Managed Information: A New Abstraction Mechanism for Handling Information in Software-as-a-Service

TL;DR

This paper introduces Managed Information (MI), an abstraction mechanism for handling data concerns in SaaS applications, reducing application responsibility by hosting data on a Managed Information Platform and supporting MI in the programming language.

Contribution

The paper proposes MI as a new abstraction for data management in SaaS, including its design, implementation, and a demonstration with a social network app.

Findings

Feasibility demonstrated through platform design and implementation

Open source implementation available

Applied in a social network application

Abstract

Management of information is an important aspect of every application. This includes, for example, protecting user data against breaches (like the one reported in the news about 50 million Facebook profiles being harvested for Cambridge Analytica), complying with data protection laws and regulations (like EU's new General Data Protection Regulation), coping with large databases, and retaining user data across software versions. Today, every application needs to cope with such concerns by itself and on its own. In this paper we introduce Managed Information (MI), an abstraction mechanism for managing extra-functional data related concerns, similar to how managed memory today abstracts away many memory related concerns. MI limits the access applications have to user data, which, in return, relieves them from responsibility over it. This is achieved by hosting them on a Managed Information Platform (MIP), and implementing their logic in a language that supports MI. As evidence for the feasibility of MI we describe the design and implementation of such a platform. For demonstration of MI, we describe a simple social network application built with it. The implementation is open source.