Abstract: Methods, systems, and computer programs are presented for managing access to resources using scenarios. One method includes an operation for storing first scenario data received for a first control scenario. The first scenario data comprises a control scenario identifier, a first resource, an authorization control, and a scenario trigger that defines an event that causes an activation of the first control scenario for providing access to the first resource. Further, the method includes operations for monitoring for an occurrence of the scenario trigger and detecting an occurrence of the event associated with the scenario trigger. Further, the method determines, in response to the occurrence of the event, a set of users authorized to access the first resource, including accessing the first scenario data to determine the set of users associated with the authorization control. Furthermore, access is provided to the set of users based on the determining.

Abstract: Computing devices for on-demand de-identification of data in computer storage systems are disclosed herein. In one embodiment, a server can include a process and a memory containing instructions configured to receive an electronic message via a computer network. The electronic message contains data representing a user identifier and a demand to delete any data records in a database that correspond to the user identifier. The server can then extract records corresponding to the user identifier from the database, replacing the user identifier in the extracted records with a random number and/or suppressing or generalizing quasi-identifiers from the extracted records, and then store the new records in a separate table. Copies of the extracted records can then be deleted from the original tables, and thus achieving on-demand anonymization of the one or more data records in the database corresponding to the user identifier.

Abstract: Computing devices for on-demand de-identification of data in computer storage systems are disclosed herein. In one embodiment, a server can include a process and a memory containing instructions configured to receive an electronic message via a computer network. The electronic message contains data representing a user identifier and a demand to delete any data records in a database that correspond to the user identifier. The server can then extract records corresponding to the user identifier from the database, replacing the user identifier in the extracted records with a random number and/or suppressing or generalizing quasi-identifiers from the extracted records, and then store the new records in a separate table. Copies of the extracted records can then be deleted from the original tables, and thus achieving on-demand anonymization of the one or more data records in the database corresponding to the user identifier.