Data resource control data structure and method

A physical memory usable to control data within a data datastore, the memory comprising:

• a plurality of nodes of a non-hierarchical data structure, the non-hierarchical data structured defined by at least one of the plurality of nodes includes a non-hierarchical reference to another of the plurality of nodes, each node of the plurality defined by a node structure comprising:
• an identifier (ID) of a particular node whereby the particular node may be referenced by at least one of the plurality of nodes;
• a referent attribute that references at least one other node of the plurality of nodes,
• a security node of the non-hierarchical data structure, the security node defined by the node structure and further comprising:
• a protected resource secured by a control policy establishing an authorized context for which utilization of the protected resource is authorized, the control policy usable to evaluate a context dataset associated with an authorization request of a device in relation to the authorized context defined by the control policy, the control policy comprising a first component that is a control algorithm and optionally a second component that is a control dataset,
• wherein the context dataset is at least one of a state dataset that comprises a state value for each of one or more state attributes associated with a state of the device at generation of the authorization request and an external dataset comprising an external value for each of one or more external attributes associated with a source other than the authorization request of the device.
• the control algorithm that is the first component of the control policy comprising one or more conditionals each comparing a first input that is any of the state value of one or more state attributes and the external value of one or more external attributes with a second input that any of a different state value of the one or more state attributes, a different external value of the one or more external attributes, and a control value range of the control dataset,

A physical memory usable to store and protect information within a datastore, the memory comprising:

• a plurality of nodes of a non-hierarchical data structure, the non-hierarchical data structured defined by at least one of the plurality of nodes includes a non-hierarchical reference to another of the plurality of nodes, each node of the plurality defined by a node structure comprising:
• an identifier (ID) of a particular node whereby the particular node may be referenced by at least one of the plurality of nodes;
• a contained data that the particular node of the plurality of nodes contains,
• a security node of a non-hierarchical data structure, the security node defined by the node structure and further comprising:
• a protected resource secured by a control policy establishing an authorized context for which utilization of the protected resource is authorized, the control policy usable to evaluate a context dataset associated with an authorization request of a device in relation to the authorized context defined by the control policy, the control policy comprising a first component that is a control algorithm and a second component that is a control dataset;
• and
• the control dataset that is the second component of the control policy, the control dataset comprising one or more control attributes having a control value range specified for each of the one or more control attributes, the control value range of each of the one or more control attributes usable as an input to the control algorithm.

A method of forming a data structure to control data within a datastore, using a computer processor and physical memory, the method and comprising:

• receiving a selection of a node stored in a non-hierarchical data structure, the node comprising:
• a unique identifier (UID) of the node usable to uniquely address the node within the datastore,
• a content element (NT element) comprising one or more attribute-value pairs that include a contained data that the node contains,
• designating a portion of the contained data to be a protected resource of the node;
• defining a control dataset that is a first component of a control policy by:
• specifying one or more control attributes to be evaluated against corresponding attributes of a context dataset, wherein the context dataset is at least one of a state dataset of a state of the client device at an authorization request and an external dataset from a source other than the authorization request of the device, and
• specifying a control value range for each of the control attributes, each control value range usable as inputs to a control algorithm that is a second component of the control policy;
• depositing the control dataset in a security sub-element of the node of the non-hierarchical data structure;