Patent ID: 11956258
Assignee: 8X8, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 18:
19. A system comprising:
a plurality of data servers, including at least a first data server and a second data server, cooperatively arranged to provide authorized access, via one or more end user nodes, to a respective version of a database without an intentional delay, each of the plurality of data servers configured with data processing circuitry including data-replication-management circuitry to provide data replication in real time for the database by storing and providing access to a respective version of the database for user data transactions; and
the data processing circuitry of the second data server to respond to an indication of a possibly malicious modification performed on the respective version of the database for the Second data server by causing one or more of the plurality of data servers to:
intentionally delay further user data transactions by the one or more of the plurality of data servers, involving access to one or more of the respective versions of the database, according to a delay time,
restrict activity, including preventing replication of the database, for a period of time specified in criteria from a security profile data which is configurable by the data-replication-management circuitry of the second data server for restricting replication of possibly malicious modifications,
during the period of time and in response to a determination that the possibly malicious modification is malicious based on respective values or quantizations collectively exceeding a threshold level, queue at least authorized ones of the further user data transactions to allow for a recovery process to be performed on the respective version of the database in view of the determination, wherein during the period of time and due to queue of said at least authorized ones of the further user data transactions, the version of the database for the second data server transitions from being a version of the database replicated in real time, and
allowing at least one of the queued further user data transactions to be completed in response to or via at least one of the following: a determination that the possibly malicious modification is not malicious; a corresponding version of another one of the data servers, other than the second data server, providing access to the corresponding version; and an indication that performance of the recovery process is completed.