IP Library Granted Patent US 11,328,089
Granted Patent B2
US 11,328,089 · App. 16/576,935 · Granted May 10, 2022

Built-in legal framework file management

Inventors: Aris Gkoulalas-Divanis (Waltham, MA); Corville O. Allen (Morrisville, NC)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
G06F21/6245G06F21/602G06F21/604G06F21/6227G06F21/6272
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,328,089
App. No.
16/576,935
Granted
May 10, 2022
Kind
B2
Abstract

An approach is disclosed that enforces a privacy legal framework filesystem along with an operating system (OS) to enforce the privacy legal framework. An access of a datum in a selected file in the filesystem includes accessing a metadata associated with the selected file where the metadata includes a privacy state and an owner consent-based access policy. The owner consent-based access policy is enforced by the OS via special-purpose support requiring usage of the metadata to access the selected file.

Claims (41)

1. A method that enforces a privacy legal framework within a storage of an information handling system that includes a processor and a memory accessible by the processor, the method comprising:

providing a filesystem along with an operating system (OS) to enforce the privacy legal framework wherein an access of a datum in a selected file in the filesystem includes accessing a metadata associated with the selected file wherein the metadata includes a privacy state and an owner consent-based access policy; and

enforcing by the OS via special-purpose custom commands requiring usage of the metadata to access the selected file, the owner consent-based access policy.

2. The method of claim 1 , wherein the privacy legal framework is selected from a group consisting of General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPPA), Personal Information Protection and Electronic Documents Act (PIPEDA), and Food and Drug Administration (FDA).

3. The method of claim 1 , wherein the selected file is encrypted, and wherein decryption of the selected file requires access from the OS.

4. The method of claim 1 , wherein the owner consent-based access policy further comprises:

an auditing information, an owner information, an expiration, an access information, and a consent information.

5. The method of claim 4 , wherein the auditing information records information related to accessing the selected file and further comprises:

recording who accessed the selected file;

recording when the selected file is accessed; and

recording actions performed on the selected file.

6. The method of claim 4 , wherein the consent information includes a purpose for which personal data can be used, a date that an authorization was given by a data owner, and a date of the expiration.

7. The method of claim 6 , wherein the selected file is deleted automatically after the date of the expiration.

8. The method of claim 1 , further comprising:

tracking, automatically, copies of the selected file.

9. The method of claim 8 , further comprising:

adjusting contents of the tracked copies of the selected file based on a current consent information of a data owner.

10. An information handling system that enforces a privacy legal framework comprising:

One or more processors;

a memory coupled to at least one of the processors;

a network interface that connects a local node to one or more remote nodes; and

a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:

providing a filesystem along with an operating system (OS) to enforce the privacy legal framework wherein an access of a datum in a selected file in the filesystem includes accessing a metadata associated with the selected file wherein the metadata includes a privacy state and an owner consent-based access policy; and

enforcing by the OS via special-purpose custom commands requiring usage of the metadata to access the selected file, the owner consent-based access policy.

11. The information handling system of claim 10 , wherein the privacy legal framework is selected from a group consisting of General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPPA), Personal Information Protection and Electronic Documents Act (PIPEDA), and Food and Drug Administration (FDA).

12. The information handling system of claim 10 , wherein the selected file is encrypted, and decryption of the selected file requires access from the OS.

13. The information handling system of claim 10 , wherein the owner consent-based access policy further comprises:

an auditing information, an owner information, an expiration, an access information, and a consent information.

14. The information handling system of claim 13 , wherein the auditing information records information related to accessing the selected file and wherein the actions further comprise: recording who accessed the selected file; recording when the selected file is accessed; and recording actions performed on the selected file.

15. A computer program product that enforces a privacy legal framework stored in a computer readable storage medium, comprising computer program code that, when executed by an information handling system, performs actions comprising:

providing a filesystem along with an operating system (OS) to enforce the privacy legal framework wherein an access of a datum in a selected file in the filesystem includes accessing a metadata associated with the selected file wherein the metadata includes a privacy state and an owner consent-based access policy; and

enforcing by the OS via special-purpose custom commands requiring usage of the metadata to access the selected file, the owner consent-based access policy.

16. The computer program product of claim 15 , wherein the privacy legal framework is selected from a group consisting of General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPPA), Personal Information Protection and Electronic Documents Act (PIPEDA), and Food and Drug Administration (FDA).

17. The computer program product of claim 15 , wherein the selected file is encrypted, and decryption of the selected file requires access from the OS.

18. The computer program product of claim 15 , wherein the owner consent-based access policy further comprises:

an auditing information, an owner information, an expiration, an access information, and a consent information.

19. The computer program product of claim 18 , wherein the auditing information records information related to accessing the selected file and wherein the actions further comprise:

recording who accessed the selected file;

recording when the selected file is accessed; and

recording actions performed on the selected file.

20. The computer program product of claim 19 , wherein the consent information includes a purpose for which personal data can be used, a date that an authorization was given by a data owner, and an expiration date.

Assignments (3)
SECURITY INTEREST Recorded Oct 1, 2025
From: MERATIVE US L.P.; MERGE HEALTHCARE INCORPORATED
To: TCG SENIOR FUNDING L.L.C., AS COLLATERAL AGENT
Reel/Frame 072808/0442 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2022
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: MERATIVE US L.P.
Reel/Frame 061496/0752 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 20, 2019
From: GKOULALAS-DIVANIS, ARIS; ALLEN, CORVILLE O.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050441/0028 →