Sap Se

Sap Ag

Matthias Vogel

Benny Rolle

Ufuoma Ighoroje

Carsten Pluder

Stefan Hesse

Bernhard Drittler

Markus Kupke

Kathrin Nos

Michael Engler

Girish Sainath

Iwona Luther

Dharshan A

Geetha Gopalakrishnan

Tobias Schmidt

Antsa Andriamboavonjy

Thorsten Bruckmeier

Francesco Di Cerbo

Carlo Fuerst

Nathalie Stephanie Bergstroem

Karl Tillmann Rendel

Iwona Luthor

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object of an object type. Target applications are determined that are allowed to process objects of the object type for at least one purpose, based on identified purpose information. An end-of-purpose query is provided to the target applications and an end-of-purpose status is received from each target application that indicates whether the application is able to block the object. The received statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each of the multiple applications that instructs a respective application to locally block the object.

Enhancing an integrated end-of-purpose protocol with purpose information

The present disclosure involves systems, software, and computer implemented methods for data privacy. One example method includes receiving, from multiple systems in a multi-system landscape, data stocktaking data regarding objects in respective systems. The data stocktaking data comprises, for each respective system, a list of objects under processing in the respective system and a list of objects not under processing in the respective system. The data stocktaking data is evaluated at a central monitoring system to determine at least one misconfiguration of a data privacy integration component that manages data privacy integration in the multi-system landscape. For each identified misconfiguration, a reconfiguration of the data privacy integration component is identified. The identified reconfiguration of the data privacy integration component is applied to correct the misconfiguration.

Landscape reconfiguration based on cross-system data stocktaking

The present disclosure involves systems, software, and computer implemented methods for custom processing in data privacy integration protocols. One example method includes a customer of a data privacy integration (DPI) service providing custom logic for customizing the DPI service. The DPI service generates and sends a DPI work package in response to receiving a DPI protocol request from the customer. Responder applications that receive the DPI work package evaluate the DPI work package and send work package responses. At least one responder application includes in at least one work package response at least one responder feedback flag. The DPI service evaluates the DPI work package responses including the evaluation of at least one responder feedback flag using the custom logic provided by the customer. The DPI service sends a response to the DPI protocol request that includes an overall status of DPI processing of the DPI protocol request.

Enabling customizations to a data privacy integration service

The present disclosure involves systems, software, and computer implemented methods for automating handling of data subject requests for data privacy integration protocols. One example method includes receiving a ticket for performing a data privacy integration protocol for a data subject. A work package that includes a work package parameter that is based on a ticket parameter is provided to responder applications. Processing of the work package by responder applications includes determining, for at least one object associated with the data subject, purposes associated with the object. The responder application determines, for each purpose, a purpose setting that corresponds to the work package parameter. The responder application processes the work package based on the work package parameter and the purpose settings and provides feedback to a data privacy integration service, which processes the feedback, to continue the data privacy integration protocol for the ticket.

Automating handling of data subject requests for data privacy integration protocols

The present disclosure involves systems, software, and computer implemented methods for using asynchronous ping messages for determining capability of systems for executing asynchronous protocols. One example method includes sending a work package to at least one application in a multiple-application landscape to determine capabilities of each application for participating in a data privacy integration protocol. Application responses to the sending of the work package are evaluated to determine capabilities of each application for participating in the protocol. A determination is made regarding whether each application is capable of participating in the protocol. In response to determining that at least one application is not capable of participating in the protocol, at least one corrective action regarding the protocol is performed. In response to determining that each application is capable of participating in the protocol, at least one protocol action is performed for the protocol.

Asynchronous ping messages for determining capability of systems for executing asynchronous protocols

The present disclosure involves systems, software, and computer implemented methods for data privacy. One example method includes providing an end-of-purpose query to applications in a landscape that requests an application to determine whether the application is able to block an object. Votes are received from applications that are either a can-block vote that indicates that the application can block the object or a veto vote that indicates that the application cannot block the object. At least one relevant-application veto model is identified that models which applications can raise a relevant veto vote with respect to another application. Received end-of-purpose votes and the relevant-application veto models are evaluated to determine whether any applications should be block instruction recipients. If any block instructions recipients have been identified, a block instruction for the object is set to each block instruction recipient.

Semantic responder dependencies in integrated end of purpose protocols

The present disclosure involves systems, software, and computer implemented methods for integrating data privacy integration protocols across system landscapes. One example method includes receiving, at a primary data privacy integration service, a request to start a data privacy integration protocol in a first landscape. The primary service sends a protocol command to a first subset of applications in the first landscape and a first command to a dependent data privacy integration service included in a second landscape that instructs the dependent data privacy integration service to send the protocol command to a first subset of the applications in the second landscape. The primary service receives responses to the protocol command from the first subset of the first landscape applications and an aggregate status from the dependent service that aggregates responses to the protocol command received by the dependent service from the first subset of the second landscape applications.

Integrating data privacy integration protocols across system landscapes

Applications create log entries comprising data regarding operations performed by the applications. The log entries are provided to an audit-log service to allow auditing of the log entries. An audit-log sidecar for each application is used to send log entries to the audit-log service. The audit-log service may experience downtime. If the audit-log service is unavailable, the log entries are sent to one or more other audit-log sidecars for storage. When the audit-log service again becomes available, all audit-log sidecars send their stored log entries to the audit-log service. In this way, the audit-log service is enabled to determine if there is a discrepancy between log entries reported by an application and log entries reported for the application by other audit-log sidecars. As a result, an attack on an application will not go undetected, even if the attack occurs while the audit-log service is unavailable.

Log entry buffer extension network

In an implementation, a request for one or more attachments stored in an application document store is received from a requestor and by an application agent associated with an application. For each attachment identified in the request, the application agent: 1) requests the attachment from a data privacy integration (DPI) kernel service; 2) receives a download link to an attachment in the application document store; 3) downloads, using the download link, the attachment from the application document store; 4) informs the DPI kernel service that a download of the attachment is complete; and 5) receives a message from the DPI kernel service that the download link has been deactivated. The application agent returns the one or more attachments to the requestor.

Cross-functional application data attachment retrieval

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes receiving a request to initiate an aligned purpose disassociation protocol for a purpose for an object instance. A determination is made as to whether a timestamp is stored for the purpose and the object instance that indicates an earliest time that the purpose can be disassociated from the object instance. The request is accepted in response to determining that no timestamp is stored for the purpose and the object instance that is greater than the current time. A status request is sent to applications that requests a status response that indicates whether an application can disassociate the purpose from the object instance. Status responses are received from at least some of the applications. A disassociation decision for the purpose and the object instance is determined based on the received status responses.

Aligned purpose disassociation protocol for multiple applications

The present disclosure involves systems, software, and computer implemented methods for using multiple synonymous identifiers in data privacy integration protocols. One example method includes identifying a request to initiate a protocol in a multiple-application landscape for an object with an identifier. A determination is made that at least one context-using application participant of the protocol relies on a context-providing application participant of the protocol for resolving the identifier to a local identifier local to a context of the context-providing application participant. A resolution request is sent to context-providing application participants that can provide resolution for an identifier for at least one context-using application. A local identifier corresponding to the identifier that is local to the context of the context-providing application participant is received from each context-providing application participant. A protocol work package that includes a resolved local identifier to is sent to each context-using application participant.

Multiple synonymous identifiers in data privacy integration protocols

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining, by a data privacy integration service, a condition that has occurred from performing a data privacy integration protocol that indicates that a first object is to be redistributed to applications in a multiple-application landscape. Application responder group configurations are identified that group the applications into multiple redistribution responder groups for performing redistribution operations for an object type of the first object in response to redistribution requests. A redistribution command to redistribute the first object is sent to each application in a first redistribution responder group. If all redistribution statuses received from applications in the first redistribution responder group indicate successful redistribution of the first object, the redistribution command is sent to each application in a second redistribution responder group.

Redistribution operations for data privacy integration services using different redistribution responder groups

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes receiving a request to initiate a data privacy integration protocol for applications in a multiple-application landscape. Voting responder group configurations are identified that group the applications into multiple voting responder groups for performing voting for the protocol. A voting request for the protocol is sent to applications in a first voting responder group. Data privacy integration protocol votes are received from the applications in the first voting responder group and a determination is made as to whether any application in the first voting responder group provided a veto vote for the protocol. If at least one application in the first voting responder group provided a veto vote for an object, the protocol is ended for the object without sending a voting request to applications in a second voting responder group.

Voting operations for data privacy integration services using different voting responder groups

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes receiving, from a requesting application in a landscape that includes a set of multiple applications, a data subject information request for a data subject. A set of target applications is determined from the set of multiple applications. The data subject information request is provided to each target application in the set of target applications. A data subject information response is received from each of the target applications. Each data subject information response includes application data for the data subject that was retrieved by a respective target application in response to the data subject information request. The received data subject information responses are aggregated to generate an aggregated data subject information response. The aggregated data subject information response is provided to the requesting application in response to the data subject information request.

Integrated personal data retrieval across multiple applications

The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes providing ticket details for a data privacy integration protocol to each application in a multiple-application landscape. Each application has a relevant object type list and is included in a particular voting responder group for providing votes for the data privacy integration protocol. A first voting work package is created that includes a first subset of object identifiers included in the ticket. A work package object list is generated for each application based on the first subset of object identifiers. Object identifiers are removed from the work package object list for an application that have an associated object type that is not included in the relevant object type list for the application. Votes for the protocol are received from the first set of applications for a second subset of object identifiers.

Growing community of inventors

Saarbrücken, Germany

Matthias Vogel