IMPLEMENTATION AND USE OF A PII DATA ACCESS CONTROL FACILITY EMLPLOYING PERSONALLY IDENTIFYING INFORMATION LABELS AND PURPOSE SERVING FUNCTION SETS

摘要

A data access control facility is implemented by assigning personally identifying information (PH) classification labels to PH data objects, with each PH data object having one PH classification label assigned thereto. The control facility further includes at least one PH purpose serving function set (PSFS) comprising a list of application functions that read or write PH data objects. Each PH PSFS is also assigned a PH classification label. A PH data object is accessible via an application function of a PTI PSFS having a PH classification label that is identical to or dominant of the PH classification label of the PH object. A user of the control facility is assigned a PH clearance set which contains a list of at least one PH classification label, which is employed in determining whether the user is entitled to access a particular function.