Automatic Data Obligation Enforcement via Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for enforcing data-handling policies, particularly for private or sensitive information, are inefficient and manual, failing to automatically enforce obligations related to data access, especially in unstructured data formats and existing systems.
Innovation Solution
A method that intercepts user requests for data access, determines applicable obligations from the data-handling policy, and automatically executes these obligations at the appropriate time, tracking data items and associated obligations without modifying the data repository schema or format.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual methods are used to enforce data-handling obligations, then flexibility in handling various data formats is maintained, but efficiency and reliability of obligation enforcement deteriorate
Solution Approach 1:
The system automatically detects data access events and executes associated obligations without human intervention. The obligation enforcement mechanism monitors data access patterns and autonomously performs required actions such as deleting data after retention periods expire, thereby achieving both high efficiency and reliability through automated self-service enforcement
Solution Approach 2:
The system establishes a feedback loop where data access events are tracked and fed back to the obligation enforcement mechanism. This feedback enables the system to continuously monitor compliance status and automatically trigger appropriate obligations, ensuring reliable and efficient enforcement through closed-loop control
2Extent of automation
If database triggers are used to enforce obligations, then automated enforcement is achieved, but the system is restricted to structured relational data and cannot handle unstructured data formats
Solution Approach 1:
The obligation enforcement mechanism is designed as a universal system that can handle multiple data formats including structured relational data, unstructured documents, emails, and other formats. The system uses format-agnostic event monitoring and obligation execution capabilities to enforce data-handling policies across diverse data types without being restricted to relational databases
Solution Approach 2:
The system introduces an intermediary obligation enforcement mechanism that sits between the data access layer and the storage layer. This intermediary component intercepts data access events regardless of data format, processes the associated obligations, and executes appropriate actions, thereby enabling automated enforcement across structured and unstructured data without modifying the underlying data formats
3Reliability
If existing data repository systems are modified to enforce obligations automatically, then obligation enforcement capability is improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The system segments the obligation enforcement functionality into separate, modular components including event detection modules, obligation management modules, and execution modules. This segmentation allows the enforcement mechanism to be implemented as independent add-on components rather than requiring modifications to the core data repository system, thereby maintaining reliability while reducing implementation complexity
Data Source
AI summary
Methods, systems and computer program products for automatically enforcing obligations in accordance with a data-handling policy are disclosed. Requests by users for accessing data stored in a data repository are intercepted. A determination is made whether any obligations apply to each data item requested in accordance with the data handling policy. The determination may relate to whether rules having associated obligations identified in the data-handling policy apply to data items requested by a user. The obligations are automatically executed at an appropriate time after access of the data. Association of a data item requested by the user with an obligation may be recorded and tracked to determine the appropriate time for executing the obligation.