Data Entitlement API Gateway for Secure Partner Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems of record (SOR) face challenges in securely managing data access for business partners and third parties, particularly in complying with regulations like GDPR when exposing data through a marketplace API.
Innovation Solution
A computer-implemented method and system that utilize data entitlement templates defined by customers to control access to SOR data. The system determines entitlement based on these templates, applies response filters to ensure compliance with data protection regulations, and forwards filtered responses to authorized endpoints.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is exposed through a marketplace API to partners and third parties, then data accessibility and business collaboration are improved, but data security and compliance with regulations like GDPR deteriorate
Solution Approach 1:
The patent introduces an API gateway as an intermediary component that sits between the marketplace API and the system of record. This gateway enforces data entitlement templates and response filters, acting as a mediator that allows data access while maintaining security controls. The gateway validates requests against entitlement templates and applies filtering rules to ensure only authorized data is exposed to partners.
Solution Approach 2:
The patent segments data access control into multiple independent components: data entitlement templates that define access rules, response filters that control data exposure, and an API gateway that enforces these controls. This segmentation allows each component to be configured and managed independently, enabling fine-grained control over data accessibility while maintaining security.
2Reliability
If manual data management processes are used to control partner access, then data security can be maintained, but system overhead and operational complexity increase
Solution Approach 1:
The patent implements self-service capabilities where data entitlement templates are automatically applied to API requests based on partner configuration. The system automatically determines which templates apply to which partners and enforces the appropriate access controls without manual intervention for each request, reducing operational complexity while maintaining security.
Solution Approach 2:
The system incorporates feedback mechanisms where the API gateway continuously monitors and enforces data entitlement policies. The gateway receives requests, applies the appropriate entitlement templates based on partner identity and context, and adjusts data exposure dynamically based on compliance requirements, creating a self-regulating security system.
3Reliability
If data entitlement templates are applied to control access, then data security is improved, but the complexity of the access control system increases
Solution Approach 1:
The patent creates universal data entitlement templates that can be applied across multiple partners and data types. Instead of creating custom access control rules for each partner, the same template framework serves multiple purposes and partners, reducing system complexity while maintaining comprehensive security coverage.
Solution Approach 2:
The system uses parameter-based entitlement templates where security rules are defined through configurable parameters rather than hard-coded logic. This allows the same template structure to adapt to different partners and data types by changing parameters, simplifying the overall system architecture while maintaining flexible security control.
Data Source
AI summary
Controlling access to a system of record is provided. The method comprises receiving an API request from an endpoint to an SOR for data associated with a customer, wherein the endpoint belongs to a partner of the customer. A determination is made if the endpoint is entitled to access the data in the SOR, wherein entitlement is provided by a data entitlement template defined by the customer. Responsive to a determination the endpoint is entitled to access the customer data in the SOR, the SOR is queried based on the API request. When an SOR response is received a number of response filters are applied to the SOR response, wherein the response filters are specified in the data entitlement template according to an SOR-agnostic schema. The filtered SOR response is then forwarded to the endpoint.