METHOD FOR DERIVING CONTEXT FOR DATA DISCLOSURE ENFORCEMENT

• US 20090271383A1
• Filed: 04/23/2008
• Published: 10/29/2009
• Est. Priority Date: 04/23/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Grandison, Tyrone, Bhamidipaty, Anuradha, Gupta, Ajay Kumar
• Application Number:
  US12/107,862
• Publication Number:
  US 20090271383A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor

Abstract

Techniques for deriving a context for enforcing a data disclosure policy while accessing a database are provided. The techniques include receiving a request for database access with met a information, parsing the meta information to identify a context, receiving a user query, formulating a query equivalent to-the user query, wherein the equivalent query implements the identified context to enforce a data disclosure policy, and accessing the database with the equivalent query.

Claims

1. A method for deriving a context for enforcing a data disclosure policy while accessing a database, comprising the seeps of:

receiving a request for database access with meta information;

parsing the meta information to identify a context;

receiving a user query;

formulating a query equivalent to the user query, wherein the equivalent query implements the identified context to enforce a data disclosure policy; and

accessing the database with the equivalent query.

2. The method of claim 1, further comprising parsing the meta information and using it to derive the context from a context repository.

3. The method of claim 1, further comprising placing a disclosure control at at least one of a data source and an interface level.

4. The method of claim 1, further comprising determining one or more rules to a particular request by evaluating the context, wherein context comprises one or more parameters that embody information about an application environment of the request.

5. The method of claim 1, wherein formulating a query equivalent to the user query comprises passing context information to a disclosure control system automatically without user intervention, modifying the request, executing the request and returning at least one result to an application.

6. The method of claim 1, wherein the meta information comprises application environment information.

7. The method of claim 1, wherein formulating a query equivalent to the user query comprises using the context to retrieve one or more relevant privacy policy rules, modifying the request, executing the request and returning one or more results to an application.

8. The method of claim 1, wherein identifying the context is performed independent of a database.

9. A computer program product comprising a computer readable medium having computer readable program code for deriving a context for enforcing a data disclosure policy while accessing a database, said computer program product including:

computer readable program code for receiving a request for database access with meta information;

computer readable program code for parsing the meta information to identify a context;

computer readable program code for receiving a user query;

computer readable program code for formulating a query equivalent to the user query, wherein the equivalent query implements the identified context to enforce a data disclosure policy; and

computer readable program code for accessing the database with the equivalent query.

10. The computer program product of claim 9, further comprising computer readable program code for parsing the meta information and using it to derive the context from a context repository.

11. The computer program product of claim 9, further comprising computer readable program code for determining one or more rules to a particular request by evaluating the context, wherein context comprises one or more parameters that embody information about an application environment of the request.

12. The computer program product of claim 9, wherein the computer readable code for formulating a query equivalent to the user query comprises computer readable program code for passing context information to a disclosure control system automatically without user intervention, modifying the request, executing the request and returning at least one result to an application.

13. The computer program product of claim 9, wherein the computer readable code for formulating a query equivalent to the user query comprises computer readable program code for using the context to retrieve one or more relevant privacy policy rules, modifying the request, executing the request and returning one or more results to an application.

14. The computer program product of claim 9, wherein the computer readable code for identifying the context comprises computer readable program code for identifying the context independent of a database.

15. A system for deriving a context for enforcing a data disclosure policy while accessing a database, comprising:

a memory; and

at least one processor coupled to said memory and operative to;

receive a request for database access with meta information;

parse the meta information to identify a context;

receive a user query;

formulate a query equivalent to the user query, wherein the equivalent query implements the identified context to enforce a data disclosure policy; and

access the database with the equivalent query.

16. The system of claim 15, wherein the at least one processor coupled to said memory is further operative to parse the meta information and using it to derive the context from a context repository.

17. The system of claim 15, wherein the at least one processor coupled to said memory is further operative to determine one or more rules to a particular request by evaluating the context, wherein context comprises one or more parameters that embody information about an application environment of the request.

18. The system of claim 15, wherein in formulating a query equivalent to the user query, the at least one processor coupled to said memory is further operative to pass context information to a disclosure control system automatically without user intervention, modifying the request, executing the request and returning at least one result to an application.

19. The system of claim 15, wherein in formulating a query equivalent to the user query, the at least one processor coupled to said memory is further operative to use the context to retrieve one or more relevant privacy policy rules, modifying the request, executing the request and returning one or more results to an application.

20. The system of claim 15, wherein in identifying the context, the at least one processor coupled to said memory is further operative to identify the context independent of a database.