Proxy and Veto Services for Data Privacy Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In complex application landscapes, ensuring data privacy and compliance with regulations by aligning blocking and deletion of master data objects across multiple systems is challenging due to distributed end-of-purpose checks and replication issues, leading to inefficiencies and potential non-compliance.
Innovation Solution
Implementing an aligned purpose disassociation protocol that allows each system to locally determine if a purpose can be disassociated without actually doing so, with a central component evaluating these decisions to send disassociation instructions, and using an integrated end-of-purpose protocol for consensus-based blocking and unblocking of master data objects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If distributed end-of-purpose checks are performed across multiple systems to ensure data privacy compliance, then regulatory compliance is improved, but system complexity and synchronization delays increase
Solution Approach 1:
The patent introduces a centralized coordination service that acts as an intermediary between multiple distributed systems. This service receives end-of-purpose check requests, coordinates the blocking operations across all systems, and manages the unblocking process if failures occur. The intermediary centralizes control logic, reducing the complexity burden on individual distributed systems while maintaining comprehensive compliance monitoring.
Solution Approach 2:
The patent performs preliminary blocking of master data objects across all systems before finalizing the end-of-purpose determination. By proactively blocking data in a coordinated manner and then providing unblocking mechanisms if needed, the system ensures compliance is achieved through preliminary protective action rather than reactive measures, reducing the need for complex post-processing corrections.
2Stability of the object's composition
If synchronous calls are used to coordinate blocking decisions across multiple applications, then consistency is improved, but processing speed and productivity deteriorate
Solution Approach 1:
The system performs preliminary end-of-purpose checks and blocking decisions in an asynchronous manner before executing the actual blocking operations. By preparing the coordination plan in advance and then executing blocking operations with reduced synchronization requirements, the system maintains data consistency while avoiding the performance penalty of fully synchronous coordination across all systems.
Solution Approach 2:
The patent segments the blocking coordination process into independent phases: evaluation phase (asynchronous checks), decision phase (centralized coordination), and execution phase (blocking operations). This segmentation allows different parts of the system to operate at different speeds and with different synchronization requirements, improving overall processing throughput while maintaining consistency where critical.
3Object-affected harmful factors
If master data objects are blocked across all systems to ensure privacy compliance, then data security is improved, but data accessibility and operational efficiency worsen
Solution Approach 1:
The patent implements a feedback mechanism where the centralized coordination service monitors blocking operations across all systems and provides unblocking commands when appropriate. This feedback loop ensures that data remains secure during the blocking period while automatically restoring accessibility when compliance requirements are satisfied or exceptions are approved, balancing security with operational needs.
Solution Approach 2:
The blocking state of master data objects is made dynamic rather than static. The system can transition between blocked and unblocked states based on real-time compliance assessments and operational requirements. This dynamic approach allows data to be securely blocked when needed while automatically becoming accessible again when compliance is achieved or business needs justify access, optimizing both security and operational efficiency.
Data Source
AI summary
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object. An end-of-purpose query is provided to multiple applications that requests each application to determine whether the application is able to block the object. End-of-purpose statuses are received, in response to the end-of-purpose query, that each indicate whether a respective application is able to block the object. The end-of-purpose statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each application that instructs the application to locally block the object in the application.