Modular AI gateway for safeguarding data privacy rights for enterprise resource systems

Abstract

A privacy-compliant modular AI gateway system (100) implemented as a hardware gateway device or as a server-based processing unit within an enterprise network and configured to connect to one or more enterprise resource systems (110), comprising: an input interface (120) including a data ingestion parser (122) configured to receive and parse enterprise data from one or more enterprise resource systems (110), including legacy enterprise resource planning (ERP) platforms (112), enterprise databases (114), or enterprise applications (116); a processing gateway module (130) functionally connected to the input interface (120) and configured to act as an intermediary communication layer between the enterprise resource systems (110) and an external, cloud-based artificial intelligence platform (150);a module (132) for masking personally identifiable information (PII), which forms part of the processing gateway module (130) and comprises: a detection engine (132a) configured to identify sensitive data fields within the received enterprise data, wherein the detection engine (132a) comprises a pattern recognition unit (132a-1), a rule engine (132a-2) and a named entity recognition model (132a-3); a classification unit (132b) configured to categorize identified sensitive data according to sensitivity levels and data categories; and a masking engine (132c) configured to apply safeguards to the classified fields containing sensitive data, comprising a tokenization unit (132c-1), an anonymization unit (132c-2), an encryption unit (132c-3) and a redaction unit (132c-4);a data preprocessing and filtering module (134) designed to clean, structure, and filter enterprise data, comprising a schema normalization unit (134a), a data validation unit (134b), and a content filtering unit (134c); a policy validation module (136) configured to apply predefined regulatory and policy-related restrictions to the processed data; an access control module (160) comprising an authentication unit (162) and an authorization unit (164) configured to authenticate and authorize incoming data requests prior to processing by the PII masking module (132);and a secure communication interface (140) comprising an encryption module (142) and an API gateway (144) configured to transmit protected corporate data to the cloud-based artificial intelligence platform (150) via secure network protocols;wherein the processing gateway module (130) is configured to receive parsed enterprise data from the input interface (120), to authenticate and authorize incoming data requests via the access control module (160), to identify and classify sensitive data fields via the PII masking module (132), to apply tokenization, anonymization, encryption or redaction to the sensitive data fields, to normalize and validate the cleaned data via the data preprocessing and filtering module (134), to enforce predefined policy restrictions via the policy validation module (136), and to output protected enterprise data to the cloud-based artificial intelligence platform (150) via the secure communication interface (140).