Centralized Consent Management System for Cross-Platform Data Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems struggle with managing and transferring consent data records across on-premise and cloud platforms, leading to fragmented consent management and legal compliance issues due to scattered data storage, making it difficult for data subjects to manage and withdraw their consent.

Innovation Solution

A centralized consent management system (CMS) that operates on both on-premise and cloud computing platforms, facilitating the exchange of individual consent data records and utilizing a personal consent repository (PCR) for comprehensive management, along with features for creating, checking, renewing, and withdrawing consent, and providing notification services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If consent data records are stored in scattered locations across on-premise and cloud platforms, then data storage flexibility is improved, but consent management reliability deteriorates due to fragmented access and control

Engineering Contradiction:
Improvedata storage flexibilityVSAvoidconsent management reliability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a centralized consent management system that acts as an intermediary layer between data subjects and multiple storage platforms (on-premise and cloud). This mediator coordinates consent data access across distributed locations, maintaining reliability through centralized control while preserving storage flexibility through platform-agnostic architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The consent management system is designed with universal functionality to operate across diverse computing platforms (on-premise servers and cloud services). It provides platform-independent consent management capabilities, enabling the same system to reliably manage consent data regardless of where the underlying data is stored.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If consent data is stored across multiple platforms, then system adaptability is improved, but device complexity increases due to distributed data management requirements

Engineering Contradiction:
Improveplatform compatibilityVSAvoiddata management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the complexity of cross-platform consent management from individual applications and centralizes it in a dedicated consent management system. This separation allows applications to interact with a simplified interface while the centralized system handles the complex coordination across on-premise and cloud platforms.

Inventive Principle:
Principle #2Taking out (Extraction)

3Adaptability or versatility

If consent management is decentralized across multiple systems, then system autonomy is improved, but ease of operation deteriorates due to fragmented consent control

Engineering Contradiction:
Improvesystem independenceVSAvoidconsent management ease
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The centralized consent management system serves as an intermediary that provides a unified interface for data subjects to manage their consent across all platforms. Data subjects can view, update, and withdraw consent through a single system rather than navigating multiple decentralized interfaces, significantly improving ease of operation while maintaining system independence.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3422269B1Centralized consent management
Publication Date: 2026.03.18 SAP SE
  • EP3422269B1 patent drawingFigure 1
  • EP3422269B1 patent drawingFigure 2
  • EP3422269B1 patent drawingFigure 3

AI summary

A consent management system (CMS) manages a number of individual consent data records of data subjects. The CMS stores predefined consent templates to be instantiated when an individual consent data record is created. The CMS represents a centralized system for management of individual consent data records that are created, stored, and maintained in relation to provided consent by data subjects for purposes of operations related to stored personal data records by associated application systems. The CMS may run on an on-premise, cloud, or personal device computing platform.