Privacy Framework Using Application Objects for Purpose Assignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection and privacy frameworks lack an end-to-end processing capability, leading to burdensome, cost-intensive point-to-point mappings and manual efforts, with no unified management across business and data protection domains, and uncontrolled entity enhancements.
Innovation Solution
A central data protection and privacy framework that unifies and manages DPP and business entities through Application Objects (AOs) and Business Scenarios with supporting APIs, enabling purpose-based processing across applications, and integrating purposes for master data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If point-to-point mappings are implemented between DPP entities and Business entities, then data protection compliance is achieved, but implementation becomes burdensome and cost-intensive requiring area specific skillsets and separate consultants
Solution Approach 1:
The patent merges DPP entities and Business entities into a unified entity model where each entity can have multiple purposes assigned. This consolidation eliminates the need for separate point-to-point mappings between DPP and Business domains, reducing implementation complexity while maintaining compliance capabilities.
Solution Approach 2:
The unified entity is designed to serve multiple functions simultaneously - it can represent both Business entities and DPP entities, support multiple purposes, and enable cross-domain operations. This multi-functionality allows a single entity type to replace multiple specialized entity types, reducing the need for area-specific expertise.
2Reliability
If point-to-point mappings are established between DPP entities and Business entities, then data protection requirements are met, but manual efforts and costs increase significantly
Solution Approach 1:
By combining DPP and Business entities into a unified model, the system eliminates redundant manual mapping operations. The unified entity automatically handles both business logic and data protection requirements, significantly reducing manual effort and implementation costs.
3Adaptability or versatility
If software applications enable users to add more entities or enhance existing entities for customer or industry-specific extensibility, then adaptability is improved, but control and management become uncontrolled
Solution Approach 1:
The unified entity model is designed to be dynamic and configurable, allowing users to add entities and enhance existing ones through standardized mechanisms. The system maintains control through a unified management framework that governs all entity operations, ensuring extensibility without loss of control.
4Reliability
If separate consultants and area specific skillsets are used for each domain, then specialized expertise is utilized, but costs and complexity increase
Solution Approach 1:
The unified entity model enables a single team with generalized expertise to handle both DPP and Business domains. The standardized entity framework provides enough structure to maintain reliability while reducing the need for specialized consultants in each domain.
Data Source
AI summary
A central framework unifies the data protection and privacy domain with the business domain using application objects and business scenarios. Application objects are linked to a particular data category, a name of a data object, and primary key attributes of the data object. Each data category is linked to a purpose. And business scenarios include a set of application objects and a sequence for the set. Worklist entries are generated in response to a particular instances of application objects being created or modified. For each worklist entry, purposes are determined for the particular application object using purpose assignment rules for the particular application object. Each of the determined purposes for the particular application object are stored in a purpose assignment table. Then each determined purpose are proposed for master data to be used across the plurality of different application.