CPC H04N 21/26258 (2013.01) [H04N 21/222 (2013.01); H04N 21/236 (2013.01); H04N 21/2396 (2013.01); H04N 21/466 (2013.01); H04N 21/4825 (2013.01)] | 20 Claims |
1. One or more non-transitory machine-readable media storing instructions that, when executed by one or more processors, cause performance of operations comprising:
receiving, by a proxy service, first tenant-specific data associated with a first tenant of a multi-tenant system, wherein (a) the multi-tenant system comprises tenant-specific storage and a multi-tenant data pool and (b) the proxy service operates in a computing layer logically situated between the first tenant and the multi-tenant data pool;
determining, by the proxy service, that the first tenant permits contribution of the first tenant-specific data to the multi-tenant data pool;
responsive to determining that the first tenant permits contribution of the first tenant-specific data to the multi-tenant data pool:
anonymizing the first tenant-specific data to obtain first anonymized data, at least by removing one or more of personally-identifying information or tenant-identifying information from the first tenant-specific data;
storing the first anonymized data in the multi-tenant data pool;
receiving, by the proxy service, second tenant-specific data associated with a second tenant of the multi-tenant system;
determining, by the proxy service, that the second tenant does not permit contribution of the second tenant-specific data to the multi-tenant data pool;
responsive to determining that the second tenant does not permit contribution of the second tenant-specific data to the multi-tenant data pool: storing the second tenant-specific data in an area of the tenant-specific storage associated with the second tenant, without anonymizing the second-tenant specific data.
|