US 10,484,429 B1Granted

Automated sensitive information and data storage compliance verification

AssigneeAmazon Technologies, Inc.

InventorsJohn Kenneth Fawcett, Joe Jony Jeyaratnam, Pramod Raghavendran, Martin Christopher Hare Robertson, Keerat Singh Sharma

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Systems, methods, and computer-readable media are disclosed for automated sensitive information and data storage compliance verification. In one embodiment, an example method may include determining a software application stored at a database, determining software code of the software application, and determining that the software code includes a function that accesses critical user information. Example methods may include determining a risk score for the software application based at least in part on the function, and determining a compliance level for the software application based at least in part on the function.

Claims20

Dependent claims

A method comprising:

determining, by one or more computer processors coupled to at least one memory, a first application identifier of an application for verifying internet protocol (IP) address rule compliance;
determining a file comprising software code using the first application identifier;
determining that a function implemented by the software code of the file accesses an IP address of a user device that is accessing a remote server;
determining that the function stores a complete IP address of the user device;
accessing a data log of data stored as a result of the function;
determining that the data log comprises the complete IP address;
determining that the software code includes a compliance issue;
determining a first risk score for the software code using the data log;
classifying the software code in a first category using the first risk score;
generating a notification indicating the compliance issue and the first category classification;
generating a first recommendation to delete the complete IP address;
determining that the software code of the file has been modified;
determining that the function stores a partial IP address;
determining that the complete IP address is deleted;
determining a second risk score for the software code of the file after the software code has been modified;
and
classifying the software code in a second category.

14 more elements

A device comprising:

at least one memory that stores computer-executable instructions;
and
at least one processor configured to access the at least one memory and execute the computer-executable instructions to:
determine a software application stored at a database;
analyze software code of the software application;
determine that the software code comprises a function that accesses user-specific information;
determine a first risk score for the software application based at least in part on the function;
determine a compliance level for the software application based at least in part on the function;
determine a first risk category for the software application using the first risk score;
monitor the software application for updated software code;
determine that the software code has been modified;
determine a second risk score for the software application after the software code has been modified;
and
determine a second risk category for the software application using the second risk score.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/335,175Filed 26 Oct 2016
Granted: 19 Nov 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 2221/2111
Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for…:…
H04L 63/102
For controlling access to devices or network resources: entity profiles

Family

No related US applications are recorded in the indexed filing history.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key