Back to results
US 10,853,509 B2Granted
Error detection of data leakage in a data processing system
AssigneeBank of America Corporation
InventorsRamesh Alagar, Prabakar Rangarajan
Life of this patent
Estimating the term…
Abstract
A system for detecting data leakage is disclosed. The system intercepts web traffic data, de-duplicates the web traffic data, and extracts data elements from the web traffic data. The system further groups the data elements into multiple clusters based on data types associated with the data elements. The system then identifies data elements in a cluster that were previously sent to a user and identifies allowed data elements from an allow table that are supposed to be sent to the user. The system determines whether there is a data leakage by determining whether the identified data elements in the cluster comprises at least one data element that is not in the identified allowed data elements in the allow table.
Claims20
A system for detecting data leakage, comprising:
- a memory configured to store:
- a plurality of allow tables, each allow table comprising a plurality of allowed data elements of a pre-defined data type that are associated with a plurality of users, each user in an allow table being associated with a subset of the allowed data elements in the allow table;
- a web interceptor configured to:
- intercept web traffic data associated with the plurality of users, the web traffic data comprising HTTP requests and HTTP responses;
- a clustering engine configured to:
- de-duplicate the web traffic data, the de-duplicated web traffic data comprising a plurality of data elements, each data element being associated with a pre-defined data type;
- group the plurality of data elements into a plurality of clusters, each cluster corresponding to a pre-defined data type;
- and
- a leakage detection engine configured to:
- identify a first cluster of data elements associated with a first pre-defined data type;
- identify data elements in the first cluster that are associated with a first user;
- identify a first allow table that is associated with the first pre-defined data type;
- identify allowed data elements in the first allow table that are associated with the first user;
- compare the identified data elements in the first cluster to the identified allowed data elements in the first allow table;
- determine whether the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table;
- and
- in response to determining that the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table, determine that an error of data leakage is detected for the first user within the first pre-defined data type.
14 more elements
A non-transitory computer-readable medium comprising a logic for detecting data leakage, the logic, when executed by one or more processors, instructing the one or more processors to:
- store a plurality of allow tables, each allow table comprising a plurality of allowed data elements of a pre-defined data type that are associated with a plurality of users, each user in an allow table being associated with a subset of the allowed data elements in the allow table;
- intercept web traffic data associated with the plurality of users, the web traffic data comprising HTTP requests and HTTP responses;
- de-duplicate the web traffic data, the de-duplicated web traffic data comprising a plurality of data elements, each data element being associated with a pre-defined data type;
- group the plurality of data elements into a plurality of clusters, each cluster corresponding to a pre-defined data type;
- identify a first cluster of data elements associated with a first pre-defined data type;
- identify data elements in the first cluster that are associated with a first user;
- identify a first allow table that is associated with the first pre-defined data type;
- identify allowed data elements in the first allow table that are associated with the first user;
- compare the identified data elements in the first cluster to the identified allowed data elements in the first allow table;
- determine whether the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table;
- and
- in response to determining that the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table, determine that an error of data leakage is detected for the first user within the first pre-defined data type.
9 more elements
A method for detecting data leakage, comprising:
- storing a plurality of allow tables, each allow table comprising a plurality of allowed data elements of a pre-defined data type that are associated with a plurality of users, each user in an allow table being associated with a subset of the allowed data elements in the allow table;
- intercepting web traffic data associated with the plurality of users, the web traffic data comprising HTTP requests and HTTP responses;
- de-duplicating the web traffic data, the de-duplicated web traffic data comprising a plurality of data elements, each data element being associated with a pre-defined data type;
- grouping the plurality of data elements into a plurality of clusters, each cluster corresponding to a pre-defined data type;
- identifying a first cluster of data elements associated with a first pre-defined data type;
- identifying data elements in the first cluster that are associated with a first user;
- identifying a first allow table that is associated with the first pre-defined data type;
- identifying allowed data elements in the first allow table that are associated with the first user;
- comparing the identified data elements in the first cluster to the identified allowed data elements in the first allow table;
- determining whether the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table;
- and
- in response to determining that the identified data elements in the first cluster comprises at least one data element that is not in the identified allowed data elements in the first allow table, determining that an error of data leakage is detected for the first user within the first pre-defined data type.
9 more elements
Dependencies are inferred from the claim text.