Enhancing an integrated end-of-purpose protocol with purpose information
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object of an object type. Target applications are determined that are allowed to process objects of the object type for at least one purpose, based on identified purpose information. An end-of-purpose query is provided to the target applications and an end-of-purpose status is received from each target application that indicates whether the application is able to block the object. The received statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each of the multiple applications that instructs a respective application to locally block the object.
1 . A computer-implemented method comprising:
providing, to each of multiple target applications in a multiple-application landscape, an end-of-purpose query that requests each respective target application to determine whether the respective target application is able to block an object;
receiving, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the multiple target applications that indicates whether the respective target application is able to block the object;
evaluating the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape;
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, providing, to each of the multiple target applications, a block command that instructs a respective application to locally block the object in the respective application; and
updating purpose information in the multiple-application landscape based on the received end-of-purpose statuses.
2 . The computer-implemented method of claim 1 , further comprising determining the target applications, wherein determining the target applications comprises identifying, as the target applications, applications that are allowed to process objects of an object type of the object for at least one purpose.
3 . The computer-implemented method of claim 1 , wherein updating the purpose information comprises:
evaluating the received end-of-purpose statuses and purpose information that indicates for which purposes respective applications are allowed to process objects in the multiple-application landscape; and
updating the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
4 . The computer-implemented method of claim 3 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.
5 . The computer-implemented method of claim 4 , wherein an aligned end-of-purpose has not been reached for the object and the method further comprises determining that the first application has no purposes assigned to the object.
6 . The computer-implemented method of claim 5 , further comprising, based on determining that the first application has no purposes assigned to the object, sending a block command for the object to the first application instructing the first application to block the object.
7 . The computer-implemented method of claim 1 , wherein the target applications do not include a first application based on the first application not having any purposes assigned to the object and wherein the end-of-purpose query is not sent to the first application.
8 . The computer-implemented method of claim 1 , wherein evaluating the received end-of-purpose statuses comprises determining whether each end-of-purpose status indicates end of purpose for the object.
9 . The computer-implemented method of claim 1 , further comprising receiving a block status from each respective target application that indicates a success or failure of processing the block command in the respective target application.
10 . The computer-implemented method of claim 1 , wherein a first end-of-purpose status includes an end-of-purpose time for the object for a first target application.
11 . The computer-implemented method of claim 10 , further comprising determining that the first target application has reached end of purpose for the object based on determining that the end-of-purpose time is a historical time.
12 . The computer-implemented method of claim 10 , further comprising determining that the first target application has not reached end of purpose for the object based on determining that the end-of-purpose time is a future time.
13 . The computer-implemented method of claim 2 , wherein applications that do not process objects of the object type are not included in the target applications.
14 . A system comprising:
an integrated end of purpose handler;
multiple applications included in a multiple-application landscape;
wherein the integrated end of purpose handler is configured to:
provide, to each of multiple target applications in a multiple-application landscape, an end-of-purpose query that requests each respective target application to determine whether the respective target application is able to block an object;
receive, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the multiple target applications that indicates whether the respective target application is able to block the object;
evaluate the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape;
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, provide, to each of the multiple target applications, a block command that instructs a respective application to locally block the object in the respective application; and
updating purpose information in the multiple-application landscape based on the received end-of-purpose statuses.
15 . The system of claim 14 , wherein the integrated end of purpose handler is further configured to:
evaluate the received end-of-purpose statuses and the purpose information; and
update the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
16 . The system of claim 15 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.
17 . The system of claim 16 , wherein an aligned end-of-purpose has not been reached for the object and the integrated end of purpose handler is further configured to determine that the first application has no purposes assigned to the object.
18 . A non-transitory, computer-readable medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations, the operations comprising:
providing, to each of multiple target applications in a multiple-application landscape, an end-of-purpose query that requests each respective target application to determine whether the respective target application is able to block an object;
receiving, as received end-of-purpose statuses, in response to the end-of-purpose query, an end-of-purpose status from each respective target application of the multiple target applications that indicates whether the respective target application is able to block the object;
evaluating the received end-of-purpose statuses to determine whether an aligned end of purpose has been reached for the object in the multiple-application landscape;
in response to determining that the aligned end of purpose has been reached for the object in the multiple-application landscape, providing, to each of the multiple target applications, a block command that instructs a respective application to locally block the object in the respective application; and
updating purpose information in the multiple-application landscape based on the received end-of-purpose statuses.
19 . The computer-readable medium of claim 18 , wherein the operations further comprise:
evaluating the received end-of-purpose statuses and the purpose information; and
updating the purpose information, based on the received end-of-purpose statuses, to create updated purpose information for at least some of the target applications.
20 . The computer-readable medium of claim 19 , wherein updating the purpose information comprises removing a first purpose assignment for a first purpose from a first application in response to determining that no application is processing the object for the first purpose.