Systems and methods for securing a data stream with attribute-based access control

Abstract

Systems and methods for data streaming with attribute-based access control. A client apparatus in a data streaming system receives a message via a data stream. The message has a schema version of the schema associated therewith. The client apparatus processes the message to retrieve a record, the record including a data item and a data tag corresponding to the data item. The client apparatus, with reference to the schema version, determine whether an identifier of the client apparatus has permission to access the data item associated with the data tag. After detecting that the identifier does not have permission, the client apparatus masks the data item to produce a masked data record and releases the masked data record for further processing by the client apparatus. A monitoring apparatus of the system uses a machine learning model, such as a neural network, to identify a category for a data tag.