Ontology-based data access monitoring

A system configured to monitor a data access activity, the system comprising:

• a memory configured to store an ontology;
• a processor configured to be in communication with the memory;
• a receiver configured to be in communication with the processor, the receiver being configured to:
• receive an indication of a destination concept;
• and
• send the indication of the destination concept to the processor;
• the processor being configured to:
• identify a set of concepts in the ontology, wherein the set of concepts includes the destination concept and includes at least one related concept associated with the destination concept;
• generate a planned path with use of the set of concepts, wherein the planned path is effective to define a first data access order associated with access of at least one of the related concepts and with the destination concept;
• store the planned path in the memory;
• generate a browsing path effective to define a second data access order associated with the data access activity;
• compare the planned path with the browsing path;
• determine a deviation based on the comparison of the planned path and the browsing path;
• and
• monitor the data access activity with use of the deviation.

A method to generate a planned path associated with a data access activity, the method comprising, by a processor:

• receiving an indication of a destination concept;
• identifying a set of concepts in an ontology, wherein the set of concepts includes the destination concept and includes at least one related concept associated with the destination concept;
• obtaining knowledge data that includes at least a known concept associated with a user performing the data access activity;
• searching for the known concept in the set of concepts;
• when the result of the search indicates a presence of the known concept in the set of concepts, removing the known concept from the set of concepts;
• and
• generating the planned path based on a result of the search, wherein the planned path is effective to define a data access order associated with access of at least one of the related concepts and the destination concept.