Solution for Continuous Control and Protection of Enterprise Data Based on Authorization Projection
AssigneeSap SE
InventorsJohn C. Radkowski, Swetta Singh
Life of this patent
Estimating the term…
Abstract
Extracting data from a source system includes generating an authorization model of the data protection controls applied to the extracted data by the source system. The authorization model is used to map the data protection control applied to the extracted data to generate corresponding data protection controls provided in target system. The extracted data is imported to the target system including implementing the corresponding data protection controls.
Claims20
A method comprising:
- identifying first data from a first system having first data access controls to control access to first data stored on the first system;
- identifying a configuration of the first data access controls for accessing the first data;
- and
- causing the first data to be imported from the first system and exported onto a second system, without changing the first data, the second system having second data access controls, different from the first data access controls, and enabling control access to the first data stored on the second system without changing the first data by:
- transforming the configuration of the first data access controls into a configuration of the second data access controls;
- and
- applying the configuration of the second data access controls to the first data, thereby providing access control to the first data stored on the second system without changing the first data.
A computer system comprising:
- a computer device;
- and
- data storage having stored thereon computer executable program instructions which, when executed by the computer device, cause the computer device to:
- identify first data from a first system having first data access controls to control access to first data stored on the first system;
- identify a configuration of the first data access controls for accessing the first data;
- and
- cause the first data to be imported from the first system and exported onto a second system, without changing the first data, the second system having second data access controls, different from the first data access controls, and enabling control access to the first data stored on the second system without changing the first data by:
- transforming the configuration of the first data access controls into a configuration of the second data access controls;
- and
- applying the configuration of the second data access controls to the first data, thereby providing access control to the first data stored on the second system without changing the first data.
A non-transitory computer readable storage medium having stored thereon computer executable program code configured to cause a computer system to perform steps of:
- identifying first data from a first system having first data access controls to control access to first data stored on the first system;
- identifying a configuration of the first data access controls for accessing the first data;
- and
- causing the first data to be imported from the first system and exported onto a second system, without changing the first data, the second system having second data access controls, different from the first data access controls, and enabling control access to the first data stored on the second system without changing the first data by:
- transforming the configuration of the first data access controls into a configuration of the second data access controls;
- and
- applying the configuration of the second data access controls to the first data, thereby providing access control to the first data stored on the second system without changing the first data.
Dependencies are inferred from the claim text.