Method and apparatus generating and applying security labels to sensitive data

Abstract

The disclosure comprises a method, an apparatus, and instructions for controlling a computer to implement a security labeling service (SLS) to tag an electronic record or data stream with security labels to ensure compliance with access restriction requirements. The SLS tags a record or data stream with security labels according to constraints including jurisdictional (government regulation), organizational policy, and authorization of a subject of record (e.g. patient consent). The SLS consumes a vocabulary dictionary to interpret the record and the constraints to generate rules for tagging the data. The original record or data stream is then tagged according to the rules. The tagged output is used to ensure compliance with the security labels.

What is claimed is: 
     
         1 . A method comprising:
 tagging at runtime, by a computer, an electronic record or an electronic data stream with a security label that enables automated compliance and enforcement with each of a subject of record authorization, an organizational policy, and a government regulation.