IP Library Granted Patent US 9,477,842
Granted Patent B2
US 9,477,842 · App. 13/826,638 · Granted Oct 25, 2016

Business partner data deletion for privacy

Inventor: Dinesh Ravindran (Bangalore, IN)
Assignee: SAP SE
G06F21/62G06F21/604G06F21/6245G06Q10/0635G06F2221/2143
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,477,842
App. No.
13/826,638
Granted
Oct 25, 2016
Kind
B2
Abstract

Various embodiments illustrated and described herein include at least one of systems, modules, processes, methods, and software that operate to keep customer, vendor, and business partner private information private.

Claims (60)

1. A method comprising:

identifying, by retrieving computer application configuration settings from a data storage device, all applications registered to utilize information lifecycle management services with regard to residence, blocking, and retention periods for private data of entities, wherein:

the residence period is a period within which certain data is maintained and is accessible to a first group including at least one user or at least one process;

the blocking period is a period following the residence period within which the certain data is maintained but access of the particular data is blocked from at least a portion of the first group; and

the retention period is a period following the blocking period following the expiration of which the particular data is to be deleted; for each entity represented in a set of one or more private data tables and for each registered application, determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked and whether a retention period is reached with regard to data of the respective entity, wherein:

determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes evaluating date-time stamp data indicating when respective data was created or last modified in view of the residence period, date-time stamp data outside of the residence period indicating access to the respective entity data stored in the one or more private data tables and registered applications is to be blocked; and

determining whether a retention period is reached with regard to data of the respective entity includes evaluating the date-time stamp data indicating when respective data was created or last modified in view of the retention period, date-time stamp data outside of the retention period indicating access to the respective entity data stored in the one or more private data tables and registered applications is to be deleted;

for each entity where transaction data or private data in the private data tables should be blocked, blocking access to the transaction data and private data associated with the respective entity and moving the transaction data or private data for which access is blocked out of the set of one or more private data tables and each registered application to a data archive; and

for each entity where the retention period has been reached, deleting data of the entity from the set of one or more private data tables and each registered application.

2. The method of claim 1 , wherein entity is a business unit of an organization.

3. The method of claim 1 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determining whether transaction data or private data in the private data tables has been utilized or created within the residence period; and

for each entity where transaction data or private data in the private data tables has not been utilized or created within the residence period, blocking access to the transaction data and private data associated with the respective entity.

4. The method of claim 1 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determining whether a purpose exists for continued use of transaction data or private data in the private data tables; and

for each entity, when a purpose does not exist in any of the registered applications with regard to transaction data or private data in the private data tables, blocking access to the transaction data and private data associated with the respective entity.

5. The method of claim 1 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determining whether transaction data or private data in the private data tables has been utilized or created within the residence period;

for each entity represented in the set of one or more private data tables and for each registered application, determining whether a purpose exists for continued use of transaction data or private data in the private data tables;

for each entity, when a purpose does not exist for continued use of transaction data or private data in the private tables or in any of the registered applications and where transaction data or private data in the private data tables has not been utilized or created within the residence period, blocking access to the transaction data and private data associated with the respective entity.

6. The method for claim 1 , wherein deleting data of the entity further includes deleting archived data.

7. A non-transitory computer readable medium, with instructions stored thereon which when executed by at least one processor of at least one computing device causes the at least one computing device to:

identify, by retrieving computer application configuration settings from a data storage device, all applications registered to utilize information lifecycle management services with regard to residence, blocking, and retention periods for private data of entities, wherein:

the residence period is a period within which certain data is maintained and is accessible to a first group including at least one user or at least one process;

the blocking period is a period following the residence period within which the certain data is maintained but access of the particular data is blocked from at least a portion of the first group; and

the retention period is a period following the blocking period following the expiration of which the particular data is to be deleted; for each entity represented in a set of one or more private data tables and for each registered application, determine whether access to entity data stored in the one or more private data tables and registered applications should be blocked and whether a retention period is reached with regard to data of the respective entity, wherein:

determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes evaluating date-time stamp data indicating when respective data was created or last modified in view of the residence period, date-time stamp data outside of the residence period indicating access to the respective entity data stored in the one or more private data tables and registered applications is to be blocked; and

determining whether a retention period is reached with regard to data of the respective entity includes evaluating the date-time stamp data indicating when respective data was created or last modified in view of the retention period, date-time stamp data outside of the retention period indicating access to the respective entity data stored in the one or more private data tables and registered applications is to be deleted;

for each entity where transaction data or private data in the private data tables should be blocked, blocking access to the transaction data and private data associated with the respective entity and moving the transaction data or private data for which access is blocked out of the set of one or more private data tables and each registered application to a data archive; and

when the retention period of an entity has been reached, delete data of the entity from the set of one or more private data tables and each registered application.

8. The non-transitory computer readable medium of claim 7 , wherein deleting data of the entity further includes deleting archived data.

9. The non-transitory computer readable medium of claim 7 , wherein an entity is a business unit of an organization.

10. The non-transitory computer readable medium of claim 7 , with further instructions stored thereon which when executed by the at least one processor of the at least one computing device further causes the at least one computing device to:

for each entity represented in a set of one or more private data tables and for each registered application, determine whether transaction data or private data in the private data tables has been utilized or created within the residence period; and

for each entity where transaction data or Ovate data in the private data tables has not been utilized or created within the residence period, block access to the transaction data and private data associated with the respective entity.

11. The non-transitory computer readable medium of claim 7 , with further instructions stored thereon which when executed by the at least one processor of the at least one computing device further causes the at least one computing device to:

for each entity represented in a set of one or more private data tables and for each registered application, determine whether a purpose exists for continued use of transaction data or private data in the private data tables; and

for each entity, when a purpose does not exist in any of the registered applications with regard to transaction data or private data in the private data tables, block access to the transaction data and private data associated with the respective entity.

12. A system comprising:

at least one processor, at least one memory device, and at least one database;

a data blocking module stored on the at least one memory device and executable by the at least one processor to:

identify, by retrieving computer application configuration settings from the at least one memory device, applications registered to utilize information lifecycle management services with regard to residence, block, and retention periods for private data of entities stored in the at least one database, wherein:

the residence period is a period within which certain data is maintained and is accessible to a first group including one user or at least on process;

the blocking period is a period following the residence period within which the certain data is maintained but access of the particular data is block blocked from at least a portion of the first group; and

the retention period is a period following the blocking period following the expiration of which the particular data is to be deleted; for each entity represented in a set of one or more private data tables present in the at least one database and for each registered application, determine whether access to entity data stored in the one or more private data tables and registered applications should be blocked and whether a retention period is reached with regard to data of the respective entity, wherein:

determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes evaluating datetime stamp data indicating when respective data was created or last modified in view of the residence period, date-time stamp data outside of the residence period indicating access to the respective entity data, stored in the one or more private data tables and registered applications is to be blocked; and

determining whether a retention period is reached with regard to data of the respective entity includes evaluating the date-time stamp data indicating when respective data was created or last modified in view of the retention period, date time stamp data outside of the retention period indicating access to the respective entity data stored in the one or more private data tables and registered applications is to be deleted;

for each entity where transaction data or private data in the private data tables should be blocked, write data to the at least one database and issue commands to each registered application to block access to the transaction data and private data associated with the respective entity and moving the transaction data or private data for which access is blocked out of the set of one or more private data tables and each registered application to a data archive; and

for each entity where the retention period has been reached, issue delete commands to the at least one database and issue commands to each registered application to delete data of the entity from the set of one or more private data tables and each registered application.

13. The system of claim 12 , wherein an entity is a business unit of an organization.

14. The system of claim 12 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determine whether transaction data or private data in the private data tables has been utilized or created within the residence period; and

for each entity where transaction data or private data in the private data tables has not been utilized or created within the residence period write data to the at least one database and issue commands to each registered application to block access to the transaction data and private data associated with the respective entity.

15. The system of claim 12 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determine whether a purpose exists for continued use of transaction data or private data in the private data tables; and

for each entity, when a purpose does not exist in any of the registered applications with regard to transaction data or private data in the private data tables, write data to the at least one database and issue commands to each registered application to block access to the transaction data and private data associated with the respective entity.

16. The system of claim 12 , wherein determining whether access to entity data stored in the one or more private data tables and registered applications should be blocked includes:

for each entity represented in the set of one or more private data tables and for each registered application, determine whether transaction data or private data in the private data tables has been utilized or created within the residence period;

for each entity represented in the set of one or more private data tables and for each registered application, determine whether a purpose exists for continued use of transaction data or private data in the private data tables;

for each entity, when a purpose does not exist for continued use of transaction data or private data in the private tables or in any of the registered applications and where transaction data or private data in the private data tables has not been utilized or created within the residence period, write data to the at least one database and issue commands to each registered application to block access to the transaction data and private data associated with the respective entity.

Assignments (2)
CHANGE OF NAME Recorded Aug 26, 2014
From: SAP AG
To: SAP SE
Reel/Frame 033625/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 14, 2013
From: RAVINDRAN, DINESH
To: SAP AG
Reel/Frame 029999/0524 →
Continuity (2)
Provisional Application 61713853 · Oct 15, 2012
Related Publication 20140109238A1 · Apr 17, 2014