# US 12,602,499 B2 · Data access under regulatory constraints > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,602,499 B2 - Document ID: US12602499B2 - Status: Granted - Kind: B2 - Application number: 18/093,915 - Filed: 2023-01-06 - Published: 2024-07-11 - Granted: 2026-04-14 - Earliest claimed: 2023-01-06 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Seraphin Bernard Calo; Dinesh C. Verma; Nirmit V. Desai; Douglas M. Freimuth; Anshu Kak; Tova Roth; Steven A Waite; Roger Hollander - Web page: https://patentgrep.com/patent/US12602499B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 63/0281: {Proxies} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Method, apparatus and computer program product for accessing data based on regulatory constraints is described herein. In an implementation, the method includes receiving, via a proxy located in a first geographic jurisdiction, a request for data from a software program, wherein the data is stored in a database located in a second geographic jurisdiction, identifying a regulatory constraint that must be enforced on the data stored in the database in the second geographic jurisdiction based on a policy associated with the second geographic jurisdiction, retrieving, via the proxy in the first geographic jurisdiction, the data requested from a proxy located in the second geographic jurisdiction, delivering the data received from the proxy located in the second geographic jurisdiction to the software program, and executing, via the proxy in the first geographic jurisdiction, an additional action on the data to comply with the regulatory constraint of the second geographic jurisdiction. ## Claims ### Claim 1 An apparatus comprising: a processor set; one or more computer-readable storage media; and program instructions stored on the one or more computer-readable storage media to cause the processor set to perform operations comprising: receiving, via a proxy located in a first geographic jurisdiction, a request for data from a software program, wherein the data is stored in a database located in a second geographic jurisdiction; identifying a regulatory constraint that must be enforced on the data stored in the database in the second geographic jurisdiction based on a policy associated with the second geographic jurisdiction, wherein the identifying comprises identifying the second geographic jurisdiction from a location of origin value included in the request and identifying a regulatory policy which is mapped to the location of origin value in a data store of the proxy in the first geographic jurisdiction; retrieving, via the proxy in the first geographic jurisdiction, the data requested from a proxy located in the second geographic jurisdiction; delivering the data received from the proxy located in the second geographic jurisdiction to the software program; and executing, via the proxy in the first geographic jurisdiction, an additional action on the data to comply with the regulatory constraint of the second geographic jurisdiction. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the operations further comprise receiving a notification of the data to be transferred prior to receiving the request from the software program, and in response to the notification, transmitting a call to the proxy located in the second geographic jurisdiction with instructions to pre-fetch the data from the database. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the operations further comprise checking whether the data has been prefetched from the proxy located in the second geographic jurisdiction prior to retrieving the data from the proxy located in the second geographic jurisdiction. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the operations further comprise identifying a recurring transaction request from the software program based on a transaction history of the software program. ### Claim 5 (depends on 4) The apparatus of claim 4, wherein the operations further comprise identifying data used by the recurring transaction request which is located in a third geographic jurisdiction, predicting a next occurrence of the recurring transaction request, and transmitting a call to a proxy located in the third geographic jurisdiction with instructions to pre-fetch the data from a database located in the third geographic jurisdiction prior to the predicted next occurrence. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the operations further comprise transferring a log of how the data was used by the software program in the first geographic jurisdiction to the proxy located in the second geographic jurisdiction for storage in a log in the database in the second geographic jurisdiction. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein the operations further comprise purging the data from the database located in the first geographic jurisdiction via the proxy located in the first geographic jurisdiction after a predetermined period of time specified by the regulatory constraint has elapsed. ### Claim 8 A method comprising: receiving, via a proxy located in a first geographic jurisdiction, a request for data from a software program, wherein the data is stored in a database located in a second geographic jurisdiction; identifying a regulatory constraint that must be enforced on the data stored in the database in the second geographic jurisdiction based on a policy associated with the second geographic jurisdiction, wherein the identifying comprises identifying the second geographic jurisdiction from a location of origin value included in the request and identifying a regulatory policy which is mapped to the location of origin value in a data store of the proxy in the first geographic jurisdiction; retrieving, via the proxy in the first geographic jurisdiction, the data requested from a proxy located in the second geographic jurisdiction; delivering the data received from the proxy located in the second geographic jurisdiction to the software program; and executing, via the proxy in the first geographic jurisdiction, an additional action on the data to comply with the regulatory constraint of the second geographic jurisdiction. ### Claim 9 (depends on 8) The method of claim 8, wherein the method further comprises; receiving notification of the data to be transferred prior to receiving the request from the software program, and in response to the notification, and transmitting a call to the proxy located in the second geographic jurisdiction with instructions to pre-fetch the data from the database. ### Claim 10 (depends on 8) The method of claim 8, wherein the retrieving comprises checking whether the data has been prefetched from the proxy located in the second geographic jurisdiction prior to retrieving the data from the proxy located in the second geographic jurisdiction. ### Claim 11 (depends on 8) The method of claim 8, wherein the method further comprises: identifying a recurring transaction request from the software program based on a transaction history of the software program. ### Claim 12 (depends on 11) The method of claim 11, wherein the method further comprises: identifying data used by the recurring transaction request which is located in a third geographic jurisdiction, predicting a next occurrence of the recurring transaction request, and transmitting a call to a proxy located in the third geographic jurisdiction with instructions to pre-fetch the data from a database located in the third geographic jurisdiction prior to the predicted next occurrence. ### Claim 13 (depends on 8) The method of claim 8, wherein the executing comprises transferring a log of how the data was used by the software program in the first geographic jurisdiction to the proxy located in the second geographic jurisdiction for storage in a log in the database in the second geographic jurisdiction. ### Claim 14 (depends on 8) The method of claim 8, wherein the executing comprises purging the data from the database located in the first geographic jurisdiction via the proxy located in the first geographic jurisdiction after a predetermined period of time specified by the regulatory constraint has elapsed. ### Claim 15 A computer program product comprising: one or more computer-readable storage media; and program instructions stored on the one or more computer-readable storage media, that when read by a processor, cause the processor to perform operations comprising: receiving, via a proxy located in a first geographic jurisdiction, a request for data from a software program, wherein the data is stored in a database located in a second geographic jurisdiction; identifying a regulatory constraint that must be enforced on the data stored in the database in the second geographic jurisdiction based on a policy associated with the second geographic jurisdiction, wherein the identifying comprises identifying the second geographic jurisdiction from a location of origin value included in the request and identifying a regulatory policy which is mapped to the location of origin value in a data store of the proxy in the first geographic jurisdiction; retrieving, via the proxy in the first geographic jurisdiction, the data requested from a proxy located in the second geographic jurisdiction; delivering the data received from the proxy located in the second geographic jurisdiction to the software program; and executing, via the proxy in the first geographic jurisdiction, an additional action on the data to comply with the regulatory constraint of the second geographic jurisdiction. ### Claim 16 (depends on 15) The computer program product of claim 15, wherein the operations further comprise: receiving notification of the data to be transferred prior to receiving the request from the software program, and in response to the notification, transmitting a call to the proxy located in the second geographic jurisdiction with instructions to pre-fetch the data from the database. ### Claim 17 (depends on 15) The computer program product of claim 15, wherein the retrieving comprises checking whether the data has been prefetched from the proxy located in the second geographic jurisdiction prior to retrieving the data from the proxy located in the second geographic jurisdiction. ### Claim 18 (depends on 15) The computer program product of claim 15, wherein the operations further comprise: identifying a recurring transaction request from the software program based on a transaction history of the software program; identifying data used by the recurring transaction request which is located in a third geographic jurisdiction; predicting a next occurrence of the recurring transaction request; and transmitting a call to a proxy located in the third geographic jurisdiction with instructions to pre-fetch the data from a database located in the third geographic jurisdiction prior to the predicted next occurrence. ### Claim 19 (depends on 15) The computer program product of claim 15, wherein the executing comprises transferring a log of how the data was used by the software program in the first geographic jurisdiction to the proxy located in the second geographic jurisdiction for storage in a log in the database in the second geographic jurisdiction. ### Claim 20 (depends on 15) The computer program product of claim 15, wherein the executing comprises purging the data from the database located in the first geographic jurisdiction via the proxy located in the first geographic jurisdiction after a predetermined period of time specified by the regulatory constraint has elapsed.