REGULATORY COMPLIANCE ACROSS DIVERSE ENTITIES

• US 20130145027A1
• Filed: 12/01/2011
• Published: 06/06/2013
• Est. Priority Date: 12/01/2011
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Parthasarathy, Srivatsan, Field, Scott, Kays, David, Dadzie, Joseph, Reus, Edward, Goertzel, Mario
• Application Number:
  US13/309,510
• Publication Number:
  US 20130145027A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Regulatory compliance techniques are provided for dynamically modifying access to data based on the jurisdiction a user seeking access to the data is located within. Dynamically modifying access to data provides for a more efficient and accurate solution to regulatory compliance issues faced when hosting data in a central repository. Users can be notified when their access to data is modified due to a compliance issue. In addition, an audit history can be associated with data packets that allow an administrator or the like to view the history of data packet access. Finally, signatures associated with a data packet can be used to search data store(s) to track access to information within the data packet that may have been subsequently modified.

Claims

1. A regulatory compliance system comprising:

a jurisdiction component configured to determine a jurisdiction of a user attempting to access at least one data packet of a data store; and

a regulatory policy component configured to modify access to the at least one data packet based upon the jurisdiction.

2. The regulatory compliance system of claim 1, further comprising:

a data type component configured to determine a data type of the at least one data packet.

3. The regulatory compliance system of claim 2, wherein the data type is at least one of personal data or corporate data.

4. The regulatory compliance system of claim 2, wherein the regulatory policy component is configured to modify access to the at least one data packet further based upon the data type.

5. The regulatory compliance system of claim 2, further comprising:

a rule template component configured to store a set of rule templates in a memory wherein a rule template is associated with at least one jurisdiction and at least one data type.

6. The regulatory compliance system of claim 1, further comprising:

a notification component configured to send an alert to the user based upon the modify access.

7. The regulatory compliance system of claim 1, further comprising:

a signature stamping component configured to at least one of identify or create a signature associated with the at least one data packet.

8. The regulatory compliance system of claim 7, further comprising:

an auditing component configured to at least one of create or modify a signature trail associated with the signature wherein at least one of the user, a date, a time, or a data format is added to the signature trail.

9. The regulatory compliance system of claim 8, further comprising:

an auditing analytics component configured to at least one of update or store the signature trail among a plurality of signature trails capable of being displayed to an administrator.

10. A method facilitated by at least one processor of a computing system, comprising:

determining a jurisdiction of a user attempting to access at least one data packet among a data store; and

modifying access to the at least one data packet based upon the jurisdiction.

11. The method of claim 10, further comprising:

storing a set of rule templates in a memory wherein a rule template is associated with at least one jurisdiction and at least one data type,

wherein the modifying access to the at least one data packet is further based upon at least one rule template associated with the jurisdiction and the data type.

12. The method of claim 10, further comprising:

sending an alert to the user based upon the modifying access.

13. The method of claim 10, further comprising:

at least one of identifying or creating a signature associated with the at least one data packet;

at least one of creating or modifying a signature trail associated with the signature wherein at least one of the user, a date, a time, or a data format is added to the signature trail;

storing the signature trail among a plurality of signature trails; and

displaying the plurality of signature trails to an administrator.

14. The method of claim 13, further comprising:

searching the data store for data packets associated with the signature; and

displaying the data packets associated with the signature.

15. A computer-readable storage medium comprising computer-readable instructions that, in response to execution, cause a computing system including at least one processor to perform operations, comprising:

determining a jurisdiction of a user attempting to access at least one data packet among a data store; and

modifying access to the at least one data packet based upon the jurisdiction.

16. The computer-readable storage medium of claim 15, further comprising:

determining a data type of the at least one data packet.

17. The computer-readable storage medium of claim 16, wherein the data type is at least one of personal data or corporate data.

18. The computer-readable storage medium of claim 16, wherein the modifying access to the at least one data packet is further based upon the data type.

19. The computer-readable storage medium of claim 16, the operations further comprising:

storing a set of rule templates in a memory wherein a rule template is associated with at least one jurisdiction and at least one data type,

wherein the modifying access to the at least one data packet is further based upon at least one rule template associated with the jurisdiction and the at least one data type.

20. The computer-readable storage medium of claim 15, the operations further comprising:

sending an alert to the user based upon authorizing or denial of access.