Implementation and use of PII data access control facility employing personally identifying information labels and purpose serving function sets

US7617393B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Linda N. Betz · Poughkeepsie, US
• John C. Dayka · New Paltz, US
• Walter B. Farrell · Woodstock, US
• Richard Henry Guski · Red Hook, US
• Guenter Karjoth · Wetzikon, CH
• Mark A. Nelson · Oronoco, US
• Birgit M. Pfitzmann · Samstagern, CH
• Michael Waidner · Darmstadt, DE
• Matthias Schunter · Seeheim-Jugenheim, DE

Key dates

• Filing date: Jun 18, 2007
• Grant date: Nov 10, 2009
• Expiry date: Dec 31, 2027

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2149
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

A data access control facility is implemented by assigning personally identifying information (PII) classification labels to PII data objects, with each PII data object having one PII classification label assigned thereto. The control facility further includes at least one PII purpose serving function set (PSFS) comprising a list of application functions that read or write PII data objects. Each PII PSFS is also assigned a PII classification label. A PII data object is accessible via an application function of a PII PSFS having a PII classification label that is identical to or dominant of the PII classification label of the PII object. A user of the control facility is assigned a PII clearance set which contains a list of at least one PII classification label, which is employed in determining whether the user is entitled to access a particular function.