IP Library Patent Application 13623407
Patent Application
App. No. 13/623,407

SYSTEMS AND METHODS FOR DATA PRIVACY AND DESTRUCTION IN MULTI-SYSTEM LANDSCAPES

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
13/623,407
Abstract

A method for managing personal data access in a multi-system landscape includes receiving at a first system in the multi-system landscape an end-of-purpose check result for a personal data record associated with a particular business partner, identifying other systems of the multi-system landscape that perform operations for the particular business partner if the end-of-purpose check result indicates a start-of-retention-time, transmitting requests to each of the identified systems to synchronously perform an end-of-purpose check of local personal data records associated with the particular business partner, and receiving end-of-purpose check results from each of the identified systems. The method further can include initiating a global blocking process for the particular business partner. A system for implementing the method and a non-transitory computer readable medium are also disclosed.

Claims (46)

1 . A computer-implemented method for managing personal data access in a multi-system computer landscape, the method comprising:

receiving at a first processor-controlled system of the multi-system computer landscape an end-of-purpose check result for a personal data record associated with a particular business partner, wherein the end-of-purpose check result is from a second processor-controlled system of the multi-system computer landscape and the personal data record is located in a datastore in communication with at least the second processor-controlled system;

identifying other processor-controlled systems of the multi-system computer landscape that perform operations for the particular business partner if the end-of-purpose check result indicates a start-of-retention-time for the personal data record;

transmitting respective requests to each of the identified other processor-controlled systems to synchronously perform an end-of-purpose check for personal data records local to respective identified other process-controlled systems, wherein the local personal data records are associated with the particular business partner; and

receiving respective end-of-purpose check results from each of the identified other processor-controlled systems.

2 . The method of claim 1 , further including performing an end-of-purpose check for one or more local applications at the second processor-controlled system.

3 . The method of claim 2 , further including:

if an end-of-purpose is reached for the particular business partner with all local applications at the second processor-controlled system, calculating a start-of-retention time for the personal data associated with the particular business partner at the second processor-controlled system;

asynchronously returning the calculated start-of-retention time to the master system; and

if an end-of-purpose is not reached for the particular business partner with all local applications at the second processor-controlled system, scheduling a recheck date for the applications at the second processor-controlled system.

4 . The method of claim 1 , further including storing the end-of-purpose check result in a data record associated with the particular business partner accessible to at least the first processor-controlled system.

5 . The method of claim 1 , further including storing each of the respective end-of-purpose check results in a data record associated with the particular business partner.

6 . The method of claim 1 , further including initiating a global blocking process for the particular business partner on each processor-controlled system of the multi-system computer landscape if a start-of-retention-time is present from each of the identified other processor-controlled systems in the data record associated with the particular business partner.

7 . The method of claim 6 , the global blocking process including:

sending asynchronous requests to each processor-controlled system of the multi-system computer landscape; and

instructing, via the requests, that local business partner data records associated with the particular business partner be archived in an archive store and deleted from each processor-controlled system.

8 . The method of claim 1 , further including scheduling a recheck date for the data record associated with the particular business partner if a start-of-retention-time from each of the identified other processor-controlled systems is absent or invalid.

9 . A non-transitory computer readable medium having stored thereon instructions which when executed by a processor cause the processor to perform the method of:

receiving at a first processor-controlled system of the multi-system computer landscape an end-of-purpose check result for a personal data record associated with a particular business partner, wherein the end-of-purpose check result is from a second processor-controlled system of the multi-system computer landscape and the personal data record is located in a datastore in communication with at least the second processor-controlled system;

identifying other processor-controlled systems of the multi-system computer landscape that perform operations for the particular business partner if the end-of-purpose check result indicates a start-of-retention-time for the personal data record;

transmitting respective requests to each of the identified other processor-controlled systems to synchronously perform an end-of-purpose check for personal data records local to respective identified other process-controlled systems, wherein the local personal data records are associated with the particular business partner; and

receiving respective end-of-purpose check results from each of the identified other processor-controlled systems.

10 . The non-transitory computer readable medium of claim 9 , further including executable instructions to cause a processor to perform the step of performing an end-of-purpose check for one or more local applications at the second processor-controlled system.

11 . The non-transitory computer readable medium of claim 10 , further including executable instructions to cause a processor to perform the steps of:

if an end-of-purpose is reached for the particular business partner with all local applications at the second processor-controlled system, calculating a start-of-retention time for the personal data associated with the particular business partner at the second processor-controlled system;

asynchronously returning the calculated start-of-retention time to the master system; and

if an end-of-purpose is not reached for the particular business partner with all local applications at the second processor-controlled system, scheduling a recheck date for the applications at the second processor-controlled system.

12 . The non-transitory computer readable medium of claim 9 , further including executable instructions to cause a processor to perform the step of storing the end-of-purpose check result in a data record associated with the particular business partner accessible to at least the first processor-controlled system.

13 . The non-transitory computer readable medium of claim 9 , further including executable instructions to cause a processor to perform the step of storing each of the respective end-of-purpose check results in a data record associated with the particular business partner accessible to at least the first processor-controlled system.

14 . The non-transitory computer readable medium of claim 9 , further including executable instructions to cause a processor to perform the step of initiating a global blocking process for the particular business partner on each processor-controlled system of the multi-system computer landscape if a start-of-retention-time is present from each of the identified other processor-controlled systems in the data record associated with the particular business partner.

15 . The non-transitory computer readable medium of claim 9 , further including executable instructions to cause a processor to perform the step of scheduling a recheck date for the data record associated with the particular business partner if a start-of-retention-time is not present from each of the identified other processor-controlled systems.

15 . A multi-system computer landscape comprising:

two or more processor-controlled systems in communication remotely via an electronic communication network;

at least one of the processor-controlled systems including a control processor configured to implement at least one of a business partner data management component, an information life cycle management component, and an application component;

at least one of the processor-controlled systems in communication with a datastore coupled to the electronic communication network;

a control processor in one of the processor-controlled systems configured to act as a master system, wherein the master system control processor is configured to identify other processor-controlled systems that include applications that access personal data for a particular business partner, transmit respective synchronous requests to the identified other processor-controlled systems to determine if applications have reached an end-of-purpose for the particular business partner, and perform a global blocking process if each of the other process-controlled systems indicate a start-of-retention time for the particular business partner.

16 . The system of claim 15 , the business partner data management component including an end-of-purpose interface component configured under processor control to perform verification of an application reaching its end of purpose for personal data records associated with a particular business partners.

17 . The system of claim 15 , the information lifecycle component including:

an archiving object component configured to archive information lifecycle management objects;

a blocking component configured to block access to the personal data records; and

a retention management component configured to customize at least one of the residence rules and the retention time rules associated with the one or more of the applications.

18 . The system of claim 15 , including a datastore coupled to the control processor, the storage device storing instructions configured to cause the processor to:

receive at a first processor-controlled system an end-of-purpose check result for a personal data record associated with a particular business partner, wherein the end-of-purpose check result is from a second processor-controlled system and the personal data record is located in the datastore;

identify other processor-controlled systems of the multi-system computer landscape that perform operations for the particular business partner if the end-of-purpose check result indicates a start-of-retention-time for the personal data record;

transmit respective requests to each of the identified other processor-controlled systems to asynchronously perform an end-of-purpose check for personal data records local to respective identified other process-controlled systems, wherein the local personal data records are associated with the particular business partner; and

receiving respective end-of-purpose check results from each of the identified other processor-controlled systems.

Assignments (2)
CHANGE OF NAME Recorded Aug 26, 2014
From: SAP AG
To: SAP SE
Reel/Frame 033625/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 20, 2012
From: SARFERAZ, SIAR
To: SAP AG
Reel/Frame 029017/0606 →