Enhanced view compliance tool

Patent metadata

Field	Value
Publication number	US-9652630-B2
Application number	US-201614987799-A
Country	US
Kind code	B2
Filing date	Jan 5, 2016
Priority date	Sep 30, 2013
Publication date	May 16, 2017
Grant date	May 16, 2017

Abstract

An apparatus comprises a network interface and a processor communicatively coupled to the network interface. The network interface communicates with a database comprising a plurality of columns and a plurality of views. Each view is associated with at least one column of the plurality of columns. The processor receives a request to determine one or more noncompliant views of the database. For each view and each column associated with the view, the processor determines whether the column is associated with a privacy indicator that indicates that the column should be masked and whether the view masks the column. The processor then determines that the view is noncompliant if the view does not mask at least one column that should be masked, and generates a report that indicates whether each view of the database is noncompliant. The network interface communicates the report.

First claim

What is claimed is:

1. An apparatus comprising:
a network interface operable to communicate with a database comprising:
a plurality of columns; and
a plurality of views, wherein each view is associated with at least one column of the plurality of columns; and

a processor communicatively coupled to the network interface and operable to:
receive a request to determine one or more noncompliant views of the database;
receive a second request to determine whether a second view of the database is noncompliant;
in response to receiving the request, for each view of the plurality of views:
for each column associated with the view, determine whether the column is associated with a privacy indicator that indicates that the column should be masked;
for each column associated with the view, determine whether the view masks the column; and
determine that the view is noncompliant if the view does not mask at least one column associated with the view, wherein the at least one column is further associated with at least one privacy indicator that indicates that the at least one column should be masked;

determine, in response to receiving the second request, that the second view does not exist within the database;
generate a report that indicates whether each view of the database is noncompliant, wherein the network interface is further operable to communicate the report to a sender of the request;
wherein the report comprises for each view of the database that is determined to be noncompliant, a subreport comprising a description of the at least one column associated with the view, and a link corresponding to the subreport; and
generate a second report that indicates that the second view does not exist in the database, wherein:
the second report highlights a description associated with the second view to indicate that the second view does not exist within the database; and
the network interface is further operable to communicate the second report to a sender of the second request;

wherein in response to the request, for each view of the database, the processor is further operable to determine, based on an exclusion indicator associated with the view, whether the view is an excluded view, wherein the excluded view is not required to mask columns associated with privacy indicators that indicate that the columns should be masked, and the report indicates each view of the database that is an excluded view.

2. The apparatus of claim 1 , wherein the processor is further operable to determine whether the request is a request to determine one or more noncompliant views of the database or a request to determine whether a view of the database is noncompliant.

3. The apparatus of claim 1 , wherein the processor is further operable to:
in response to receiving the second request, for each column associated with the second view:
determine whether the second view masks the column; and
determine whether the column is associated with a privacy indicator that indicates that the column should be masked;

determine that the second view is noncompliant if the second view does not mask at least one column associated with the second view, wherein the at least one column is further associated with at least one privacy indicator that indicates that the at least one column should be masked; and
generate a second report that indicates whether the second view is noncompliant, wherein the network interface is further operable to communicate the second report to a sender of the second request.

4. The apparatus of claim 1 , wherein:
the processor is further operable to determine for each view of the database, in response to the request, whether the view is associated with a column corresponding to a social security number; and
the report indicates each view of the database that is determined to correspond to a social security number.

5. An apparatus comprising:
a memory operable to store instructions; and
a processor communicatively coupled to the memory and, when the instructions are executed, operable to:
communicate a request to determine one or more noncompliant views of a database, wherein the database comprises:
a plurality of columns, wherein each column is associated with a privacy indicator; and
a plurality of views, wherein each view is associated with at least one column of the plurality of columns;

receive, in response to the request, a report that indicates whether each view of the database is noncompliant, wherein:
for each column associated with the view, whether there is a privacy indicator associated with the view that indicates that the view should be masked is determined;
for each column associated with the view, whether the view masks the column is determined; and
a view is noncompliant if the view does not mask at least one column associated with the view, wherein the at least one column is further associated with at least one privacy indicator that indicates the at least one column should be masked;

communicate a second request to determine whether a second view of the database is noncompliant;
in response to the second request, receive a second report that the second view does not exist within the database, wherein the second report highlights a description associated with the second view to indicate that the second view does not exist within the database;
wherein the report comprises for each view of the database that is determined to be noncompliant, a subreport comprising a description of the at least one column associated with the view, and a link corresponding to the subreport; and

wherein in response to the request, for each view of the database, whether the view is an excluded view is determined based on an exclusion indicator associated with the view, wherein the excluded view is not required to mask columns associated with privacy indicators that indicate that the columns should be masked, and the report indicates each view of the database that is an excluded view.

6. The apparatus of claim 5 , wherein whether the request is a request to determine one or more noncompliant views of the database or a request to determine whether a view of the database is noncompliant is determined.

7. The apparatus of claim 5 , wherein the processor is further operable to:
in response to the second request, receive a second report that indicates whether the second view is noncompliant, wherein:
for each column associated with the second view:
whether the second view masks the column is determined; and
whether the column is associated with a privacy indicator that indicates that the column should be masked is determined; and

the second view is noncompliant if the second view does not mask at least one column associated with the second view, wherein the at least one column is further associated with at least one privacy indicator that indicates that the at least one column should be masked.

8. The apparatus of claim 5 , wherein:
for each view of the database, in response to the request, whether the view is associated with a column corresponding to a social security number is determined; and
the report indicates each view of the database that is determined to correspond to a social security number.

9. A method comprising:
receiving a request to determine one or more noncompliant views of a database comprising:
a plurality of columns; and
a plurality of views, wherein each view is associated with at least one column of the plurality of columns;

in response to receiving the request, for each view of the plurality of views:
determining, by a processor, for each column associated with the view, whether the column is associated with a privacy indicator that indicates that the column should be masked;
d

Assignees

• Bank Of America

Inventors

• Padmanabhan Bharani Shangar
• Lakshmi Vidhya
• Harvey Anncharlot H
• O'Leary Debra
• Narasingan Nithyabala
• Chinthamani Saravanan

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F16/2393

  Updating materialised views · CPC title

• G06F21/6227 Primary

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F17/30383

  Physics · mapped topic