PATENT CLAIM ANALYSIS

Application Number: 16147364
Application Type: Utility
Filing Date: 2018-09
Publication Date: 2019-01
Patent Classification: ["726", "001000"]

Abstract:
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for managing, and enforcing policies on data security. A policy appliance includes a policy administration point, a policy decision point, a policy enforcement point and, optionally, an auditing module. The policy appliance can execute in a self-contained environment, e.g., a single virtual machine, a single physical machine, or a cluster of virtual machines or physical machines identically configured. The self-contained policy appliance can receive, manage, enforce and audit multiple policies that specify access privileges of multiple users on multiple databases. The databases can include heterogeneous databases that are configured separately and differently from one another. A single configuration of the policy appliance centralizes and unifies policy management of the heterogeneous database in the self-contained environment.

Claim (Index 1):
A method, comprising:\n receiving, by a policy enforcement point of a policy appliance, a data request from an application, the request including a user specification specifying the user and a data specification specifying a data item to be accessed, the data item being stored in a database having a database format; submitting, by the policy enforcement point, the user specification and the data specification to a policy decision point of the policy appliance, the policy decision point being configured to decide whether the user is permitted to access at least a portion of the data according to a policy that defines an access privilege of a user on data; receiving, by the policy enforcement point and from the policy decision point, a data access decision that is made by the policy decision point according to the policy, the data access decision specifying that the user is permitted to access a portion of the data item; customizing the data request for the database based on the data access decision, including changing the data request into a customized query according to the policy and the database format, the customized query preventing at least a first portion of the data item from being retrieved from the database; retrieving, by the policy enforcement point, a second portion of the data item from the database as a response to the customized query; and providing, by the policy enforcement point to the application, the second portion of the data item, wherein the policy appliance, including the policy decision point, and the policy enforcement point, executes in a container on a system that includes one or more computer processors.

Metadata:
- Claim Count in Document: 48.0
- Percentile: 97.0
- Lexical Diversity: 2.0
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15061991', '09767610', '11540272', '15050406', '13142677']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2258673243979252
- 35 USC 102 Novelty (BERT): 0.5330032816735236
- Combined Prediction Score: 0.256580920125485
- Mean Citation Score: 205.204412
- Max Citation Score: 356.49393
- Similarity Product: 310.1855036006963

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test