Solution for Continuous Control and Protection of Enterprise Data Based on Authorization Projection
AssigneeSap SE
InventorsJohn C. Radkowski, Swetta Singh
Life of this patent
Estimating the term…
Abstract
Extracting data from a source system includes generating an authorization model of the data protection controls applied to the extracted data by the source system. The authorization model is used to map the data protection control applied to the extracted data to generate corresponding data protection controls provided in target system. The extracted data is imported to the target system including implementing the corresponding data protection controls.
Claims20
A method in a computer system to preserve data authorizations for imported data comprising operating the computer system to perform steps of:
- receiving first data from a first system having first data protection controls to provide data security for and control access to data stored on the first system;
- producing an authorization model representative of a configuration of the first data protection controls that is used to secure and access the first data;
- storing the first data to a second system having second data protection controls, different from the first data protection controls, to provide data security for and control access to data stored on the second system, including:
- using the authorization model to produce a configuration of the second data protection controls;
- storing second data on the second system corresponding to the first data;
- and
- applying the configuration of the second data protection controls to the second data, thereby projecting the authorization model associated with the first data stored on the first system to the second data stored on the second system.
A computer system comprising:
- a computer device;
- and
- data storage having stored thereon computer executable program instructions which, when executed by the computer device, cause the computer device to:
- receive first data from a first system having first data protection controls to provide data security for and control access to data stored on the first system;
- produce an authorization model representative of a configuration of the first data protection controls that is used to secure and access the first data;
- store the first data to a second system having second data protection controls, different from the first data protection controls, to provide data security for and control access to data stored on the second system, including:
- using the authorization model to produce a configuration of the second data protection controls;
- storing second data on the second system corresponding to the first data;
- and
- applying the configuration of the second data protection controls to the second data, thereby projecting the authorization model associated with the first data stored on the first system to the second data stored on the second system.
A non-transitory computer readable storage medium having stored thereon computer executable program code configured to cause a computer system to perform steps of:
- receiving first data from a first system having first data protection controls to provide data security for and control access to data stored on the first system;
- producing an authorization model representative of a configuration of the first data protection controls that is used to secure and access the first data;
- storing the first data to a second system having second data protection controls, different from the first data protection controls, to provide data security for and control access to data stored on the second system, including:
- using the authorization model to produce a configuration of the second data protection controls;
- storing second data on the second system corresponding to the first data;
- and
- applying the configuration of the second data protection controls to the second data, thereby projecting the authorization model associated with the first data stored on the first system to the second data stored on the second system.
Dependencies are inferred from the claim text.