Workday, Inc.

Erol Guney

Denis Gulsen

Eric James Ranstrom

Amir Ali Afghani

Kayla Marie Kimura

Thomas Monir Ghali

Chandni K Dhanjal

A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and transfer the tenant data to the commingling storage unit without transferring the one or more instances of sensitive data, wherein an index identifier is transferred to be stored in the commingling storage unit in place of an instance of sensitive data of the one or more instances of sensitive data.

Secure commingling of tenant isolated data

A system for analytics security includes processor(s) and a readable medium. The readable medium causes the system to perform operations comprising receiving a request for analytics data; determining the analytics data based on the request (the analytics data comprises result(s) of an analytic calculation performed on commingled data and the commingled data comprises tenant data shared by a tenant and other tenant data shared by other tenant(s)); determining security information associated with the analytics data (the security information associated with the analytics data is based on the commingled data used for determining the analytics data); determining permissions associated with the requestor based on the tenant; determining whether the requestor is credentialed based on the security information associated with the analytics data and the permissions associated with the requestor; and providing the analytics data to the requestor based on a determination that the requestor is credentialed.

Security system for benchmark access

A system for an analytic database includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication to build an analytic database. The processor is configured to transfer data to build the analytic database stored in the commingling storage unit, and build the analytic database using the data.

Stateless analytics for commingled tenant isolated data

A system for using a user-defined benchmark calculation includes an interface and a processor. The interface is configured to receive an indication to use the user-defined benchmark calculation from a user associated with a tenant. The processor is configured to perform the user-defined benchmark calculation on commingled data stored in a commingled data storage unit to determine a user-defined benchmark calculation result, where the commingled data storage unit stores tenant data associated with the tenant and other tenant data associated with other tenants. The processor is configured also to provide the user-defined benchmark calculation result.

Benchmark definition using client based tools

A system for a metadata driven catalog definition includes an interface and a processor. The interface is configured to receive an indication to generate a catalog. The processor is configured to traverse a set of data to generate a set of metadata tags, determine a set of sub-categories, wherein a sub-category of the set of subcategories comprises a group of metadata tags associated with the sub-category, and determine a set of categories. A category of the set of categories comprises a group of sub-categories associated with the category. The processor is also configured to provide the catalog comprising a set of filters for filtering data according to the set of categories and the set of sub-categories.

Metadata driven catalog definition

A system for analytics security includes an interface and a processor. The input interface is configured to receive a request for analytics data, where the request is associated with a requestor. The processor is configured to determine security associated with the analytics data, where security associated with the analytics data is based at least in part on commingled data used for determining the analytics data. The processor is also configured to determine permissions associated with the requestor, determine whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor, and in the event it is determined that the requestor is credentialed, provide the analytics data to the requestor.

A system for determining a query ordering includes an input interface and a processor. The input interface is configured to receive a set of commingled data. The commingled data comprises data associated with a plurality of tenants. The input interface is configured to receive a query. The processor is configured to determine an efficient ordering for the query. The efficient ordering for the query is based at least in part on the set of commingled data. The processor is configured to prompt a user for a permission to change an execution ordering for the query in response to the efficient ordering for the query being different from a user indicated ordering for the query.

Multitenant based query plan

A system for performing a computation includes a tenant associated processor; a commingling associated processor; an interface; and a processor. The interface is configured to receive an indication of a computation. The processor is configured to determine a set of computational steps for performing the computation; determine a preprocessing subset, wherein the preprocessing subset comprises a subset of the set of computational steps for execution by the tenant associated processor; and determine a main processing subset, wherein the main processing subset comprises the set of computational steps for execution by the commingling associated processor.

Computation using tenant and commingling processors

A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and indicate to transfer the tenant data to be stored in the commingling storage unit without transferring the one or more instances of sensitive data.

Growing community of inventors

San Ramon, CA, United States of America

Erol Guney