Method and system for policy driven data disclosure

• US 8,595,805 B2
• Filed: 03/12/2012
• Issued: 11/26/2013
• Est. Priority Date: 12/29/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hinton, Heather M., Jones, Donald N., Miyamoto, Masakazu
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US13/417,705
• Publication Number:
  US 20120173554A1
• Time in Patent Office: 624 Days
• Field of Search: 726/6, 726/28
• US Class Current: 726/6
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method, system and computer-usable medium are disclosed for controlling access to attribute information. A request is received from an application for attribute information. An attribute release policy associated with the requesting application is used to filter attributes stored in a datastore. The filtered attributes are then provided to the requesting application.

Claims

1. A method for controlling the distribution of data, comprising:

receiving, via a computer system, a request from a first application for attribute information;

filtering, via the computer system, the attributes stored in a first datastore according to a first attribute release policy to generate a first set of filtered attributes; and

providing, via the computer system, the first set of filtered attributes to the first application;

providing the first set of filtered attributes to a second datastore;

filtering the first set of filtered attributes according to a second attribute release policy to generate a second set of filtered attributes; and

providing the second set of filtered attributes to a second application; and

wherein

a request is received from a second application for attribute information stored in the first datastore;

the attributes stored in the first datastore are filtered according to a second attribute release policy to generate a second set of filtered attributes; and

the second set of filtered attributes is provided to the second application.

2. The method of claim 1, wherein:

a request is received from the second application for attribute information stored in the second datastore;

the attributes stored in the second datastore are filtered according to a second attribute release policy to generate a second set of filtered data; and

the second set of filtered attributes is provided to the second application.

3. The method of claim 1, wherein the first attribute release policy is centralized and the second attribute release policy is distributed.

4. The method of claim 1, wherein the first attribute release policy is used to update the second attribute release policy.

5. The method of claim 1, wherein the second attribute release policy is associated with the second application.

6. The method of claim 5, wherein the second attribute release policy is used as a proxy by the second application to access the first set of filtered attributes.

7. The method of claim 1, wherein:

a plurality of first attribute release policies are stored in a centralized repository; and

individual first attribute release policies in the plurality of first attribute release policies are associated with one or more of a plurality of applications.