Leading system determination

• US 9,904,796 B2
• Filed: 09/30/2015
• Issued: 02/27/2018
• Est. Priority Date: 09/30/2015
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: Pluder, Carsten, Ravindran, Dinesh, Bacchi, Alain
• Primary Examiner(s): KIM, TAE K
• Application Number:
  US14/871,390
• Publication Number:
  US 20170091479A1
• Time in Patent Office: 881 Days
• CPC Class Codes: G06F 16/125 characterised by the use of retention policies retention policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/219 Managing data history or versioning querying versioned data G06F16/2474; querying temporal data G06F16/2477
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

Embodiments described herein relate to an improved technique for blocking access to data records associated with an entity in a network comprising a plurality of systems. The operations include accessing and analyzing determination criteria associated with the entity to determine in which systems the data should be blocked. An end-of-purpose determination can be performed in one or more of the systems based on whether the current system is a master system, a dependent system of the master system, or a standalone system of the plurality of systems. Access to the entity data records can then be blocked from the appropriate systems when an end of purpose for the data has been reached for any processes running on the system.

Claims

1. A method for blocking data access in a network comprising a plurality of systems, the method comprising:

receiving an indication in a current system of the plurality of systems of an occurrence of an event that indicates an end of purpose determination is to be performed for one or more applications utilizing data records associated with a plurality of related data objects on the plurality of systems, the data objects corresponding to an entity, and wherein the related data objects are synchronized between the plurality of systems;

analyzing determination criteria associated with the data records to determine whether the current system is a master system of the plurality of systems, wherein each data object has an associated customized determination criteria table, and wherein determination criteria stored in a first field of a customized determination criteria table links a plurality of other tables for specifying whether the plurality of systems are master systems or dependent systems and the customized determination criteria table further includes a role in a second field;

if the current system is determined to be the master system based on the first and second fields in the customized determination criteria table, the method further comprises;

(1) performing an end-of-purpose determination in the current system and its dependent systems; and

(2) blocking access to the data records; and

if the current system is determined not to be the master system based on the determination criteria, the method further comprises determining whether related data objects exist in the master system.

2. The method of claim 1 wherein if the current system is not the master system and related data objects exist in the master system, the method further comprises:

(1) performing a local end-of-purpose determination in the current system only; and

(2) communicating a start-of-retention time indication to the master system.

3. The method of claim 1 wherein if the current system is not the master system and related data objects do not exist in the master system, the method further comprises:

(1) performing a local end-of-purpose determination in the current system and its dependent systems; and

(2) blocking access to the data records.

4. The method of claim 1 further comprising:

generating a start-of-retention time for the data records when it is determined that the end of purpose has been reached; and

storing the start-of-retention time in a data record.

5. The method of claim 1 further comprising allowing continued access to the data records when it is determined that the end of purpose for the data records has not been reached.

6. The method of claim 1 wherein the data records include private data of the entity that is subject to retention time restrictions.

7. The method of claim 1 wherein the master system is the system in which the data records were created.

8. A system for blocking data access in a network comprising a plurality of systems comprising:

a processor in communication with a database via a communication link;

a memory system coupled with the processor and configured to store computer code, which when executed by the processor, causes the processor to perform operations comprising;

receiving an indication in a current system of the plurality of systems of an occurrence of an event that indicates an end of purpose determination is to be performed for one or more applications utilizing data records associated with a plurality of related data objects on the plurality of systems, the data objects corresponding to an entity, and wherein the related data objects are synchronized between the plurality of systems;

analyzing determination criteria associated with the data records to determine whether the current system is a master system of the plurality of systems, wherein each data object has an associated customized determination criteria table, and wherein determination criteria stored in a first field of a customized determination criteria table links a plurality of other tables for specifying whether the plurality of systems are master systems or dependent systems and the customized determination criteria table further includes a role in a second field;

if the current system is determined to be the master system based on the first and second fields in the customized determination criteria table, the operations further comprise;

(1) performing an end-of-purpose determination in the current system and its dependent systems when the current system is determined to be the master system based on the determination criteria; and

(2) blocking access to the data records when it is determined that the end of purpose has been reached; and

if the current system is determined not to be the master system based on the determination criteria, the operations further comprise determining whether related data objects exist in the master system.

9. The system of claim 8 wherein if the current system is not the master system and related data objects exist in the master system, the operations further comprise:

(1) performing a local end-of-purpose determination in the current system only; and

(2) communicating a start-of-retention time indication to the master system.

10. The system of claim 8 wherein if the current system is not the master system and related data objects do not exist in the master system, the operations further comprise:

(1) performing a local end-of-purpose determination in the current system and its dependent systems; and

(2) blocking access to the data records.

11. The system of claim 8 wherein the operations further comprise:

generating a start-of-retention time for the data records when it is determined that the end of purpose has been reached; and

storing the start-of-retention time in a data record.

12. The system of claim 8 wherein the operations further comprise allowing continued access to the data records when it is determined that the end of purpose has not been reached.

13. The system of claim 8 wherein the data records include private data that is subject to retention time restrictions.

14. The system of claim 8 wherein the master system is the system in which the data records were created.

15. A non-transitory computer readable storage medium tangibly embodying computer code, which when executed by a computer system, causes the computer system to perform operations for blocking data access in a network comprising a plurality of systems, the operations comprising:

receiving an indication in a current system of the plurality of systems of an occurrence of an event that indicates an end of purpose determination is to be performed for one or more applications utilizing data records associated with a plurality of related data objects on the plurality of systems, the data objects corresponding to an entity, and wherein the related data objects are synchronized between the plurality of systems;

analyzing determination criteria associated with the data records to determine whether the current system is a master system of the plurality of systems, wherein each data object has an associated customized determination criteria table, and wherein determination criteria stored in a first field of a customized determination criteria table links a plurality of other tables for specifying whether the plurality of systems are master systems or dependent systems and the customized determination criteria table further includes a role in a second field;

if the current system is determined to be the master system based on the first and second fields in the customized determination criteria table, the operations further comprise;

(1) performing an end-of-purpose determination in the current system and its dependent systems; and

(2) blocking access to the data records when it is determined that the end of purpose has been reached; and

if the current system is determined not to be the master system based on the determination criteria, the operations further comprise determining whether related data objects exist in the master system.

16. The computer readable storage medium of claim 15 wherein if the current system is not the master system and the related data objects exist in the master system, the operations further comprise:

(1) performing a local end-of-purpose determination in the current system only; and

(2) communicating a start-of-retention time indication to the master system.

17. The computer readable storage medium of claim 15 wherein if the current system is not the master system and related data objects do not exist in the master system, the operations further comprise:

(1) performing a local end-of-purpose determination in the current system and its dependent systems; and

(2) blocking access to the data records.

18. The computer readable storage medium of claim 16 wherein the operations further comprise:

generating a start-of-retention time for the data records when it is determined that the end of purpose has been reached; and

storing the start-of-retention time in a data record.