Back to results
US 9,317,710 B2Granted
System and method for specification and enforcement of a privacy policy in online services
AssigneeXerox Corporation
InventorThierry Jacquin
Life of this patent
Estimating the term…
Abstract
A method for implementing a privacy policy includes receiving code for an application which includes definitions for a set of classes of records and for each of the record classes in the set, a definition of at least one field. A user selects one or more of the record classes and fields of the application as sensitive. A records manager is generated for identifying an associated minimization service for generating a minimized value of data in the sensitive field. A mapping aspect identifies joins in the application code where the minimization service is to be called. When the records manager and mapping aspect are deployed with the application, the minimization service generates a minimized value of data in the respective sensitive field.
Claims16
A method for implementing a privacy policy, comprising:
- receiving code for an application which includes definitions for a set of classes of records and for each of the record classes, a definition of at least one field;
- receiving a selection of at least one of the fields of the application that is designated by a user as a sensitive field;
- with a hardware processor, based on the selection, generating a records manager and a mapping aspect,
- the records manager including a private class definition corresponding to each record class that includes at least one of the fields designated as a sensitive field, the private class definition identifying an associated minimization service for generating a minimized value of data in the sensitive field;
- the mapping aspect including pointcuts for identifying joins at which the records manager is to augment the functioning of the application code by calling the minimization service to generate a minimized value of data in the respective sensitive field, the records manager and mapping aspect being configured to be deployed when the application is run, whereby the minimization service generates a minimized value of data in the respective sensitive field;
- wherein the mapping aspect includes a pointcut which identifies a join point for each sensitive field;
- further comprising with a grammar, generating a model of the application which lists the sensitive fields and tracks the record classes which contain the sensitive fields, the generating of the records manager comprising generating a records manager source file based on the model.
4 more elements
A system for implementing a privacy policy, comprising:
- memory which stores code for an application which includes definitions for a set of classes of records and for each of the record classes, a definition of at least one field;
- an editor for receiving a selection of at least one of the fields of the application that is designated by a user as a sensitive field;
- a records manager generator which generates a records manager, the records manager including a private class definition corresponding to each of the records classes that includes at least one of the fields designated as a sensitive field, the private class definition identifying an associated minimization service for generating a minimized value of data in the respective sensitive field;
- a mapping aspect generator which generates a mapping aspect, the mapping aspect including pointcuts for identifying joins at which the records manager is to augment the functioning of the application code by calling the minimization service to generate a minimized value of data in the respective sensitive field, the records manager and mapping aspect being configured to be deployed when the application is run, whereby the minimization service generates a minimized value of data in the respective sensitive field;
- and
- wherein the mapping aspect generator generates a mapping aspect include a pointcut which identifies a join point for each sensitive field;
- a editor using a grammar, generates a model of the application which lists the sensitive fields and tracks the record classes which contain the sensitive fields, the generating of the records manager comprising generating a records manager source file based on the model;
- a processor which implements at least one of the editor, records manager generator, and the mapping aspect generator.
5 more elements
A method for implementing a privacy policy, comprising:
- providing in memory a records manager and a mapping aspect,
- receiving code for an application which includes definitions for a set of classes of records and for each of the record classes, a definition of at least one field;
- receiving a selection of at least one of the fields of the application that is designated by a user as a sensitive field;
- records manager including a private class definition corresponding to each record class of an application that includes at least one field that has been designated as a sensitive field, the private class definition identifying an associated minimization service for generating a minimized value of data in the sensitive field;
- the mapping aspect including pointcuts for identifying joins at which the records manager is to augment the functioning of code of the application by calling the minimization service to generate a minimized value of data in the respective sensitive field;
- and
- wherein the mapping aspect includes a pointcut which identifies a join point for each sensitive field;
- further comprising with a grammar, generating a model of the application which lists the sensitive fields and tracks the record classes which contain the sensitive fields, the generating of the records manager comprising generating a records manager source file based on the model;
- with a hardware processor, deploying the records manager and mapping aspect together with the application code, whereby the minimization service generates a minimized value of data in the sensitive field.
6 more elements
Dependencies are inferred from the claim text.