IBM provides WebSphere application with JDBC/SQL

JavaFAQ Home » Databases

What is Application Privacy Monitoring for JDBC?

Application Privacy Monitoring for JDBC (APM4JDBC) is a technology preview providing a Java^TM library for adding privacy policy enforcement to existing Web applications that use JDBC/SQL.

Privacy monitoring technology in information technology systems is now necessary in order to ensure compliance with stated privacy policies, especially in the customer information management systems in enterprises such as Customer Relationship Management (CRM). Privacy policies allow organizations to control the use of personally identifiable information (PII) according to individual choices. The IBM Tivoli Privacy Manager (TPM) provides server support for creating, deploying, and administering privacy policies as well as for checking conformance to policies and for logging auditable data on data accesses. However, applications using TPM must use an agent that is able to intercept each access of PII and interact with a TPM server for auditing and enforcement. This is the function of a privacy monitor.

APM4JDBC is a Java/SQL Privacy Monitoring library for the TPM. APM4JDBC provides privacy monitoring functions for applications running on a WebSphere Application Server and connecting to IBM DB2 by using JDBC. The idea is to wrap the JDBC connection class by adding the privacy monitoring and enforcement functions so that when an application calls JDBC to retrieve PII data, (1) the request SQL is analyzed, (2) a privacy conformance check request is sent to the TPM server to evaluate the privacy policies, and (3) the SQL ResultSet table is modified based on the privacy conformance check results and is returned to the application.

APM4JDBC will also support a results cache mechanism for optimizing conformance checks. This is effective for SQL statements that access the data of several people at one time. This version of APM4JDBC does not record the auditable logs when using a cache.

How does it work?

Application Privacy Monitoring for JDBC (APM4JDBC) is a technology that provides a Java library for adding privacy policy enforcement to existing Web applications that use JDBC/SQL. APM4JDBC also works with Web applications running on a WebSphere Application Server and connecting to IBM DB2 by using JDBC.

Custom Search