataset.

12. The computer-implemented method of claim 11 , further comprising:

determining the required capabilities to be included in the data plane based on the collected information and the relevant governance restrictions.

13. The computer-implemented method of claim 7 , further comprising:

processing the request for the dataset, by providing a virtual path to the user device from which the request was received.

14. The computer-implemented method of claim 7 , further comprising:

automatically processing the request for the dataset without using dataset access credentials from the specified workload, the credentials provided directly to the data plane components accessing the dataset.

15. A computer program product for generating data planes, the computer program product comprising a computer-readable storage medium having program code embodied therewith, the program code executable by a processor to cause the processor to:

receive, from a user, a specified workload including a request for a dataset;

generate a data plane made up of data plane components, the data plane generated according to required capabilities of the specified workload based on workload metadata, dataset metadata, data plane component metadata, data governance decisions, and information technology (IT) system metrics provided in the specified workload, the workload metadata indicating the requested dataset and a workload context;

generate a plotter of the specified workload, the plotter containing a graph indicating a flow of data among the data plane components from a first data plane component to a second data plane component across a public cloud environment and a private cloud environment and indicating how to deploy and configure the required capabilities; and

apply the data plane components for the specified workload according to the plotter across a plurality of computing devices belonging to clusters of cloud instances for the public or private cloud environments, the data plane being deployed onto the plurality of computing devices.

16. The computer program product of claim 15 , further causing the processor to:

declare certain capabilities in a data path by generating a control plane having information including:

a type of service, capabilities of the service, transforms performed by the service, deployment instructions, and parameters received by the service.

17. The computer program product of claim 15 , further causing the processor to:

indicate a requirement of the workload.

18. The computer program product of claim 15 , further causing the processor to:

collect information on the requested dataset; and

determine relevant governance restrictions regarding actions taken on the requested dataset.

19. The computer program product of claim 18 , further causing the processor to:

determine the required capabilities to be included in the data plane based on the collected information and the relevant governance restrictions.

Assignments (1)

Continuity (2)

References Cited (14)