Method, system and computer program product for enforcing privacy policies
AssigneeInternational Business Machines Corporation
InventorsLawrence Koved, Marco Pistoia
Life of this patent
Estimating the term…
Abstract
A method for enforcing privacy policies associated with data. The method includes accessing a database to identify labeled data in the database, the labeled data associated with a privacy policy. An access node accessing the label data is determined. For the access node accessing the labeled data, it is determined whether the access node applies an authorization test as indicated by the privacy policy. An authorization test is associated with the access node if the access node does not apply necessary authorization indicated by the privacy policy.
Claims34
A method for enforcing privacy policies associated with data, the method comprising:
- accessing a database to identify labeled data in the database, the labeled data associated with a privacy policy;
- determining an access node accessing the label data;
- for the access node accessing the labeled data, determining whether the access node applies an authorization test as indicated by the privacy policy;
- associating an authorization test with the access node if the access node does not apply necessary authorization indicated by the privacy policy.
A system for enforcing privacy policies associated with data, the system comprising:
- a database including labeled data associated with a privacy policy;
- access nodes accessing the database;
- and
- an authorization manager coupled to the database and the access node, the authorization manager implementing a process of:
- determining an access node accessing the label data;
- for the access node accessing the labeled data, determining whether the access node applies an authorization test as indicated by the privacy policy;
- associating an authorization test with the access node if the access node does not apply necessary authorization indicated by the privacy policy.
A computer program product comprising a computer useable medium including a computer readable program, wherein the computer readable program when executed on a computer causes the computer to implement:
- accessing a database to identify labeled data in the database, the labeled data associated with a privacy policy;
- determining an access node accessing the label data;
- for the access node accessing the labeled data, determining whether the access node applies an authorization test as indicated by the privacy policy;
- associating an authorization test with the access node if the access node does not apply necessary authorization indicated by the privacy policy.
An authorization manager for enforcing privacy policies associated with data, the authorization manager implementing:
- accessing a database to identify labeled data in the database, the labeled data associated with a privacy policy;
- determining an access node accessing the label data;
- for the access node accessing the labeled data, determining whether the access node applies an authorization test as indicated by the privacy policy;
- associating an authorization test with the access node if the access node does not apply necessary authorization indicated by the privacy policy.
Dependencies are inferred from the claim text.