Back to results
US 11,232,230 B1Granted
Data security for a document management system
AssigneeTekion Corp
InventorsSatyavrat Mudgil, Anant Sitaram, Fahad Tasleem, Ved Surtani
Life of this patent
Estimating the term…
Abstract
A document management system manages documents of an enterprise. The documents are managed in a secure manner such that access to entries included in the documents may be restricted according to a security policy associated with the documents. The document management system may secure documents such that entries are still provided to users that request the documents, but sensitive data included in the entries is masked according to the security policies for the documents.
Claims20
A computer-implemented method of a management system for securing documents for an enterprise, the computer-implemented method comprising:
- storing a document including a plurality of entries, each of the plurality of entries including a plurality of data fields and a value for each of the plurality of data fields;
- storing a security policy associated with the document, the security policy including one or more security rules defining access restrictions to the document, the one or more security rules including a security rule to mask data included in the document that is not subject to any of the one or more security rules of the security policy, but is usable to determine the one or more values that are masked;
- receiving a request from a client device of a user to access an entry from the plurality of entries of the document;
- determining a first data field from the requested entry to be masked due to first data of the first data field being sensitive according to the one or more of the security rules included in the security policy;
- determining second data included in a second data field from the requested entry is non-sensitive due to not being subject to any of the one or more of the security rules included in the security policy, but the second data is to be masked due to the second data being usable to determine a value of the first data that is sensitive;
- securing the document according to the security policy by masking the first data that is sensitive and the second data that is non-sensitive such that the first data included in the first data field and the second data included in the second data field of the requested entry are hidden;
- and
- providing the secured document to the client device of the user, the secured document including the masked entry.
5 more elements
A system for securing documents, comprising:
- one or more computer processors;
- and
- a non-transitory computer-readable storage medium storing executable computer program instructions, the instructions when executed by the one or more computer processors cause the one or more computer processors to perform steps comprising:
- storing a document including a plurality of entries, each of the plurality of entries including a plurality of data fields and a value for each of the plurality of data fields;
- storing a security policy associated with the document, the security policy including one or more security rules defining access restrictions to the document, the one or more security rules including a security rule to mask data included in the document that is not subject to any of the one or more security rules of the security policy, but is usable to determine the one or more values that are masked;
- receiving a request from a client device of a user to access an entry from the plurality of entries of the document;
- determining a first data field from the requested entry to be masked due to first data of the first data field being sensitive according to the one or more of the security rules included in the security policy;
- determining second data included in a second data field from the requested entry is non-sensitive due to not being subject to any of the one or more of the security rules included in the security policy, but the second data is to be masked due to the second data being usable to determine a value of the first data that is sensitive;
- securing the document according to the security policy by masking the first data that is sensitive and the second data that is non-sensitive such that the first data included in the first data field and the second data included in the second data field of the requested entry are hidden;
- and
- providing the secured document to the client device of the user, the secured document including the masked entry.
8 more elements
A non-transitory computer-readable storage medium storing executable computer program instructions, the instructions when executed by one or more computer processors cause the one or more computer processors to perform steps comprising:
- storing a document including a plurality of entries, each of the plurality of entries including a plurality of data fields and a value for each of the plurality of data fields;
- storing a security policy associated with the document, the security policy including one or more security rules defining access restrictions to the document, the one or more security rules including a security rule to mask data included in the document that is not subject to any of the one or more security rules of the security policy, but is usable to determine the one or more values that are masked;
- receiving a request from a client device of a user to access an entry from the plurality of entries of the document;
- determining a first data field from the requested entry to be masked due to first data of the first data field being sensitive according to the one or more of the security rules included in the security policy;
- determining second data included in a second data field from the requested entry is non-sensitive due to not being subject to any of the one or more of the security rules included in the security policy, but the second data is to be masked due to the second data being usable to determine a value of the first data that is sensitive;
- securing the document according to the security policy by masking the first data that is sensitive and the second data that is non-sensitive such that the first data included in the first data field and the second data included in the second data field of the requested entry are hidden;
- and
- providing the secured document to the client device of the user, the secured document including the masked entry.
5 more elements
Dependencies are inferred from the claim text.