System and method for managing data privacy in a database management system including a dependently connected privacy data mart

• US 6,480,850 B1
• Filed: 10/01/1999
• Issued: 11/12/2002
• Est. Priority Date: 10/02/1998
• Status: Expired due to Term

• Current Assignee: Teradata US, Inc. (Teradata Corporation)
• Original Assignee: NCR Corporation
• Inventors: Veldhuisen, Adriaan W.
• Primary Examiner(s): Kindred, Alford W.
• Application Number:
  US09/411,337
• Time in Patent Office: 1,138 Days
• Field of Search: 707/1, 707/2-5, 707/7-9, 707/10, 707/100-102, 707/500, 707/526-527, 707/200-206, 705/35-37, 705/38, 713/200-202, 709/217-219
• US Class Current: 707/610
• CPC Class Codes: G06F 16/2358 Change logging, detection, and notification replication G06F16/27
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application
• CPC Class Codes: G06F 16/283 Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99952 Coherency, e.g. same view to multiple users

Abstract

A system for managing data privacy comprises a database management system for storing data from a plurality of consumer database tables, with irrevocable logging of all access, whether granted or denied, to the data contents stored in the consumer data tables; a privacy metadata system that administers and records all data, users and usage of data that is registered as containing privacy elements; and a replication system that feeds the consumer access system with personal consumer data, maintains integrity of the consumer data and provides changes and corrections back to the originating database management system through their own integrity filters as well as a means of storage and the mechanism to provide input for changes in the personal data or privacy preferences. The system further includes means for managing consumer notification, access, correction and change of preferences for privacy or data protection in the privacy metadata system.

Claims

1. A data warehousing, management, and privacy control system, comprising:

a database management system, for storing and retrieving customer data;

a privacy metadata system that administers and records all customer personal data, users of said customer personal data, and usage of said customer personal data;

a replication system providing communication between said database management system and said privacy metadata system; and

a database management system interface operatively coupled to the database management system and controlling access to said customer data and to said customer personal data through said replication system.

2. The data warehousing, management, and privacy control system according to claim 1, wherein:

said replication system provides customer personal data from said database management system interface to said privacy metadata system.

3. The data warehousing, management, and privacy control system according to claim 1, further comprising:

a customer access module operatively coupled to the privacy metadata system and providing a customer with means to access data, correct data and change of preferences to customer personal data related to said customer.

4. The data warehousing, management, and privacy control system according to claim 1, wherein:

said replication system provides changes and corrections to said customer data from said privacy metadata system to said database management system.

5. The data warehousing, management, and privacy control system according to claim 1, wherein:

said database management system interface provides access to said customer data and to said customer personal data in accordance with privacy parameters stored in said database management system.

6. The data warehousing, management, and privacy control system according to claim 1, further comprising:

a privacy access logging system that captures and records all access attempts to said customer personal data.