| CPC H04L 9/3242 (2013.01) [G06F 16/9024 (2019.01); G06F 21/602 (2013.01); G06F 21/64 (2013.01); G06F 21/78 (2013.01); H04L 9/0637 (2013.01); H04L 9/3239 (2013.01); H04L 9/50 (2022.05)] | 54 Claims |

|
1. A tangible, non-transitory, machine-readable medium storing instructions that when executed by one or more processors effectuate operations comprising:
receiving, with a computer system, a request to read data stored in a database, the request being received from a computing entity and comprising a user identifier;
accessing, with the computer system, one or more log entries associated with prior read requests associated with the user identifier;
determining, with the computer system, that at least some of the data to be returned in response to the request is to be obfuscated based on an access policy applicable to a user having the user identifier, the access policy comprising one or more access control rules that define conditions for access to values stored in respective fields of the database;
in response to the determination, causing, with the computer system, a response to the request to comprise data from the database with one or more values in the response obfuscated in accordance with the access control rules;
monitoring, with the computer system, a number of read requests associated with the user identifier, each read request having an associated time duration; and
determining, with the computer system, that the number of read requests having time durations that exceed a duration threshold satisfies a count threshold.
|