System and methods for privacy management
AssigneeBigID Inc.
InventorsNimrod Vax, Eyal Sacharov, Dimitri Sirota
Life of this patent
Estimating the term…
Abstract
Exemplary privacy management platforms are described herein. Such platforms may be embodied in systems, computer-implemented methods, apparatuses and/or software applications. The described privacy management platform may be configured to scan identity, primary and/or secondary data sources in order to provide users with visibility into stored personal information, risk associated with storing such information and usage activity relating to such information. The platform may correlate personal information to specific data subjects to provide an indexed inventory across multiple data sources.
Claims18
A computer-implemented method of locating personal information in a plurality of data sources and correlating the personal information to one or more data subjects, the method comprising:
- storing, by a computer, an identity graph comprising a plurality of data subject profiles, the identity graph comprising:
- a first attribute field comprising first attribute values, each associated with one of the data subject profiles;
- and
- a second attribute field comprising second attribute values, each associated with one of the data subject profiles;
- calculating, by the computer, a first identifiability score for the first attribute field, said calculating comprising:
- determining an average number of data subject profiles associated with each of the first attribute values,
- wherein the first identifiability score meets a minimum identifiability score;
- calculating, by the computer, a second identifiability score for the second attribute field, said calculating comprising:
- determining an average number of data subject profiles associated with each of the second attribute values,
- wherein the second identifiability score does not meet the minimum identifiability score;
- searching, by the computer, a scanned data source comprising scanned values;
- determining, by the computer, a plurality of personal information findings comprising:
- a first set of personal information findings determined by comparing the first attribute values to the scanned values;
- and
- a second set of personal information findings determined by comparing the second attribute values to the scanned values;
- correlating, by the computer, the first set of personal information findings, but not the second set of personal information findings, to the data subjects;
- creating, by the computer, personal information records corresponding to the correlated personal information findings and the data subject profiles;
- associating, by the computer, the personal information records with the data subject profiles;
- and
- providing, by the computer, the data subject profiles to a user.
A system comprising one or more computers and one or more storage devices storing instructions that when executed by the one or more computers cause the one or more computers to perform operations comprising:
- storing an identity graph comprising a plurality of data subject profiles, the identity graph comprising:
- a first attribute field comprising first attribute values, each associated with one of the data subject profiles;
- and
- a second attribute field comprising second attribute values, each associated with one of the data subject profiles;
- calculating a first identifiability score for the first attribute field, said calculating comprising:
- determining an average number of data subject profiles associated with each of the first attribute values,
- wherein the first identifiability score meets a minimum identifiability score;
- calculating a second identifiability score for the second attribute field, said calculating comprising:
- determining an average number of data subject profiles associated with each of the second attribute values,
- wherein the second identifiability score does not meet the minimum identifiability score;
- searching a scanned data source comprising scanned values;
- determining a plurality of personal information findings comprising:
- a first set of personal information findings determined by comparing the first attribute values to the scanned values;
- and
- a second set of personal information findings determined by comparing the second attribute values to the scanned values;
- correlating the first set of personal information findings, but not the second set of personal information findings, to the data subjects;
- creating personal information records corresponding to the correlated personal information findings and the data subject profiles;
- associating the personal information records with the data subject profiles;
- and
- providing the data subject profiles to a user.
Dependencies are inferred from the claim text.