Dynamic Enforcement of Data Protection Policies for Arbitrary Tabular Data Access to a Corpus of Rectangular Data Sets

A computer system for dynamic enforcement of data protection policies for arbitrary tabular data access as a collection of columns over a plurality of different information assets having different columnar schema, the computer system comprising:

• a bus system;
• a storage device connected to the bus system, wherein the storage device stores program instructions;
• and
• a processor connected to the bus system, wherein the processor executes the program instructions to:
• find, in an enforcement knowledge graph, information asset-assigned terms corresponding to each unique information asset in a virtual information asset that references a set of tabular data in one or more rectangular data sets having columnar schema;
• add the information asset-assigned terms to a hash table of information asset-assigned terms;
• find transitive closures of the information asset-assigned terms in a hierarchical business glossary of terms to form a table of business glossary terms corresponding to each information asset-assigned term;
• determine term intersection between a hash table of any column-assigned terms and the table of business glossary terms;
• assign the information asset-assigned terms to the virtual information asset in response to determining that the term intersection is not empty;
• and
• apply a set of access enforcement policy rules associated with the set of tabular data and a particular user context of a client device user making a data access request to the set of tabular data to the virtual information asset containing column and information asset term information to determine an access enforcement decision corresponding to the data access request.

A computer program product for dynamic enforcement of data protection policies for arbitrary tabular data access as a collection of columns over a plurality of different information assets having different columnar schema, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

• finding, by the computer, in an enforcement knowledge graph, information asset-assigned terms corresponding to each unique information asset in a virtual information asset that references a set of tabular data in one or more rectangular data sets having columnar schema;
• adding, by the computer, the information asset-assigned terms to a hash table of information asset-assigned terms;
• finding, by the computer, transitive closures of the information asset-assigned terms in a hierarchical business glossary of terms to form a table of business glossary terms corresponding to each information asset-assigned term;
• determining, by the computer, term intersection between a hash table of any column-assigned terms and the table of business glossary terms;
• assigning, by the computer, the information asset-assigned terms to the virtual information asset in response to determining that the term intersection is not empty;
• and
• applying, by the computer, a set of access enforcement policy rules associated with the set of tabular data and a particular user context of a client device user making a data access request to the set of tabular data to the virtual information asset containing column and information asset term information to determine an access enforcement decision corresponding to the data access request.