Storing information in a trusted environment for use in processing data triggers in an untrusted environment

摘要

A server system having memory and one or more processors running a trusted internal process receives, from an untrusted external process of one or more external processes, a request to interact with a data item. In response to the request, the server system interacts with the first data item and stores a marker indicative of the interaction with the data item. After storing the marker, the server system identifies a plurality of markers corresponding to a plurality of data items and retrieves information corresponding to the plurality of markers. The retrieved information enables a determination, for each data item in the plurality of data items, as to whether an operation corresponding to the data item is to be executed. When a determination has been made that an operation corresponding to the data item is to be executed, the server system deletes the markers in conjunction with execution of the operation.

主权项

1. A method performed by one or more internal processes running on a computer system having one or more processors and memory comprising:
receiving, from a first external process of one or more external processes, a first request to interact with a first data item stored in a database; in response to the first request:
performing a first interaction with the first data item in accordance with the first request;storing, at a location in the database that is associated with the first data item, a first marker indicative of the first interaction with the first data item; andstoring a reference to the first marker in an index, wherein the index comprises a plurality of references, each respective reference in the plurality of references corresponding to a particular marker; and after storing the first marker:
identifying, in the database, a plurality of markers corresponding to a plurality of data items stored in the database, the plurality of markers including the first marker, wherein identifying the plurality of markers includes retrieving, via the index, information with respect to the plurality of markers;retrieving, from the database, information corresponding to the plurality of markers that enables a determination, for each data item in the plurality of data items, as to whether an operation corresponding to the data item is to be executed; andin conjunction with execution of a first operation corresponding to the first data item, deleting the first marker, wherein execution of the first operation includes modifying one or more additional data items associated with the first data item.