As enterprises and organizations become less centralized, efficient and secure access to propriety data has become a critical goal for network and database administrators. Historically, network and database administrators have been cautious about migrating proprietary data to cloud and/or hosted environments. Concerns include security issues as well as accessibility. These and other considerations are described herein.
It is to be understood that both the following general description and the following detailed description are exemplary and explanatory only and are not restrictive. Methods and systems for improved analytics are provided. A Software as a Service (SaaS) platform may be implemented as a distributed system using a public infrastructure, such as a public cloud, and an on-premises infrastructure, such as a private cloud. A control plane for the SaaS platform may reside in the public cloud, while a data plane for the SaaS platform may reside in the on-premises private cloud.
For example, a first computing device within the public cloud may receive a request to generate a local instance of the platform. The first computing device may determine that the request is valid. The first computing device may send an image file to a second computing device within the private cloud. The image file may comprise one or more analytics tools associated with the platform. The one or more analytics tools may be part of an analytics stack. The first computing device may cause the image file to be installed at the second computing device. Upon installation of the image file, the second computing device may generate the local instance of the platform.
Additional advantages will be set forth in part in the description which follows or may be learned by practice. The advantages will be realized and attained by means of the elements and combinations particularly pointed out in the appended claims.
The accompanying drawings, which are incorporated in and constitute a part of the present description serve to explain the principles of the methods and systems described herein:
As used in the specification and the appended claims, the singular forms “a,” “an,” and “the” include plural referents unless the context clearly dictates otherwise. Ranges may be expressed herein as from “about” one particular value, and/or to “about” another particular value. When such a range is expressed, another configuration includes from the one particular value and/or to the other particular value. Similarly, when values are expressed as approximations, by use of the antecedent “about,” it will be understood that the particular value forms another configuration. It will be further understood that the endpoints of each of the ranges are significant both in relation to the other endpoint, and independently of the other endpoint.
“Optional” or “optionally” means that the subsequently described event or circumstance may or may not occur, and that the description includes cases where said event or circumstance occurs and cases where it does not.
Throughout the description and claims of this specification, the word “comprise” and variations of the word, such as “comprising” and “comprises,” means “including but not limited to,” and is not intended to exclude, for example, other components, integers or steps. “Exemplary” means “an example of” and is not intended to convey an indication of a preferred or ideal configuration. “Such as” is not used in a restrictive sense, but for explanatory purposes.
It is understood that when combinations, subsets, interactions, groups, etc. of components are described that, while specific reference of each various individual and collective combinations and permutations of these may not be explicitly described, each is specifically contemplated and described herein. This applies to all parts of this application including, but not limited to, steps in described methods. Thus, if there are a variety of additional steps that may be performed it is understood that each of these additional steps may be performed with any specific configuration or combination of configurations of the described methods.
As will be appreciated by one skilled in the art, hardware, software, or a combination of software and hardware may be implemented. Furthermore, a computer program product on a computer-readable storage medium (e.g., non-transitory) having processor-executable instructions (e.g., computer software) embodied in the storage medium. Any suitable computer-readable storage medium may be utilized including hard disks, CD-ROMs, optical storage devices, magnetic storage devices, memresistors, Non-Volatile Random Access Memory (NVRAM), flash memory, or a combination thereof.
Throughout this application reference is made to block diagrams and flowcharts. It will be understood that each block of the block diagrams and flowcharts, and combinations of blocks in the block diagrams and flowcharts, respectively, may be implemented by processor-executable instructions. These processor-executable instructions may be loaded onto a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the processor-executable instructions which execute on the computer or other programmable data processing apparatus create a device for implementing the functions specified in the flowchart block or blocks.
These processor-executable instructions may also be stored in a computer-readable memory that may direct a computer or other programmable data processing apparatus to function in a particular manner, such that the processor-executable instructions stored in the computer-readable memory produce an article of manufacture including processor-executable instructions for implementing the function specified in the flowchart block or blocks. The processor-executable instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the processor-executable instructions that execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks.
Blocks of the block diagrams and flowcharts support combinations of devices for performing the specified functions, combinations of steps for performing the specified functions and program instruction means for performing the specified functions. It will also be understood that each block of the block diagrams and flowcharts, and combinations of blocks in the block diagrams and flowcharts, may be implemented by special purpose hardware-based computer systems that perform the specified functions or steps, or combinations of special purpose hardware and computer instructions.
Provided herein are methods and systems for improved analytics. The present methods and systems may provide a more efficient and secure environment for storing, accessing, and using an enterprise's or organization's proprietary data. Proprietary data may include, for example, operational data, historical records, data regarding core elements of products or services, current and historical financial data, private intellectual property data (e.g., material for unfiled patent applications, copyrighted material, trade secrets, etc.), and/or the like.
Historically, enterprises and organizations housed their proprietary data in databases located in many different environments, such as a corporate data warehouse/datamart, a virtual private cloud, a hosted co-location, desktop(s)/laptop(s), and/or or hosted cloud environments. Recently, the need to share proprietary data globally and the added flexibility offered by analytic performance in the cloud have made decisions regarding proprietary data more complicated. Enterprises and organizations must find new ways to share their proprietary data in a global way, while being mindful of the technical and security challenges involved with sending large amounts of data over the Internet.
The present methods and systems provide improvement to existing analytics solutions for proprietary data. For example, a Software as a Service (SaaS) platform may be implemented as a distributed system using a public infrastructure, such as a public cloud, and an on-premises infrastructure, such as a private cloud. A control plane for the platform may reside in the public cloud, while a data plane for the platform may reside in the on-premises private cloud. In this way, the present methods and systems may enable proprietary data to remain within the “castle” walls of an enterprise or an organization, while simultaneously providing access to the data by outside users. The platform contemplated by the present methods and systems may employ a plurality of on-premises “forts” within the confines of an enterprise or an organization. Each of the forts may include all of the necessary tools to provide the power of existing SaaS platforms, such as a complete analytics stack, while keeping proprietary data completely within the enterprise or the organization (e.g., behind a firewall). The plurality of forts may therefore combine the inherent security of storing propriety data on-premises with the power and flexibility of a SaaS platform. The present methods and systems may provide an additional improvement over current solutions by eliminating overhead required by the current solutions with respect to maintaining a complete SaaS orchestration platform, such as Kubernetes™ or one or more Windows™ servers.
The SaaS platform (referred to herein as “the SaaS platform” or simply “the platform”) may include a control plane and a data plane. Elements of the control plane may be maintained by the platform and may be accessed via the public cloud 103. The control plane may be used to monitor and manage elements of the data plane. For example, the control plane may include user authentication and access services. The data plane may be maintained by the enterprise/organization (e.g., the entity associated with the on-premises forts 109). The data plane may be accessed via the on-premises private cloud 113. The data plane may be used to manage on-premises resources (e.g. servers, storage arrays, network interfaces, etc.). For example the data plane may be used to manage the forts 109, one or more databases 111, and/or an analytics backend 107. The one or more databases 111 may house proprietary data for the enterprise/organization. The analytics backend 107 may include software, applications, etc., for storing, managing, manipulating, and/or accessing the proprietary data housed in the one or more databases 111. The data plane may be implemented as a plurality of software agents, APIs, controllers, etc.
Each of the forts 109 may be a local instance of the SaaS platform. The forts 109 may be used to separate the data plane and the control plane in order to allow a user of a user device 105 to access the proprietary data housed in the one or more databases 111 while retaining all of the proprietary data within the private cloud 113 (e.g., within the enterprise/organization). The system 101 may be configured such that the user of the user device 105 may have a seamless experience as they move between content located within the public cloud 103 and the private cloud 113. For example, the user of the user device 105 may use a browser to access content and/or services of the SaaS platform via the public cloud 103. Proprietary data required by the content and/or the services may be accessed via browser calls initiated by the user device's 105 browser. The browser calls for the required proprietary data may be made directly to one or more of the forts 109, even for data uploads. All communications between the SaaS platform via the public could 103 and the forts 109 may be initiated from the forts 109. The forts 109 may push minimal metadata associated with the proprietary data back to the SaaS platform via the public could 103 in order to allow for orchestration between forts 109 and to ensure an exceptional user experience. Additionally, the forts 109 may poll the SaaS platform via the public could 103 on a set interval to retrieve request for scheduled workloads and to allow for asynchronous replication of metadata between the forts 109. Further, the proprietary data and related application files may be stored in the one or more databases 111 to allow for seamless interactions between the forts 109. In this way, the system 101 may ensure that all proprietary data remains within the private cloud 113 and never crosses into the public cloud 103, therefore guaranteeing a natural barrier between the data plane and the control plane.
Deployment of the forts 109 is discussed further below. As described herein, each deployed fort 109 may be a local instance of the SaaS platform, and the analytics backend 107 may include software, applications, etc., of the SaaS platform that may be used for storing, managing, manipulating, and/or accessing the proprietary data housed in the one or more databases 111.
An example data source 102 (e.g., a database), as shown in
Each of the data elements of the database shown in Tables 1-5 of
Additional database structures can be included within the database illustrated as an example herein, with such structures including additional information pertinent to the database such as, in the case of products for example; color, optional packages, etc. Each table can comprise a header row which can identify the various data element types, often referred to as the dimensions or the fields, that are included within the table. Each table can also have one or more additional rows which comprise the various records making up the table. Each of the rows can contain data element values (including null) for the various data element types comprising the record.
Returning to
In the case of a query of the data source 102 (e.g., a query received from a user device/interface) a scope can be defined by the tables included in a SELECT statement (or equivalent) and how these are joined. In an aspect, the SELECT statement can be SQL (Structured Query Language) based. For an Internet search, the scope can be an index of found web pages, for example, organized as one or more tables. A result of scope definition can be a data set.
Once the data has been extracted, a user interface can be generated to facilitate dynamic display of the data. By way of example, a particular view of a particular dataset or data subset generated for a user can be referred to as a state space or a session. The methods and systems can dynamically generate one or more visual representations of the data to present in the state space.
A user can make a selection in the data set, causing a logical inference engine 106 to evaluate a number of filters on the data set. For example, a query on a database that holds data of placed orders, could be requesting results matching an order year of ‘1999’ and a client group be ‘Nisse.’ The selection may thus be uniquely defined by a list of included fields and, for each field, a list of selected values or, more generally, a condition. Based on the selection, the logical inference engine 106 can generate a data subset that represents a part of the scope. The data subset may thus contain a set of relevant data records from the scope, or a list of references (e.g. indices, pointers, or binary numbers) to these relevant data records. The logical inference engine 106 can process the selection and can determine what other selections are possible based on the current selections. In an aspect, flags can enable the logical inference engine 106 to work out the possible selections. By way of example, two flags can be used: the first flag can represent whether a value is selected or not, the second can represent whether or not a value selection is possible. For every click in an application, states and colors for all field values can be calculated. These can be referred to as state vectors, which can allow for state evaluation propagation between tables.
The logical inference engine 106 can utilize an associative model to connect data. In the associative model, all the fields in the data model have a logical association with every other field in the data model. An example data model 301 is shown in
Queries that compare for equality to a string can retrieve values very fast using a hash index. For instance, referring to the tables of
Thus, the logical inference engine 106 can determine a data subset based on user selections. The logical inference engine 106 automatically maintains associations among every piece of data in the entire data set used in an application. The logical inference engine 106 can store the binary state of every field and of every data table dependent on user selection (e.g., included or excluded). This can be referred to as a state space and can be updated by the logical inference engine 106 every time a selection is made. There is one bit in the state space for every value in the symbol table or row in the data table, as such the state space is smaller than the data itself and faster to query. The inference engine will work associating values or binary symbols into the dimension tuples. Dimension tuples are normally needed by a hypercube to produce a result.
The associations thus created by the logical inference engine 106 means that when a user makes a selection, the logical inference engine 106 can resolve (quickly) which values are still valid (e.g., possible values) and which values are excluded. The user can continue to make selections, clear selections, and make new selections, and the logical inference engine 106 will continue to present the correct results from the logical inference of those selections. In contrast to a traditional join model database, the associative model provides an interactive associative experience to the user.
Based on current selections and possible rows in data tables a calculation/chart engine 108 can calculate aggregations in objects forming transient hyper cubes in an application. The calculation/chart engine 108 can further build a virtual temporary table from which aggregations can be made. The calculation/chart engine 108 can perform a calculation (e.g., evaluate an expression in response to a user selection/de-selection) via a multithreaded operation. The state space can be queried to gather all of the combinations of dimensions and values necessary to perform the calculation. In an aspect, the query can be on one thread per object, one process, one worker, combinations thereof, and the like. The expression can be calculated on multiple threads per object. Results of the calculation can be passed to a rendering engine 116 and/or optionally to an extension engine 110.
In an aspect, the chart engine 108 can receive dimensions, expressions, and sorting parameters and can compute a hypercube data structure containing aggregations along the dimensions. For example, a virtual record can be built with a placeholder for all field values (or indices) needed, as a latch memory location. When all values are assigned, the virtual record can be processed to aggregate the fields needed for computations and save the dimension values in a data structure per row of the resulting hypercube. In such a way, the traversal of the database can be done in an arbitrary way, just depending on requirements provided by memory consumption and indexing techniques used for the particular case at hand. An example virtual record is shown in
Optionally, the extension engine 110 can be implemented to communicate data via an interface 112 to an external engine 114. In another aspect, the extension engine 110 can communicate data, metadata, a script, a reference to one or more artificial neural networks (ANNs), one or more commands to be executed, one or more expressions to be evaluated, combinations thereof, and the like to the external engine 114. The interface 112 can comprise, for example, an Application Programming Interface (API). The interface 112 may be accessible by the user device 105 via the public cloud 103. That is, the interface 112 may be hosted/managed by the SaaS platform. The user of the user device 105 may use the interface 112 to access and/or interact with the associative data indexing engine 100. The external engine 114 can comprise one or more data processing applications (e.g., simulation applications, statistical applications, mathematical computation applications, database applications, combinations thereof, and the like). The external engine 114 can be, for example, one or more of MATLAB®, R, Maple®, Mathematica®, combinations thereof, and the like.
In an aspect, the external engine 114 can be local to the associative data indexing engine 100 or the external engine 114 can be remote from the associative data indexing engine 100. The external engine 114 can perform additional calculations and transmit the results to the extension engine 110 via the interface 112. A user can make a selection in the data model of data to be sent to the external engine 114. The logical inference engine 106 and/or the extension engine 110 can generate data to be output to the external engine 114 in a format to which the external engine 114 is accustomed to processing. In an example application, tuples forming a hypercube can comprise two dimensions and one expression, such as (Month, Year, Count (ID)), ID being a record identification of one entry. Then said tuples can be exchanged with the external engine 114 through the interface 112 as a table. If the data comprise births there can be timestamps of the births and these can be stored as month and year. If a selection in the data model will give a set of month-year values that are to be sent out to an external unit, the logical inference engine 106 and/or the extension engine 110 can ripple that change to the data model associatively and produce the data (e.g., set and/or values) that the external engine 114 needs to work with. The set and/or values can be exchanged through the interface 112 with the external engine 114. The external engine 114 can comprise any method and/or system for performing an operation on the set and/or values. In an aspect, operations on the set and/or values by the external engine 114 can be based on tuples (aggregated or not). In an aspect, operations on the set and/or values by the external engine 114 can comprise a database query based on the tuples. Operations on the set and/or values by the external engine 114 can be any transformation/operation of the data as long as the cardinality of the result is consonant to the sent tuples/hypercube result.
In an aspect, tuples that are transmitted to the external engine 114 through the interface 112 can result in different data being received from the external engine 114 through the interface 112. For example, a tuple consisting of (Month, Year, Count (ID)) should return as 1-to-1, m-to-1 (where aggregations are computed externally) or n-to-n values. If data received are not what were expected, association can be lost. Transformation of data by the external engine 114 can be configured such that cardinality of the results is consonant to the sent tuples and/or hypercube results. The amount of values returned can thus preserve associativity.
Results received by the extension engine 110 from the external engine 114 can be appended to the data model. In an aspect, the data can be appended to the data model without intervention of the script engine 104. Data model enrichment is thus possible “on the fly.” A natural work flow is available allowing clicking users to associatively extend the data. The methods and systems disclosed permit incorporation of user implemented functionality into a presently used work flow. Interaction with third party complex computation engines, such as MATLAB® or R, is thus facilitated.
The logical inference engine 106 can couple associated results to the external engine 114 within the context of an already processed data model. The context can comprise tuple or tuples defined by dimensions and expressions computed by hypercube routines. Association is used for determination of which elements of the present data model are relevant for the computation at hand. Feedback from the external engine 114 can be used for further inference inside the inference engine or to provide feedback to the user.
A rendering engine 116 can produce a desired graphical object (charts, tables, etc.) based on selections/calculations. When a selection is made on a rendered object there can be a repetition of the process of moving through one or more of the logical inference engine 106, the calculation/chart engine 108, the extension engine 110, the external engine 114, and/or the rendering engine 116. The user can explore the scope by making different selections, by clicking on graphical objects to select variables, which causes the graphical object to change. At every time instant during the exploration, there exists a current state space, which is associated with a current selection state that is operated on the scope (which always remains the same).
Different export features or tools 118 can be used to publish, export or deploy any output of the associative data indexing engine 100. Such output can be any form of visual representation, including, but not limited to, textual, graphical, animation, audio, tactile, and the like.
As described previously with regard to
The logical inference engine 106 can scan one or more of BTI 302a, 302b, 302c, 302d, and/or 302e and create the BAI 303a, 303b, 303c and/or 303d. The BAI 303a, 303b, 303c and/or 303d can comprise a hash index. The BAI 303a, 303b, 303c and/or 303d can comprise an index configured for connecting attributes in a first table to common columns in a second table. The BAI 303a, 303b, 303c and/or 303d thus allows for identification of rows in the second table which then permits identification of other attributes in other tables. For example, referring to the tables of
Using the BTI 302a, 302b, 302c, 302d, and/or 302e and the BAI 303a, 303b, 303c, and/or 303d, the logical inference engine 106 can generate an index window 304 by taking a portion of the data model 301 and mapping it into memory. The portion of the data model 301 taken into memory can be sequential (e.g., not random). The result is a significant reduction in the size of data required to be loaded into memory.
In an aspect, bidirectional indexing using BTIs can have limits as to how much parallelization can be applied when processing the data model 301. To improve parallelization applied to the data model 301, the logical inference engine 106 can generate bidirectional indexes for partitions for a table in the data model 301. Such bidirectional indexes are hereinafter referred to as “indexlets,” and the partitions for the table corresponding to an indexlet can be referred to as a “datalet.” In an aspect, the logical inference engine 106 can generate indexlets for a given table by partitioning the table into blocks of rows (e.g., datalets). In an aspect, the blocks of rows can be of a same size. In an aspect, a last block of rows can be of a size less than the remaining blocks of rows. In an aspect, after partitioning the blocks of rows, the logical inference engine can generate an indexlet for each of the blocks of rows (e.g., datalets). In an aspect, generating an indexlet for a given block of rows (e.g., datalets) comprises generating a bidirectional index as described above, but limited in scope to the given block of rows (e.g., datalet). An indexlet is the smallest computational unit using a single BTI. BTI's can be used globally, but such global usage impairs scale-out possibilities. Using indexlets thus ensures scalability and distributed use of BTI's.
A representation of a data structure for indexlets is shown in
The inverted index 913 can be generated such that each position in the inverted index 913 corresponds to a row of Table 2 (e.g., first position corresponds to row 1, second position corresponds to row 2, etc.). A value can be entered into each position that reflects the corresponding position 922 for each attribute. Thus, in the inverted index 913, position 1 comprises the value “1” which is the corresponding position 922 value for the attribute “Nisse”, position 2 comprises the value “2” which is the corresponding position 922 value for the attribute “Gullan”, position 3 comprises the value “3” which is the corresponding position 922 value for the attribute “Kalle”, position 4 comprises the value “3” which is the corresponding position 922 value for the attribute “Kalle”, position 5 comprises the value “4” which is the corresponding position 922 value for the attribute “Pekka”, and position 6 comprises the value “1” which is the corresponding position 922 value for the attribute “Nisse”.
A BTI 924 can be generated for the “Product” attribute of Table 2. In an aspect, the BTI 924 can comprise an inverted index 925. In other aspect, the inverted index 925 can be considered a separate structure. The BTI 924 can comprise a row for each unique attribute in the “Product” column of Table 2. Each unique attribute can be assigned a corresponding position 926 in the BTI 924. In an aspect, the BTI 924 can comprise a hash for each unique attribute. The BTI 924 can comprise a column 927 for each row of Table 2. For each attribute, a “1” can indicate the presence of the attribute in the row and a “0” can indicate an absence of the attribute from the row. “0” and “1” are merely examples of values used to indicate presence or absence. Thus, the BTI 924 reflects that the attribute “Toothpaste” is found in row 1 of Table 2, the attribute “Soap” is found in rows 2, 3, and 5 of Table 2 , and the attribute “Shampoo” is found in rows 4 and 6 of Table 2.
By way of example, the inverted index 925 can be generated such that each position in the inverted index 925 corresponds to a row of Table 2 (e.g., first position corresponds to row 1, second position corresponds to row 2, etc.). A value can be entered into each position that reflects the corresponding position 926 for each attribute. Thus, in the inverted index 925, position 1 comprises the value “1” which is the corresponding position 926 value for the attribute “Toothpaste”, position 2 comprises the value “2” which is the corresponding position 926 value for the attribute “Soap”, position 3 comprises the value “2” which is the corresponding position 926 value for the attribute “Soap”, position 4 comprises the value “3” which is the corresponding position 926 value for the attribute “Shampoo”, position 5 comprises the value “2” which is the corresponding position 926 value for the attribute “Soap”, and position 6 comprises the value “3” which is the corresponding position 926 value for the attribute “Shampoo”.
By way of example, a BTI 928 can be generated for the “Product” attribute of Table 1. In an aspect, the BTI 928 can comprise an inverted index 929. In other aspect, the inverted index 929 can be considered a separate structure. The BTI 928 can comprise a row for each unique attribute in the “Product” column of Table 1. Each unique attribute can be assigned a corresponding position 930 in the BTI 928. In an aspect, the BTI 928 can comprise a hash for each unique attribute. The BTI 928 can comprise a column 931 for each row of Table 1. For each attribute, a “1” can indicate the presence of the attribute in the row and a “0” can indicate an absence of the attribute from the row. “0” and “1” are merely examples of values used to indicate presence or absence. Thus, the BTI 928 reflects that the attribute “Soap” is found in row 1 of Table 1, the attribute “Soft Soap” is found in row 2 of Table 1, and the attribute “Toothpaste” is found in rows 3 and 4 of Table 1.
By way of example, the inverted index 929 can be generated such that each position in the inverted index 929 corresponds to a row of Table 1 (e.g., first position corresponds to row 1, second position corresponds to row 2, etc.). A value can be entered into each position that reflects the corresponding position 930 for each attribute. Thus, in the inverted index 929, position 1 comprises the value “1” which is the corresponding position 930 value for the attribute “Soap”, position 2 comprises the value “2” which is the corresponding position 930 value for the attribute “Soft Soap”, position 3 comprises the value “3” which is the corresponding position 930 value for the attribute “Toothpaste”, and position 4 comprises the value “3” which is the corresponding position 930 value for the attribute “Toothpaste”.
By way of example, a BAI 932 can be generated as an index between the product attribute of Table 2 and Table 1. The BAI 932 can comprise a row for each unique attribute in the BTI 924 by order of corresponding position 926. The value in each row can comprise the corresponding position 930 of the BTI 928. Thus, position 1 of the BAI 932 corresponds to “Toothpaste” in the BTI 924 (corresponding position 926 of 1) and comprises the value “3” which is the corresponding position 930 for “Toothpaste” of the BTI 928. Position 2 of the BAI 932 corresponds to “Soap” in the BTI 924 (corresponding position 926 of 2) and comprises the value “1” which is the corresponding position 930 for “Soap” of the BTI 928. Position 3 of the BAI 932 corresponds to “Shampoo” in the BTI 924 (corresponding position 926 of 3) and comprises the value “−1” which indicates that the attribute “Shampoo” is not found in Table 1.
By way of example, a BAI 933 can be created to create an index between the product attribute of Table 1 and Table 2. The BAI 933 can comprise a row for each unique attribute in the BTI 928 by order of corresponding position 930. The value in each row can comprise the corresponding position 926 of the BTI 924. Thus, position 1 of the BAI 933 corresponds to “Soap” in the BTI 928 (corresponding position 930 of 1) and comprises the value “2” which is the corresponding position 926 for “Soap” of the BTI 924. Position 2 of the BAI 933 corresponds to “Soft Soap” in the BTI 928 (corresponding position 930 of 2) and comprises the value “−1” which indicates that the attribute “Soft Soap” is not found in Table 2. Position 3 of the BAI 933 corresponds to “Toothpaste” in the BTI 928 (corresponding position 930 of 3) and comprises the value “1” which is the corresponding position 926 for “Toothpaste” of the BTI 924.
The BTI 920 can be consulted to determine that the attribute “Kalle” has a value of “1” in the column 923 corresponding to rows 3 and 4. In an aspect, the inverted index 913 can be consulted to determine that the user selection 934 relates to the position 922 value of “3” which is found in the inverted index 913 at positions 3 and 4, implicating rows 3 and 4 of Table 1. Following path 935, a row state 936 can be generated to reflect the user selection 934 as applied to the rows of Table 2. The row state 936 can comprise a position that corresponds to each row and a value in each position reflecting whether a row was selected. Thus, position 1 of the row state 936 comprises the value “0” indicating that row 1 does not contain “Kalle”, position 2 of the row state 936 comprises the value “0” indicating that row 2 does not contain “Kalle”, position 3 of the row state 936 comprises the value “1” indicating that row 3 does contain “Kalle”, position 4 of the row state 936 comprises the value “1” indicating that row 4 does contain “Kalle”, position 5 of the row state 936 comprises the value “0” indicating that row 5 does not contain “Kalle”, and position 6 of the row state 936 comprises the value “0” indicating that row 6 does not contain “Kalle”.
Following path 937, the row state 936 can be compared with the inverted index 925 to determine the corresponding position 926 contained in the inverted index 925 at positions 3 and 4. The inverted index 925 comprises the corresponding position 926 value of “2” in position 3 and the corresponding position 926 value of “3” in position 4. Following path 938, the corresponding position 926 values of “2” and “3” can be determined to correspond to “Soap” and “Shampoo” respectively in the BTI 924. Thus, the logical inference engine 106 can determine that both “Soap” and “Shampoo” in Table 2 are associated with “Kalle” in Table 2. The association can be reflected in an inferred state 939 in the BTI 924. The inferred state 939 can comprise a column with a row for each attribute in the BTI 924. The column can comprise a value indicated the selection state for each attribute. The inferred state 939 comprises a “0” for “Toothpaste” indicating that “Toothpaste” is not associated with “Kalle”, the inferred state 939 comprises a “1” for “Soap” indicating that “Soap” is associated with “Kalle”, and inferred state 939 comprises a “1” for “Shampoo” indicating that “Shampoo” is associated with “Kalle”.
Following path 940, the inferred state 939 can be compared to the BAI 932 to determine one or more associations between the selection of “Kalle” in Table 2 and one or more attributes in Table 1. As the inferred state 939 comprises a value of “1” in both position 2 and position 3, the BAI 932 can be assessed to determine the values contained in position 2 and position 3 of the BAI 932 (following path 941). Position 2 of the BAI 932 comprises the value “1” which identifies the corresponding position 930 of “Soap” and position 3 of the BAI 932 comprises the value “−1” which indicates that Table 1 does not contain “Shampoo”. Thus, the logical inference engine 106 can determine that “Soap” in Table 1 is associated with “Kalle” in Table 2. The association can be reflected in an inferred state 942 in the BTI 928. The inferred state 942 can comprise a column with a row for each attribute in the BTI 928. The column can comprise a value indicated the selection state for each attribute. The inferred state 942 comprises a “1” for “Soap” indicating that “Soap” is associated with “Kalle”, the inferred state 942 comprises a “0” for “Soft Soap” indicating that “Soft Soap” is not associated with “Kalle”, and the inferred state 942 comprises a “0” for “Toothpaste” indicating that “Toothpaste” is not associated with “Kalle”. Based on the current state of BTIs and BAIs, if the data sources 102 indicate that an update or delta change has occurred to the underlying data, the BTIs and BAIs can be updated with corresponding changes to maintain consistency.
In aspects implementing indexlets, the logical inference engine 106 can apply query language by first performing intra-table inferencing on respective tables. Intra-table inferencing comprises transferring the imposed state of one field to other fields within the same table. In an aspect, shown in
In an aspect, after performing intra-table inferencing, the logical inference engine 106 can perform inter-table inferencing based on the intra-table inferencing output of a plurality of tables, as is depicted in
The associative data indexing engine 100 may execute one or more steps illustrated in a method 1100 shown in
To increase evaluation speed, each unique value of each data variable in said database can be assigned a different binary code and the data records can be stored in binary-coded form. This can be performed, for example, when the program first reads the data records from the database. For each input table, the following steps can be carried out. The column names, e.g. the variables, of the table can be read (e.g., successively). Every time a new data variable appears, a data structure can be instantiated for the new data variable. An internal table structure can be instantiated to contain some or all the data records in binary form, whereupon the data records can be read (e.g., successively) and binary-coded. For each data value, the data structure of the corresponding data variable can be checked to establish if the value has previously been assigned a binary code. If so, that binary code can be inserted in the proper place in the above-mentioned table structure. If not, the data value can be added to the data structure and assigned a new binary code, for example the next binary code in ascending order, before being inserted in the table structure. In other words, for each data variable, a unique binary code can be assigned to each unique data value.
After having read some or all data records in the database, the method 1100 can analyze the database in a step 1104 to identify all connections between the data tables. A connection between two data tables means that these data tables have one variable in common. In an aspect, step 1104 can comprise generation of one or more bidirectional table indexes and one or more bidirectional associative indexes. In an aspect, generation of one or more bidirectional table indexes and one or more bidirectional associative indexes can comprise a separate step. In another aspect, generation of one or more bidirectional table indexes and one or more bidirectional associative indexes can be on demand. After the analysis, all data tables are virtually connected. In
After this initial analysis, the user can explore the database. In doing so, the user defines in step 1106 a mathematical function, which could be a combination of mathematical expressions. Assume that the user wants to extract the total sales per year and client from the database in
The method 1100 then identifies in step 1108 all relevant data tables, e.g. all data tables containing any one of the selected calculation and classification variables, such data tables being denoted boundary tables, as well as intermediate data tables in the connecting path(s) between these boundary tables in the snowflake structure, such data tables being denoted connecting tables. There are no connecting tables in the present example. In an aspect, one or more bidirectional table indexes and one or more bidirectional associative indexes can be accessed as part of step 1108.
In the present example, all occurrences of every value, e.g. frequency data, of the selected calculation variables can be included for evaluation of the mathematical function. In
Then, a starting table can be selected in step 1110, for example, among the data tables within subset (B). In an aspect, the starting table can be the data table with the largest number of data records in this subset. In
Thereafter, a conversion structure can be built in step 1112. This conversion structure can be used for translating each value of each connecting variable (“Date,” “Product”) in the starting table (Table 2) into a value of a corresponding selected variable (“Year,” “Price”) in the boundary tables (Table 3 and 1, respectively). A table of the conversion structure can be built by successively reading data records of Table 3 and creating a link between each unique value of the connecting variable (“Date”) and a corresponding value of the selected variable (“Year”). It can be noted that there is no link from value 4 (“Date: 1999-01-12”), since this value is not included in the boundary table. Similarly, a further table of the conversion structure can be built by successively reading data records of Table 1 and creating a link between each unique value of the connecting variable (“Product”) and a corresponding value of the selected variable (“Price”). In this example, value 2 (“Product: Toothpaste”) is linked to two values of the selected variable (“Price: 6.5”), since this connection occurs twice in the boundary table. Thus, frequency data can be included in the conversion structure. Also note that there is no link from value 3 (“Product: Shampoo”).
When the conversion structure has been built, a virtual data record can be created. Such a virtual data record accommodates all selected variables (“Client,” “Year,” “Price,” “Number”) in the database. In building the virtual data record, a data record is read in step 1114 from the starting table (Table 2). Then, the value of each selected variable (“Client”, “Number”) in the current data record of the starting table can be incorporated in the virtual data record in a step 1116. Also, by using the conversion structure each value of each connecting variable (“Date”, “Product”) in the current data record of the starting table can be converted into a value of a corresponding selected variable (“Year”, “Price”), this value also being incorporated in the virtual data record.
In step 1118 the virtual data record can be used to build an intermediate data structure. Each data record of the intermediate data structure can accommodate each selected classification variable (dimension) and an aggregation field for each mathematical expression implied by the mathematical function. The intermediate data structure can be built based on the values of the selected variables in the virtual data record. Thus, each mathematical expression can be evaluated based on one or more values of one or more relevant calculation variables in the virtual data record, and the result can be aggregated in the appropriate aggregation field based on the combination of current values of the classification variables (“Client,” “Year”).
The above procedure can be repeated for one or more additional (e.g., all) data records of the starting table. In a step 1120 it can be checked whether the end of the starting table has been reached. If not, the process can be repeated from step 1114 and further data records can be read from the starting table. Thus, an intermediate data structure can be built by successively reading data records of the starting table, by incorporating the current values of the selected variables in a virtual data record, and by evaluating each mathematical expression based on the content of the virtual data record. If the current combination of values of classification variables in the virtual data record is new, a new data record can be created in the intermediate data structure to hold the result of the evaluation. Otherwise, the appropriate data record is rapidly found, and the result of the evaluation is aggregated in the aggregation field.
Thus, data records can be added to the intermediate data structure as the starting table is traversed. The intermediate data structure can be a data table associated with an efficient index system, such as an AVL or a hash structure. The aggregation field can be implemented as a summation register, in which the result of the evaluated mathematical expression is accumulated.
In some aspects, e.g. when evaluating a median, the aggregation field can be implemented to hold all individual results for a unique combination of values of the specified classification variables. It should be noted that only one virtual data record is needed in the procedure of building the intermediate data structure from the starting table. Thus, the content of the virtual data record can be updated for each data record of the starting table. This can minimize the memory requirement in executing the computer program.
After traversing the starting table, the intermediate data structure can contain a plurality of data records. If the intermediate data structure accommodates more than two classification variables, the intermediate data structure can, for each eliminated classification variable, contain the evaluated results aggregated over all values of this classification variable for each unique combination of values of remaining classification variables.
When the intermediate data structure has been built, a final data structure, e.g., a multidimensional cube, as shown in non-binary notation in Table 6 of
In an aspect, step 1122 can involve any of the processes described herein as part of a process for creating the hypercube/multidimensional cube. For example, output from the logical inference engine 106 utilizing one or more BTIs and or one or more A2A indexes can be used in creation of the hypercube/multidimensional cube. When a user makes a selection, the logical inference engine 106 calculates a data subset of which one or more BTIs and/or A2A indexes can be generated and provided to the chart engine 108 for use in generating a hypercube/multidimensional cube and/or evaluating one or more expressions against a hypercube/multidimensional cube via one or more BTIs and/or A2A indexes as described herein.
At step 1126, input from the user can be received. For example, input form the user can be a selection and/or de-selection of the presented results. Optionally, input from the user at step 1126 can comprise a request for external processing. In an aspect, the user can be presented with an option to select one or more external engines to use for the external processing. Optionally, at step 1128, data underlying the user selection can be configured (e.g., formatted) for use by an external engine. Optionally, at step 1130, the data can be transmitted to the external engine for processing and the processed data can be received. The received data can undergo one or more checks to confirm that the received data is in a form that can be appended to the data model. For example, one or more of an integrity check, a format check, a cardinality check, combinations thereof, and the like. Optionally, at step 1132, processed data can be received from the external engine and can be appended to the data model as described herein. In an aspect, the received data can have a lifespan that controls how long the received data persists with the data model. For example, the received data can be incorporated into the data model in a manner that enables a user to retrieve the received data at another time/session. In another example, the received data can persist only for the current session, making the received data unavailable in a future session.
The application can permit a user to explore the scope 1301 by making different selections, by clicking on graphical objects to select variables, which causes the chart result 1303 to change. At every time instant during the exploration, there exists a current state space, which can be associated with a current selection state that is operated on the scope 1301 (which always remains the same).
As illustrated in
As shown in
The identifier ID3 can be formed from ID2 and the relevant chart properties. ID3 can be seen as an identifier for a specific chart generation instance, which can include all information needed to calculate a specific chart result. In addition, a chart result identifier ID4 can be created from the chart result definition, for example a bit sequence that defines the chart result 1303. ID4 can be put in the cache using ID3 as a lookup identifier. Likewise, the chart result definition can be put in the cache using ID4 as a lookup identifier.
Optionally, further calculations, transforming, and/or processing can be included through an extension engine 1307. Optionally, associated results from the inference engine 1304 and further computed by hypercube computation in said calculation/chart engine 1305 can be coupled to an external engine 1308 that can comprise one or more data processing applications (e.g., simulation applications, statistical applications, mathematical computation applications, database applications, combinations thereof, and the like). Context of a data model processed by the inference engine 1304 can comprise a tuple or tuples of values defined by dimensions and expressions computed by hypercube routines. Data can be exchanged through an interface 1309.
The associated results coupled to the external engine 1308 can be intermediate. Further results that can be final hypercube results can also be received from the external engine 1308. Further results can be fed back to be included in the Data/Scope 1301 and enrich the data model. The further results can also be rendered directly to the user in the chart result 1303. Data received from and computed by the external engine 1308 can be used for further associative discovery.
The database as referred to in Tables 1-5 of
The graphical objects (or visual representations) can be substantially any display or output type including graphs, charts, trees, multi-dimensional depictions, images (computer generated or digital captures), video/audio displays describing the data, hybrid presentations where output is segmented into multiple display areas having different data analysis in each area and so forth. A user can select one or more default visual representations; however, a subsequent visual representation can be generated on the basis of further analysis and subsequent dynamic selection of the most suitable form for the data.
In an aspect, a user can select a data point and a visualization component can instantaneously filter and re-aggregate other fields and corresponding visual representations based on the user's selection. In an aspect, the filtering and re-aggregation can be completed without querying a database. In an aspect, a visual representation can be presented to a user with color schemes applied meaningfully. For example, a user selection can be highlighted in green, datasets related to the selection can be highlighted in white, and unrelated data can be highlighted in gray. A meaningful application of a color scheme provides an intuitive navigation interface in the state space.
The result of a standard query can be a smaller subset of the data within the database, or a result set, which is comprised of the records, and more specifically, the data element types and data element values within those records, along with any calculated functions, that match the specified query. For example, as indicated in
As shown in
As discussed herein, the present methods and systems may ensure that all proprietary data remains within the private cloud 113 and never crosses into the public cloud 103, therefore guaranteeing a natural barrier between the data plane and the control plane of the SaaS platform. As described herein, each deployed fort 109 may be a local instance of the SaaS platform. For example, each deployed fort 109 may execute a local instance of the SaaS platform (e.g., the analytics backend 107) within an engine module 109A as described further below. As another example, components/modules of the analytics backend 107 may reside/execute at one or more other computing devices within the private cloud 113 with which each fort 109 may communicate. The analytics backend 107 may include software, applications, etc., of the SaaS platform that may be used for storing, managing, manipulating, and/or accessing the proprietary data housed in the one or more databases 111. The fort 109 may comprise a reload module 109B. The analytics backend 107 may interact with the reload module 109B to pull/retrieve/refresh the proprietary data housed in the one or more databases 111 (e.g., all within the private cloud 113).
Each of the forts 109 may include all of the necessary tools to provide the power of the SaaS platform, such as a complete analytics stack. The analytics stack (e.g., the analytics backend 107) may reside in the engine module 109A of the fort 109. The engine module 109A may comprise one or more components of the associative data indexing engine 100 shown in
To ensure proper functionality of the analytics stack at the forts 109, operational data and metadata relating to the proprietary data may pass between the data plane and control plane of the platform (e.g., transfer to/from the private cloud 113 and the public cloud 103). As noted herein, proprietary data (e.g., data related to the enterprise/organization) may remain within the private cloud 113. Additionally, event data containing private (e.g., customer) information may remain within the private cloud 113. Examples of operational data and metadata relating to the proprietary data that may pass to/from the private cloud 113 and the public cloud 103 may include one or more of the following: version details about the services running in the forts 109, logs and events related to the operation of the forts 109, status updates concerning the forts 109 (e.g., non-operational, critical error, etc.), service level indicator details, information about stale/outdated security keys, data indicating that a service update(s) is outstanding, or data indicating that a security patch(es) or a regular update(s) was successful or unsuccessful. The operational data and metadata may pass to/from the private cloud 113 and the public cloud 103 via the inventory module 109D, the NATS 109E, and/or the bridge module 109F of the fort 109.
While each of the forts 109 may include all of the necessary tools to provide the power of the SaaS platform within the on-premises private cloud 103, some aspects of the platform (e.g., control plane elements) may remain within the public cloud 103. FIG. 16 shows an example system 1600. The system 1600 may include one of the forts 109 and aspects of the platform that reside within the public cloud 103. While the system 1600 shows one fort 109, it is to be understood that the exemplary aspects described with respect to the fort 109 shown in the system 1600 may apply to all of the forts 109. As shown in
The application administration console 1601 of the platform may be responsible for providing an administrator of the platform and/or the private cloud 113 with an interface that to perform configuration and maintenance operations on the forts 109. For example, the application administration console 1601 may be used to register a fort 109 (e.g., register a local instance of the SaaS platform) by providing a configuration file, such as a Privacy Enhanced Mail (PEM) file, via the interface. The configuration file may be provided via the application administration console 1601 in order to start an association between the platform and a newly set up/registered (or updated/recovered) fort 109.
As another example, the application administration console 1601 may allow the administrator to: recover settings associated with the fort 109 or the platform, determine an overall health status of the fort 109, and/or interact with metrics relating to the fort 109 (e.g., operational data and metadata relating to the proprietary data). In some examples, the fort 109 may implemented as a virtual machine (VM) within the private cloud 113. The VM may be comprised of a plurality of analytics services. For example, the VM may include a dedicated Kubernetes™ cluster.
The updater 1602 may allow the administrator to configure the fort 109 and perform certain base operations, such as updating the fort's 109 image file of the platform's analytics stack (e.g., a Docker container) to a latest version thereof. As another example, the updater 1602 may enable the administrator to revert changes made to the fort 109 (e.g., following an update that results in errors). As a further example, the updater 1602 may enable the administrator to make updates to an operating system(s) and/or components of the fort 109. The updater 1602 may push security updates to the fort 109. The updater 1602 may allow updates to be scheduled.
A fort 109 may be created/set up within the private cloud 113 as a virtual machine or cloud-based machine comprising an image file (e.g., a Docker container) of the platform's analytics stack. For example, the image file may contain all the necessary services to run a local instance of the platform within the private cloud 113 (e.g., behind the enterprise's/organization's firewall). The image file may be compatible with any cloud or virtual environment. The application administration console 1601 may be used to download a latest version of the image file from the platform via the public cloud 103. Using the application administration console 1601, the administrator may configure the virtual and/or cloud-based infrastructure in which the forts 109 may operate. For example, the application administration console 1601 may allow the administrator to: configure a size of the local instance(s) of the platform running in the forts 109, configure an amount of system memory necessary to query the one or more database(s) 111, and/or configure a number and sizes of engines of the analytics backed 107 that may be required to query the one or more database(s) 111.
When creating/setting up a fort 109, the application administration console 1601 may require that the administrator attach a configuration file (e.g., a PEM file) that starts a registration/association process between the platform and the created/set up fort 109. The configuration file may comprise cryptographic keys, certificates, and other data for registering/associating the new fort 109 with the platform. The application administration console 1601 may indicate any recently created/set up fort 109 in a list. The administrator may use the application administration console 1601 to create/set up additional forts 109 or create a managed space that points to the recently created/set up fort 109. Other examples of the application administration console 1601 are possible.
As discussed herein, each of the forts 109 may be a local instance of the SaaS platform. The forts 109 may be used to separate the data plane and the control plane in order to allow a user of the user 105 to access the proprietary data housed in the one or more databases 111 while retaining all of the proprietary data within the private cloud 113 (e.g., within the enterprise/organization). The system 101 may be configured such that a user of the user device 105 may have a seamless experience as they move between content located within the public cloud 103 and the private cloud 113. For example, the user of the user device 105 may access content and/or services of the SaaS platform via the public cloud 103 and a browser interface (e.g., an Internet browser application) of the user device 105. Example browser interfaces 1800, 1810, and 1820 of the user device 105 are shown in.
The browser interface 1800 may be associated with the control plane of the SaaS platform. The browser interface 1800 may comprise a plurality of objects 1802A-1802C. The plurality of objects 1802A-1802C may comprise shortcuts, buttons, browser links, etc., that are each associated with content, a service(s), and or an application(s) of the SaaS platform. For example, as shown in the browser interface 1800, a first object 1802A may navigate via the secure session to a public application of the SaaS platform that resides entirely within the public cloud 103 (e.g., all data associated therewith is stored within the public cloud 103).
A second object 1802B (and a third object 1802C—or more) may each be used to navigate via the secure session to private applications that reside within the fort 109. The private applications may each comprise content and/or services of the local instance of the SaaS platform and/or the analytics backend 107 within the fort 109 and/or the private cloud 113. Proprietary data required by the content and/or the services associated with the private application may be accessed via browser calls within the secure session that are initiated at the user device's 105 browser. The browser calls for the required proprietary data may be made directly to the fort 109, the analytics backend 107, and/or another device(s) within the private cloud 113 via the secure session. All communications between the control plane of the SaaS platform within the public could 103 and the fort 109 within the private cloud 113 may be initiated by browser calls made directly to the fort 109 via the secure session. For example,
The user of the user device 105 may interact with the first private application to generate one or more queries associated with the proprietary data stored at the fort 109 and/or the private cloud 113. For example, the first private application may comprise a user interface, similar to the user interface illustrated in
As discussed herein, the present methods and systems may be computer-implemented.
The computing device 1901 and the server 1902 may be a digital computer that, in terms of hardware architecture, generally includes a processor 1908, system memory 810, input/output (I/O) interfaces 1912, and network interfaces 1914. These components (808, 1910, 1912, and 1914) are communicatively coupled via a local interface 1916. The local interface 1916 may be, for example, but not limited to, one or more buses or other wired or wireless connections, as is known in the art. The local interface 1916 may have additional elements, which are omitted for simplicity, such as controllers, buffers (caches), drivers, repeaters, and receivers, to enable communications. Further, the local interface may include address, control, and/or data connections to enable appropriate communications among the aforementioned components.
The processor 1908 may be a hardware device for executing software, particularly that stored in system memory 810. The processor 1908 may be any custom made or commercially available processor, a central processing unit (CPU), an auxiliary processor among several processors associated with the computing device 1901 and the server 1902, a semiconductor-based microprocessor (in the form of a microchip or chip set), or generally any device for executing software instructions. When the computing device 1901 and/or the server 1902 is in operation, the processor 1908 may be configured to execute software stored within the system memory 810, to communicate data to and from the system memory 1910, and to generally control operations of the computing device 1901 and the server 1902 pursuant to the software.
The I/O interfaces 1912 may be used to receive user input from, and/or for providing system output to, one or more devices or components. User input may be provided via, for example, a keyboard and/or a mouse. System output may be provided via a display device and a printer (not shown). I/O interfaces 1912 may include, for example, a serial port, a parallel port, a Small Computer System Interface (SCSI), an infrared (IR) interface, a radio frequency (RF) interface, and/or a universal serial bus (USB) interface.
The network interface 1914 may be used to transmit and receive from the computing device 1901 and/or the server 1902 on the network 1904. The network interface 1914 may include, for example, a 8BaseT Ethernet Adaptor, a 80BaseT Ethernet Adaptor, a LAN PHY Ethernet Adaptor, a Token Ring Adaptor, a wireless network adapter (e.g., WiFi, cellular, satellite), or any other suitable network interface device. The network interface 1914 may include address, control, and/or data connections to enable appropriate communications on the network 1904.
The system memory 1910 may include any one or combination of volatile memory elements (e.g., random access memory (RAM, such as DRAM, SRAM, SDRAM, etc.)) and nonvolatile memory elements (e.g., ROM, hard drive, tape, CDROM, DVDROM, etc.). Moreover, the system memory 1910 may incorporate electronic, magnetic, optical, and/or other types of storage media. Note that the system memory 1910 may have a distributed architecture, where various components are situated remote from one another, but may be accessed by the processor 1908.
The software in system memory 810 may include one or more software programs, each of which comprises an ordered listing of executable instructions for implementing logical functions. In the example of
For purposes of illustration, application programs and other executable program components such as the operating system 1918 are shown herein as discrete blocks, although it is recognized that such programs and components may reside at various times in different storage components of the computing device 1901 and/or the server 1902. Any of the disclosed methods may be performed by computer readable instructions embodied on computer readable media. Computer readable media may be any available media that may be accessed by a computer. By way of example and not meant to be limiting, computer readable media may comprise “computer storage media” and “communications media.” “Computer storage media” may comprise volatile and non-volatile, removable and non-removable media implemented in any methods or technology for storage of information such as computer readable instructions, data structures, program modules, or other data. Exemplary computer storage media may comprise RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which may be used to store the desired information and which may be accessed by a computer.
At step 2010, a first computing device may receive a request to generate a local instance of a platform. The first computing device may be within a public cloud associated with the platform, such as the public cloud 103. The request may be received by the first computing device from a user associated with an on-premises private cloud, such as the private cloud 113. For example, the user may send the request via a user interface, such as the application administration console 1601.
At step 2020, the first computing device may determine that the request is valid. For example, the request may comprise a configuration file. The configuration file may comprise a certificate, such as a Privacy Enhanced Mail (PEM) file. Determining that the request is valid may comprise determining that one or more cryptographic keys within the configuration file are valid. At step 2030, the first computing device may send an image file. For example, the second computing device may be one of a plurality of forts (e.g., the forts 109) within the on-premises private cloud. The image file may comprise one or more analytics tools associated with the platform. The one or more analytics tools may be part of an analytics stack, such as the associative data indexing engine 100 described herein.
At step 2030, the first computing device may cause the image file to be installed at the second computing device. For example, the image file be installed at the second computing device within a virtual machine or cloud-based environment within the private cloud 113. Upon installation of the image file, the second computing device may generate the local instance of the platform.
The first computing device, such as the user device 105 described herein, may interact with a control plane of a SaaS platform. A user of the first computing device may access content and/or services of the SaaS platform via the control plane and a browser (e.g., an Internet browser application) of the first computing device. At step 2110, the first computing device may establish a secure session with the control plane (e.g., content and/or services) of the SaaS platform. For example, the first computing device may establish the secure session with the control plane via a public cloud (e.g., the public cloud 103). The secure session may comprise a HTTPS session, a Message Queuing Telemetry Transport (MQTT) session, use of one or more WebSockets, etc. The secure session may facilitate communications between the second computing device and the first user device via the public cloud and a private cloud. The second computing device may reside within the private cloud (e.g., the private cloud 113). The first computing device may establish the secure session with the control plane via the browser. For example, a first browser interface (e.g., the browser interface 1800) may comprise an address bar (e.g., the address bar 1804). At step 2120, the first computing device may receive, via the address bar of the browser, a first Uniform Resource Locator (URL) (e.g., the first URL 1806). The first URL may be configured to access the control plane via the public cloud and the secure session. The first URL may comprise a public domain/address associated with the public cloud and the SaaS platform, such as “http://hosted.us.public-cloud.xxx.”
The first browser interface may be associated with the control plane of the SaaS platform. The first browser interface may comprise a plurality of objects (e.g., the plurality of objects 1802A-1802C) The plurality of objects may comprise shortcuts, buttons, browser links, etc., that are each associated with content, a service(s), and or an application(s) of the SaaS platform. The first computing device may receive a selection of a first object of the plurality of objects (e.g., via the browser interface). The selection of the first object may cause the first computing device to communicate with the second computing device via the first private application and the secure session. For example, selection of the first object (e.g., the first object 1802B) may navigate via the secure session to the first private application that resides within the second computing device and/or the private cloud. The first private application may comprise content and/or services of a local instance of the SaaS platform. Proprietary data required by the content and/or the services associated with the private application may be accessed via browser calls within the secure session that are initiated at the browser. The selection of the first object may cause the browser to navigate to a private URL (e.g., the third URL 1809) associated with the first private application. The private URL may comprise a private domain/address associated with the private cloud and/or the second computing device.
At step 2130, the first computing device may send one or more commands to the first private application via the secure session. The one or more commands may comprise the browser calls within the secure session that are initiated at the browser. The browser calls for any required proprietary data may be made directly to the second computing within the private cloud via the secure session. For example, the user of the first computing device may interact with the first private application to generate one or more queries associated with the proprietary data stored at the second computing device and/or the private cloud. The one or more commands may be associated with the one or more queries.
A user interface of the first private application may allow the user of the first computing device to indicate a selection of the proprietary data to be analyzed (e.g., via selection of list boxes and other selection tools in the user interface). The selection of the proprietary data, similar to the selection 1300 described herein, may operate on a scope (e.g., the scope 1301) of the proprietary data to generate a data subset (e.g., the data subset 1302). The data subset can form a state space, which may be based on a selection state associated with the selection. For example, the selection state (or “user state”) can be defined by the user clicking on list boxes and graphs in the user interface of the first private application (e.g., via the user device 105 and the secure session). The user interface of the first private application can be designed to host a number of graphical objects (charts, tables, etc.) that cause an evaluation(s) within/by the second computing device of one or more mathematical functions (also referred to as an “expression”) on the data subset for one or more dimensions of the data (e.g., classification variables) as indicated by the selection.
An engine module of the second computing device (e.g., the engine module 109A of the fort 109) may evaluate the one or more mathematical functions on the data subset using the one or more components of the associative data indexing engine 100, which may reside as a local instance of the SaaS platform within the engine module. In this way, the engine module may process selections, queries, evaluations, and visualizations in the same manner as described herein as it relates to the associative data indexing engine 100. The first private application may determine a result of an evaluation associated with the one or more commands. The result of the evaluation may be sent to the first computing device. The result of the evaluation may comprise metadata associated with the proprietary data stored at the second computing device and/or the private cloud. For example, the metadata may comprise one or more summations, aggregations, and/or dimensions associated with the proprietary data (e.g., rather than “raw” values of the individual records of the proprietary data). At step 2140, the first computing device may receive the result of the evaluation. The result of the evaluation may comprise a visualization, such as the chart result 1303 described herein, which may comprise a multidimensional cube output as one or more the graphical objects. At step 2150, the first computing device may output the result of the evaluation. For example, the first computing device may output the result of the evaluation as a chart, a graph, or any other suitable visualization. The result of the evaluation may pass from the private cloud and the second computing device to the public cloud and the first computing device via the secure session. However, the corresponding proprietary data required to process the evaluation and output the visualization may not pass to the public cloud or the first computing device. In this way, the proprietary data remains within the private cloud and never crosses into the public cloud, therefore providing a barrier between the public elements of the SaaS platform and the private cloud.
While specific configurations have been described, it is not intended that the scope be limited to the particular configurations set forth, as the configurations herein are intended in all respects to be possible configurations rather than restrictive. Unless otherwise expressly stated, it is in no way intended that any method set forth herein be construed as requiring that its steps be performed in a specific order. Accordingly, where a method claim does not actually recite an order to be followed by its steps or it is not otherwise specifically stated in the claims or descriptions that the steps are to be limited to a specific order, it is in no way intended that an order be inferred, in any respect. This holds for any possible non-express basis for interpretation, including: matters of logic with respect to arrangement of steps or operational flow; plain meaning derived from grammatical organization or punctuation; the number or type of configurations described in the specification.
It will be apparent to those skilled in the art that various modifications and variations may be made without departing from the scope or spirit. Other configurations will be apparent to those skilled in the art from consideration of the specification and practice described herein. It is intended that the specification and described configurations be considered as exemplary only, with a true scope and spirit being indicated by the following claims.
This application claims priority to U.S. Provisional App. No. 63/094,562, which was filed on Oct. 21, 2020, and is incorporated by reference in its entirety herein.
Number | Date | Country | |
---|---|---|---|
63094562 | Oct 2020 | US |