Abstract: A method, product and system including obtaining metadata associated with at least one plugin of a runtime environment, wherein the runtime environment is configured to provide a service to a client, wherein the plugin is configured to measure or enforce metrics of the service; obtaining user selections regarding the metrics, wherein the user selections comprise constraints on the runtime environment; obtaining, based on the metadata of the plugin and based on the user selections, corresponding clauses textually describing the constraints; generating a contract, wherein the contract comprises the corresponding clauses; automatically generating a configuration file based on the user selections; and automatically enforcing the contract by: activating the runtime environment, loading the service in the runtime environment, configuring the plugin according to the configuration file, executing the plugin to identify a violation of the contract, and executing a client function of the client.

Abstract: A method, a computerized apparatus and a computer program product for mitigating governance and regulation implications on machine learning. A governance impact assessment is generated for a partial data set generated by applying a data governance enforcement on a data set of instances comprising valuations of a feature vector. The partial data set comprises partial instances each comprising partial feature vectors. The governance impact assessment comprises information about data excluded from the data set. A machine learning model trained based on the partial data set and configured to provide an estimated prediction for a partial instance is obtained. A set of core features is determined. A bias introduced by the data governance is identified based on a core feature being affected by the data governance. In response to identifying a bias, an anti-bias procedure is applied on the machine learning model, whereby mitigating the bias introduced by the data governance.

Abstract: A method, product and system including obtaining metadata associated with at least one plugin of a runtime environment, wherein the runtime environment is configured to provide a service to a client, wherein the plugin is configured to measure or enforce metrics of the service; obtaining user selections regarding the metrics, wherein the user selections comprise constraints on the runtime environment; obtaining, based on the metadata of the plugin and based on the user selections, corresponding clauses textually describing the constraints; generating a contract, wherein the contract comprises the corresponding clauses; automatically generating a configuration file based on the user selections; and automatically enforcing the contract by: activating the runtime environment, loading the service in the runtime environment, configuring the plugin according to the configuration file, executing the plugin to identify a violation of the contract, and executing a client function of the client.

Abstract: Method, apparatus and product for purpose-based data access control. Having a data about a subject, for which usage is approved for a purpose, a first encryption key associated with the first purpose is obtained. A link pointing to a first alias of the data is generated, the first alias being associated with the first purpose. The link pointing to the first alias is encrypted with the first encryption key to obtain a first encrypted link; and access is provided to the first encrypted link, whereby access to the data is obtainable by decrypting the first encrypted link with the first decryption key to obtain the first alias and using the first alias to access the data. In some cases, a second link for a second can be similarly generated. Upon revocation of approval, a corresponding alias is eliminated to prevent access thereby. The links may be retained in a decentralized ledger, such as a blockchain.

Abstract: A method, apparatus and product for data-encryption-based purpose-specific access control. The method comprising: having data of a subject, wherein an approval for usage of the data for a purpose is provided; obtaining an encryption key associated with the purpose, wherein a decryption key is required for decrypting information encrypted with the encryption key; encrypting the data using the encryption key, whereby obtaining purpose-based encrypted data that is encoded with the purpose for which the data can be used; and enabling access to the purpose-based encrypted data to one or more data consumers, whereby access to the data is obtainable by decrypting the purpose-based encrypted data using the decryption key that is available to data consumers that are certified for the purpose.

Abstract: Embodiments may provide techniques that provide the capability to manage consent for access to personal data common to multiple people. For example, a method may comprise identifying data for which at least a portion of the data is common to a plurality of individuals or entities, determining a consensus level, for a purpose, of the individuals or entities to which the stored data is common, the consensus level being required for access to the data, transmitting a request for consent to the stored data to each of the plurality of individuals or entities, receiving responses to the requests for consent from at least some of the plurality of individuals or entities, determining a consensus score based on the received responses to the requests for consent, and allowing or denying access to the stored data based on the determined consensus score and on the required consensus level.

Abstract: A method, a computerized apparatus and a computer program product for mitigating governance and regulation implications on machine learning. A governance impact assessment is generated for a partial data set generated by applying a data governance enforcement on a data set of instances comprising valuations of a feature vector. The partial data set comprises partial instances each comprising partial feature vectors. The governance impact assessment comprises information about data excluded from the data set. A machine learning model trained based on the partial data set and configured to provide an estimated prediction for a partial instance is obtained. A set of core features is determined. A bias introduced by the data governance is identified based on a core feature being affected by the data governance. In response to identifying a bias, an anti-bias procedure is applied on the machine learning model, whereby mitigating the bias introduced by the data governance.

Abstract: Embodiments may provide techniques that provide the capability to manage consent for access to personal data common to multiple people. For example, a method may comprise identifying data for which at least a portion of the data is common to a plurality of individuals or entities, determining a consensus level, for a purpose, of the individuals or entities to which the stored data is common, the consensus level being required for access to the data, transmitting a request for consent to the stored data to each of the plurality of individuals or entities, receiving responses to the requests for consent from at least some of the plurality of individuals or entities, determining a consensus score based on the received responses to the requests for consent, and allowing or denying access to the stored data based on the determined consensus score and on the required consensus level.

Abstract: A method, apparatus and product for data-encryption-based purpose-specific access control. The method comprising: having data of a subject, wherein an approval for usage of the data for a purpose is provided; obtaining an encryption key associated with the purpose, wherein a decryption key is required for decrypting information encrypted with the encryption key; encrypting the data using the encryption key, whereby obtaining purpose-based encrypted data that is encoded with the purpose for which the data can be used; and enabling access to the purpose-based encrypted data to one or more data consumers, whereby access to the data is obtainable by decrypting the purpose-based encrypted data using the decryption key that is available to data consumers that are certified for the purpose.

Abstract: Method, apparatus and product for purpose-based data access control. Having a data about a subject, for which usage is approved for a purpose, a first encryption key associated with the first purpose is obtained. A link pointing to a first alias of the data is generated, the first alias being associated with the first purpose. The link pointing to the first alias is encrypted with the first encryption key to obtain a first encrypted link; and access is provided to the first encrypted link, whereby access to the data is obtainable by decrypting the first encrypted link with the first decryption key to obtain the first alias and using the first alias to access the data. In some cases, a second link for a second can be similarly generated. Upon revocation of approval, a corresponding alias is eliminated to prevent access thereby. The links may be retained in a decentralized ledger, such as a blockchain.

Abstract: A method of creating an application purpose certificate, comprising: receiving from a software publisher an application code and declared privacy information, the declared privacy information includes at least one allowed usage purpose for each of a plurality of data types; analyzing the application's usage of data of each of the plurality of data types; verifying the usage is compliant with the least one allowed usage purpose according to the analysis; creating an encrypted digital purpose certificate, the digital purpose certificate is unique for the application code; and sending the digital purpose certificate to the software publisher to be bundled with the application code and a publisher authentication certificate.

Abstract: Controlling computer-based access to data by receiving from a computer software application a request specifying a computer user, a type of data associated with an entity, and an intended purpose for the type of data associated with the entity, accessing, responsive to receiving the request, a consent record indicating an association between the specified entity, the specified type of data associated with the entity, and the computer software application, and granting the request if the consent record includes an indication of consent in association with a specified purpose for the type of data associated with the entity, and if the specified purpose matches the intended purpose.

Abstract: A method of creating an application purpose certificate, comprising: receiving from a software publisher an application code and declared privacy information, the declared privacy information includes at least one allowed usage purpose for each of a plurality of data types; analyzing the application's usage of data of each of the plurality of data types; verifying the usage is compliant with the least one allowed usage purpose according to the analysis; creating an encrypted digital purpose certificate, the digital purpose certificate is unique for the application code; and sending the digital purpose certificate to the software publisher to be bundled with the application code and a publisher authentication certificate.

Abstract: A data processing method is provided including intercepting a data query for deriving data from a data set, intercepting data results of processing the data query, and processing the data results in accordance with a processing rule that specifies a processing action to be performed with one or more portions of the data results if a processing condition is met, thereby producing processed data results, wherein the processing condition is dependent on both a) information associated with the data query, wherein the information associated with the data query is ascertained independently from the data results, and b) information associated with the data results, wherein the information associated with the data results is other than the information associated with the data query.

Abstract: Machines, systems and methods for identification of a consumer are provided. The method comprises capturing a unique identifier (ID) associated with a computing device, wherein the computing device is configured to access content stored on one or more content servers; and associating the unique ID with tracking data associated with the computing device, wherein when the computing device submits a request to a content server to access content, wherein in response to retrieving at least one of the unique ID or the tracking data of the computing device, the computing device is identified and content pages accessed by the computing device are tracked by a machine that is aware of the association between the unique ID and the tracking data for the computing device.

Abstract: There is provided a method for managing a list of given gifts, comprising: receiving, by a gift management module, gift information including a designated receiver of a gift; correlating the receiver with at least one contact entry in a contact list; mapping the at least one contact entry with the gift to generate at least one dataset entry of given gifts for each contact of the contact list, the dataset storing a list of given gifts; and adding the gift information to the list of given gifts of the at least one contact entry.

Abstract: A method of recognizing customers requiring assistance, comprising: tracking movement of a customer at a store by at least one sensor; identifying at least one movement pattern from the tracking; analyzing the at least one movement pattern to identify a potential requirement of assistance by the customer; sending a message indicative of the potential requirement to an assisting system of the store; and triggering a providing of the assistance to the customer.

Abstract: Machines, systems and methods for identification of a consumer are provided. The method comprises capturing a unique identifier (ID) associated with a computing device, wherein the computing device is configured to access content stored on one or more content servers; and associating the unique ID with tracking data associated with the computing device, wherein when the computing device submits a request to a content server to access content, wherein in response to retrieving at least one of the unique ID or the tracking data of the computing device, the computing device is identified and content pages accessed by the computing device are tracked by a machine that is aware of the association between the unique ID and the tracking data for the computing device.

Abstract: Machines, systems, products and methods for cross-referencing a consumer's shopping activities in a physical venue to the consumer's online activities, the method comprising: uniquely identifying a consumer based on a unique ID associated with the consumer's mobile communication device; monitoring speed and location of the consumer in one or more zones in a physical venue by detecting and processing communication signals broadcasted by the consumer's mobile communication device; determining level of interest of the consumer in one or more products positioned in the one or more zones in the physical venue based on speed with which the consumer moves through the one or more zones; and equating a first level of interest in a first product in the physical venue to a page view on a webpage that promotes the first product or group of products.

Abstract: Method, system, and computer program product are provided for enabling a content creator who is not an owner of a content site to provide variable content to content consumers. The method includes: defining content consumers by their relationship to a content creator; receiving a request for a content item from a content consumer; determining the relationship of the content consumer to the content creator; and returning a version of the content item for the determined relationship. A content creator may select content of a content item, and may provide different versions of the selected content with an indication of a relationship between the content creator and a content consumer for a version.