Abstract: Exemplary embodiments for data security include a data access proxy coupled with a database, further coupled with a server configured to operate the data access proxy to: identify a user and request to access a data item; validate the user and request, including inspecting the user's identity, evaluating the user's history, and evaluating permissions and restrictions associated with the user and the data item; access the database to retrieve the data item; inspect security attributes related to the data item; and transform the data item based on one or more privacy rules, including redacting the at least one data item, deleting information from the at least one data item, substituting information from the at least one private data item with other information, adding information to the at least one data item, providing synthetic data as a private data item, or providing proxy data for the data item.

Abstract: In a client, a system receives a set of transformation functions for use in transforming a first content, requests the first content from a gateway, and receives the first content from the gateway, including an invocation of at least one transformation function maintained on the client. The system invokes the at least one transformation function to transform the first content to access a second content on the server. In a gateway communicating with a server, a system transmits a set of transformation functions to at least one client for use in transforming a first content, receives a request from at least one client for the first content residing on the server, rewrites the first content to include the invocation of at least one transformation function maintained on the client, and transmits the first content including the invocation of at the least one transformation function maintained on the client.

Abstract: In a client, a system receives a set of transformation functions for use in transforming a first content, requests the first content from a gateway, and receives the first content from the gateway, including an invocation of at least one transformation function maintained on the client. The system invokes the at least one transformation function to transform the first content to access a second content on the server. In a gateway communicating with a server, a system transmits a set of transformation functions to at least one client for use in transforming a first content, receives a request from at least one client for the first content residing on the server, rewrites the first content to include the invocation of at least one transformation function maintained on the client, and transmits the first content including the invocation of at the least one transformation function maintained on the client.