Selective data transformation and access for secure cloud analytics

摘要

Providing analytics information from a cloud service includes maintaining an analytics database that is separate from data and servers accessed by users of the cloud service, selectively pushing information from the cloud service to the analytics database, where data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database, and allowing users limited access to the analytics database, where users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service. The analytics database may include a first database of adapted database records and a second database of dynamic logs of service related events. The adapted database records may be initially formed using the data and servers accessed by users of the cloud service prior to being pushed to the analytics database.

主权项

1. A method of providing analytics information from a cloud service, comprising:
maintaining an analytics database that is separate from data and servers accessed by users of the cloud service; forming adapted database records by filtering out sensitive information from the data on the servers of the cloud service; selectively pushing the adapted database records from the cloud service to the analytics database, wherein data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database; and allowing users limited access to the analytics database, wherein users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service to prevent access to the sensitive information.