Data Usage Controls From Natural Language Compliance Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access and control systems struggle to efficiently adapt to changing regulatory rules, such as HIPAA and GDPR, due to the rules being in human natural language, leading to compliance issues and inefficiencies in security and data control system updates.
Innovation Solution
A system generates a machine-readable data usage configuration from natural language documents specifying data access and usage requirements, enabling real-time compliance and enforcement across different computing environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data access control systems use natural language rules from various entities (HIPAA, GDPR, institutional bylaws), then the system can maintain compliance with regulatory requirements, but the system requires significant time to update when rules change and becomes out of compliance
Solution Approach 1:
The patent replaces manual mechanical processes of interpreting and updating natural language rules with an automated computer-based system that uses natural language processing and machine learning algorithms to automatically generate, interpret, and enforce data access control policies from regulatory documents, thereby eliminating the time-consuming manual update process while maintaining compliance
Solution Approach 2:
The system enables self-service by automatically monitoring regulatory changes, interpreting new requirements, and updating data access control policies without human intervention. The automated system continuously adapts to rule changes by itself, eliminating the need for manual system updates and ensuring ongoing compliance
2Ease of operation
If data access control systems manually interpret and implement natural language rules, then the system can enforce data usage policies, but the system becomes inefficient and difficult to update when rules change
Solution Approach 1:
The patent replaces manual mechanical interpretation and implementation of natural language rules with automated computer-based natural language processing systems that efficiently parse, interpret, and enforce data access policies, dramatically improving both ease of updating and operational efficiency simultaneously
Solution Approach 2:
The system performs preliminary action by pre-processing and structuring regulatory rules into machine-executable formats in advance. This preliminary transformation of natural language rules into structured policies enables the system to quickly adapt to rule changes and efficiently enforce policies without time-consuming manual intervention
Data Source
AI summary
An embodiment of the present invention includes a system for controlling access and usage of data. The system comprises one or more memories, and at least one processor coupled to the one or more memories. The system generates a data usage configuration from a document specifying requirements for a dataset in a natural language. The data usage configuration indicates access and operations for the dataset. The dataset is retrieved from a data storage unit in accordance with the data usage configuration. The operations performed on the dataset are controlled based on the data usage configuration. Embodiments of the present invention further include a method and computer program product for controlling access and usage of data in substantially the same manner described above.