Integrated system and method for sensitive data security
US11263335B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | Oct 17, 2019 |
| Grant date | Mar 1, 2022 |
| Priority date | — |
| Expiry date | Apr 2, 2040 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/083
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A system and a method are provided for integrating a sensitive data discovery engine (SDDE), a data anonymization engine (DAE), a data monitoring module (DMM), and a data retirement module (DRM) and managing sensitive data security across its lifecycle. The SDDE determines sensitive data in similar and variant data sources and applications, identifies their operating application codes, and generates sensitive data discovery intelligence (SDDI). The system generates and distributes one or more templates including the SDDI with metadata, discovery results, and data security rules to the DAE, the DMM, and the DRM deployed on each data source. Based on the templates, the DAE flexibly and consistently masks, encrypts, or tokenizes the sensitive data for static, dynamic, blended, and hybrid anonymization based on different data classifications and application environments; the DMM continuously monitors sensitive data access by users and applications; and the DRM retires inactive sensitive data without removing transactional data.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.