Semantic Domain Layer for Dynamic Data Access Control

The system enables business users to independently create datasets, define permissions, and generate visualizations without requiring IT team intervention. Users can directly access the data layer, configure their own data models, and publish datasets to external applications, transforming a previously IT-dependent process into a self-service capability.

The patent implements dynamic permission management where access levels, user personas, and data visibility are not statically defined but dynamically adjusted based on user roles, groups, and contextual factors. Permission definitions can be modified at runtime, and the system automatically detects and adapts to changing user requirements without requiring system reconfiguration.

The system creates datasets with universal accessibility, allowing the same data models to be consumed by multiple different applications and tools simultaneously. Datasets published through the system can be accessed by internal visualization tools as well as external applications, eliminating the need to create separate datasets for different consumers and enabling broad reusability across the organization.

The patent introduces an intermediary data layer that sits between the data sources and various applications. This intermediary layer standardizes data access interfaces and manages permissions centrally, allowing multiple applications to consume data without direct integration complexity. The intermediary handles authentication, authorization, and data transformation, simplifying integration for both internal and external applications.

The system applies different security measures to different data elements based on their sensitivity and the user's permission level. Rather than uniformly masking or encrypting all data, the system selectively applies security measures only where necessary - for example, masking certain columns for specific users while leaving other data fully accessible. This localized approach maintains security for sensitive information while preserving ease of access for non-sensitive data.

The patent introduces a security intermediary layer that sits between data sources and users, automatically applying masking and encryption rules based on user permissions and data sensitivity. This intermediary handles security complexity transparently, so users experience simple data access while the intermediary ensures appropriate security measures are applied - masking sensitive columns, encrypting data in transit, and validating permissions - without users needing to understand or configure these security mechanisms.