Patent ID: 7302569

Claim:
A method of implementing a data access control facility, said method comprising: assigning personally identifying information (PII) classification labels to PII data objects, wherein a PII data object has one PII classification label assigned thereto; defining at least one PII purpose serving function set (PSFS) comprising a list of application functions that read or write PII data objects; assigning a PII classification label to each PSFS, wherein a PII data object is only read accessible via an application function of a PII PSFS having a PII classification label that is equal to or a proper subset of the PII classification label of the PII data object; wherein a PII data object is write accessible by an application function of a PII PSFS having a PII classification label that is equal to or dominant of the PII classification label of the PII data object; and wherein the PII data object may be write accessible by an application function of a PII PSFS having a list of PII reclassifications which are allowed to that PII PSFS.