System and method for backup data discrimination
AssigneeEMC IP Holding Company LLC
InventorsAaditya Rakesh Bansal, Sunil Yadav, Manish Sharma
Life of this patent
Estimating the term…
Abstract
A remote agent for providing data protection services includes persistent storage and a backup orchestrator. The persistent storage stores lifecycle policies. The backup orchestrator instantiates a backup agent in a client in response to a backup generation for the client, the backup generation is specified by the lifecycle policies; using the backup agent: generating a backup including backup data for the client and backup metadata that associates portions of the backup data with respective persons; and storing the backup in backup storage based on the lifecycle policies.
Claims17
A remote agent for providing data protection services to clients, comprising:
- persistent storage for storing:
- lifecycle policies that specify when backups of the clients are to be generated;
- and
- privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information;
- a backup orchestrator programmed to:
- instantiate a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies;
- and
- using the backup agent:
- generate a backup using the privacy policies comprising:
- backup data for the client,
- data tags for the client, and
- backup metadata that associates portions of the backup data with respective persons;
- and
- store the backup in backup storage based on the lifecycle policies,
- wherein generating data tags for the client comprises:
- for a first portion of client data of the client:
- identifying that the first portion of the client data includes personal information of a person of the persons based on the privacy policies;
- generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons;
- for a second portion of client data of the client:
- identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies;
- and
- generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
A method for providing data protection services to clients based on lifecycle policies that specify when backups of the clients are to be generated and privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information, comprising:
- instantiating a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies;
- using the backup agent:
- generating a backup using the privacy policies comprising:
- backup data for the client,
- data tags for the client, and
- backup metadata that associates portions of the backup data with respective persons;
- and
- storing the backup in backup storage based on the lifecycle policies,
- wherein generating data tags for the client comprises:
- for a first portion of client data of the client:
- identifying that the first portion of the client data includes personal information of a person of the persons based on the privacy policies;
- and
- generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons;
- and
- for a second portion of client data of the client:
- identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies;
- and
- generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for providing data protection services to clients based on lifecycle policies that specify when backups of the clients are to be generated and privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information, the method comprising:
- instantiating a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies;
- and
- using the backup agent:
- generating a backup using the privacy policies comprising:
- backup data for the client,
- data tags for the client, and
- backup metadata that associates portions of the backup data with respective persons;
- and
- storing the backup in backup storage based on the lifecycle policies,
- wherein generating data tags for the client comprises:
- for a first portion of client data of the client:
- identifying that the portion of the client data includes personal information of a person of the persons based on the privacy policies;
- generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons;
- for a second portion of client data of the client:
- identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies;
- and
- generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
Dependencies are inferred from the claim text.