Cross-Jurisdiction Data Proxy for Regulatory-Compliant Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Financial services companies face challenges in managing data across multiple jurisdictions with differing regulatory requirements, leading to high costs and complexity due to the need to replicate software and infrastructure in each location.

Innovation Solution

Implementing a proxy layer in front of databases to enforce regulatory compliance, allowing data access and management across jurisdictions without replicating systems, ensuring data compliance with local regulations by enforcing policies on data movement, location, and retention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is accessed from a different geographic jurisdiction, then data availability and service continuity are improved, but regulatory compliance becomes more difficult to maintain

Engineering Contradiction:
Improvedata availabilityVSAvoidregulatory compliance
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces a proxy server as an intermediary component between the software program and the database in a different geographic jurisdiction. The proxy server enforces regulatory policies by controlling data access, filtering information flow, and ensuring compliance with local regulations while still enabling data availability. This mediator approach resolves the contradiction by allowing cross-border data access while maintaining regulatory control.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If processing capabilities are replicated in each separate country, then regulatory compliance is improved, but system complexity and cost increase significantly

Engineering Contradiction:
Improveregulatory complianceVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal proxy server architecture that can operate across multiple geographic jurisdictions with different regulatory requirements. Instead of replicating entire processing capabilities in each country, the single proxy server is designed to handle diverse regulatory policies through configurable rule sets. This multi-functional approach allows one system to serve multiple compliance purposes, reducing overall system complexity while maintaining regulatory adherence.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If legacy applications are rewritten on new platforms, then adaptability to different computing platforms is improved, but development time and cost increase

Engineering Contradiction:
Improveplatform adaptabilityVSAvoiddevelopment time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent creates a virtual copy of the database environment through the proxy server, which presents a standardized interface to legacy applications regardless of the underlying platform differences. Instead of rewriting applications to adapt to new platforms, the proxy server copies and adapts the data access interface, allowing legacy applications to continue operating unchanged while accessing data across different geographic and technological environments.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS12602499B2Data access under regulatory constraints
Publication Date: 2026.04.14 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12602499B2 patent drawing
  • US12602499B2 patent drawing
  • US12602499B2 patent drawing

AI summary

Method, apparatus and computer program product for accessing data based on regulatory constraints is described herein. In an implementation, the method includes receiving, via a proxy located in a first geographic jurisdiction, a request for data from a software program, wherein the data is stored in a database located in a second geographic jurisdiction, identifying a regulatory constraint that must be enforced on the data stored in the database in the second geographic jurisdiction based on a policy associated with the second geographic jurisdiction, retrieving, via the proxy in the first geographic jurisdiction, the data requested from a proxy located in the second geographic jurisdiction, delivering the data received from the proxy located in the second geographic jurisdiction to the software program, and executing, via the proxy in the first geographic jurisdiction, an additional action on the data to comply with the regulatory constraint of the second geographic jurisdiction.