Multiple synonymous identifiers in data privacy integration protocols
The present disclosure involves systems, software, and computer implemented methods for using multiple synonymous identifiers in data privacy integration protocols. One example method includes identifying a request to initiate a protocol in a multiple-application landscape for an object with an identifier. A determination is made that at least one context-using application participant of the protocol relies on a context-providing application participant of the protocol for resolving the identifier to a local identifier local to a context of the context-providing application participant. A resolution request is sent to context-providing application participants that can provide resolution for an identifier for at least one context-using application. A local identifier corresponding to the identifier that is local to the context of the context-providing application participant is received from each context-providing application participant. A protocol work package that includes a resolved local identifier to is sent to each context-using application participant.
1. A computer-implemented method comprising:
identifying a request to initiate a data privacy integration protocol in a multiple-application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non-context-using application participant that includes a result of a respective non-context-using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application participants and second data privacy integration protocol responses received from non-context-using application participants.
2. The computer-implemented method of claim 1 , wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.
3. The computer-implemented method of claim 1 , wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object.
4. The computer-implemented method of claim 1 , wherein the data privacy integration protocol is an integrated personal data retrieval protocol, the object corresponds to a data subject, and the request is to gather data concerning the data subject.
5. The computer-implemented method of claim 1 , wherein a first context-using application participant understands the local identifier of a first context-providing protocol participant.
6. The computer-implemented method of claim 5 , wherein the first context-providing protocol participant replicates data including an object with the local identifier to the first context-using protocol participant.
7. The computer-implemented method of claim 1 , wherein the first identifier is a common identifier understood by multiple applications of the multiple-application landscape.
8. The computer-implemented method of claim 7 , wherein the common identifier is assigned to the object by an object redistribution service.
9. The computer-implemented method of claim 8 , wherein the object redistribution service is a master data integration service.
10. The computer-implemented method of claim 1 , wherein the first identifier is received in a request from a requester that initiates the data privacy integration protocol.
11. The computer-implemented method of claim 1 , wherein an initial request from a requester includes a second identifier different from the first identifier, the method further comprising:
sending a second resolution request to a first context-providing application participant to resolve the second identifier to a common identifier understood by multiple applications of the multiple-application landscape;
receiving the common identifier as the first identifier in response to the second resolution request; and
modifying the initial request to include the first identifier rather than the second identifier.
12. The computer-implemented method of claim 1 , further comprising:
receiving a second request that includes a second identifier from a first context-using application;
sending a second resolution request to a first context-providing application to resolve the second identifier to a local identifier; and
providing the local identifier in a third data privacy integration work package to a second context-using application.
13. The computer-implemented method of claim 1 , further comprising receiving, from a first context-providing application participant in response to the resolution request, along with the local identifier, a second local identifier corresponding to the first identifier that is local to a second context understood by the context-providing application participant.
14. A system comprising:
one or more computers; and
a computer-readable medium coupled to the one or more computers having instructions stored thereon which, when executed by the one or more computers, cause the one or more computers to perform operations comprising:
identifying a request to initiate a data privacy integration protocol in a multiple-application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non-context-using application participant that includes a result of a respective non-context-using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application participants and second data privacy integration protocol responses received from non-context-using application participants.
15. The system of claim 14 , wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.
16. The system of claim 14 , wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object.
17. The system of claim 14 , wherein the data privacy integration protocol is an integrated personal data retrieval protocol, the object corresponds to a data subject, and the request is to gather data concerning the data subject.
18. A non-transitory, computer-readable medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations, the operations comprising:
identifying a request to initiate a data privacy integration protocol in a multiple-application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non-context-using application participant that includes a result of a respective non-context-using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application participants and second data privacy integration protocol responses received from non-context-using application participants.
19. The computer-readable medium of claim 18 , wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.
20. The computer-readable medium of claim 18 , wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object.