Automatic enforcement of obligations according to a data-handling policy
First Claim
1. A method for automatically enforcing obligations in accordance with a data-handling policy, said method comprising:
- intercepting a request by a user for accessing data stored in a data repository;
determining whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and
automatically executing said obligations at an appropriate time after access of said data.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods, systems and computer program products for automatically enforcing obligations in accordance with a data-handling policy are disclosed. Requests by users for accessing data stored in a data repository are intercepted. A determination is made whether any obligations apply to each data item requested in accordance with the data handling policy. The determination may relate to whether rules having associated obligations identified in the data-handling policy apply to data items requested by a user. The obligations are automatically executed at an appropriate time after access of the data. Association of a data item requested by the user with an obligation may be recorded and tracked to determine the appropriate time for executing the obligation.
-
Citations
44 Claims
-
1. A method for automatically enforcing obligations in accordance with a data-handling policy, said method comprising:
-
intercepting a request by a user for accessing data stored in a data repository;
determining whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and
automatically executing said obligations at an appropriate time after access of said data. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A method for automatically enforcing obligations that apply to access of data items stored in a data repository, said method comprising:
-
intercepting a request by a user for accessing data stored in said repository;
executing said request on a content of said data repository;
determining whether access of each data item returned in response to said executed request is governed by a rule having an associated obligation;
associating said data items governed by rules with respective ones of said obligations;
automatically tracking data items and associated obligation pairs to determine appropriate times when said obligations are to be executed; and
automatically executing said obligations at said appropriate times. - View Dependent Claims (9, 10, 11)
-
-
12. A system for automatically enforcing obligations in accordance with a data handling policy, said system comprising:
-
a request interceptor adapted to intercept a request by a user for accessing data stored in a repository;
an event handler adapted to determine whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and
a processing unit adapted to execute said associated obligation at an appropriate time after access of said data. - View Dependent Claims (13, 14, 15, 16, 17, 18)
-
-
19. A system for automatically enforcing obligations that apply to data items stored in a data repository, said system comprising:
-
means for intercepting a request by a user for accessing data stored in said data repository;
means for executing said request on a content of said data repository;
means for determining whether access of each data item returned in response to said executed request is governed by a rule having an associated obligation;
means for associating said data items governed by rules with respective ones of said obligations;
means for automatically tracking data items and associated obligation pairs to determine when said obligations should be executed; and
means for automatically executing said obligations at appropriate times. - View Dependent Claims (20, 21, 22)
-
-
23. A system for automatically enforcing obligations in accordance with a data-handling policy, said system comprising:
-
a memory unit for storing data and instructions to be performed by a processing unit; and
a processing unit coupled to said memory unit, said processing unit programmed to;
intercept a request by a user for accessing data stored in a repository;
determine whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and
execute said obligations at an appropriate time after access of said data. - View Dependent Claims (24, 25, 26, 27, 28, 29)
-
-
30. A system for automatically enforcing obligations that apply to data items stored in a data repository, said system comprising:
-
a memory unit for storing data and instructions to be performed by a processing unit; and
a processing unit coupled to said memory unit, said processing unit programmed to;
intercept a request by a user for accessing data stored in said repository;
execute said request on a content of said data repository;
determine whether access of each data item returned in response to said executed request is governed by a rule having an associated obligation;
associate said data items governed by rules with respective ones of said obligations;
automatically track data item and associated obligation pairs to determine when said obligations should be executed; and
automatically execute said obligations at appropriate times. - View Dependent Claims (32, 33)
-
-
31. The system of claim 31, wherein said rules comprise privacy rules, said processing unit further programmed to:
-
identify said privacy rules in a data-handling policy; and
generate a list of data access events based on said privacy rules that have an associated obligation.
-
-
34. A computer program product comprising a computer readable medium comprising a computer program recorded therein for automatically enforcing obligations in accordance with a data-handling policy, said computer program product comprising:
-
computer program code for intercepting a request by a user for accessing data stored in said repository;
computer program code for determining whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and
computer program code for automatically executing said associated obligation at an appropriate time after access of said data. - View Dependent Claims (35, 36, 37, 38, 39, 40)
-
-
41. A computer program product comprising a computer readable medium comprising a computer program recorded therein for automatically enforcing obligations that apply to data items stored in a data repository, said computer program product comprising:
-
computer program code for intercepting a request by a user for accessing data stored in said repository;
computer program code for executing said request on the a content of said data repository;
computer program code for determining whether access of each data item returned in response to said executed request is governed by a rule having an associated obligation;
computer program code for associating said data items governed by rules with respective ones of said obligations;
computer program code for automatically tracking data item and associated obligation pairs to determine when said obligations should be executed; and
computer program code for automatically executing said obligations at appropriate times. - View Dependent Claims (42, 43, 44)
-
Specification