Sensitive data control
AssigneeAmazon Technologies, Inc.
InventorsVinaya Nadig, Shipra Agarwal Kanoria, Elad Refael Kassis, Ambika Babuji, Neelesh Deo Dani, Rohan Mutagi
Life of this patent
Estimating the term…
Abstract
A system is provided for determining privacy controls for output including sensitive data. A user may subscribe to receive an output in the future based on the occurrence of an event. The system may determine when the event is occurred triggering the output, and determine that the output includes outputting sensitive data. The system may determine output data that does not include the sensitive data, send the output data to a device, and may request the user to provide an authentication input to receive the sensitive data.
Claims20
A computer-implemented method comprising:
- during a first time period:
- receiving first input audio data corresponding to a first utterance, the first input audio data associated with a user profile;
- determining, from the first input audio data, that the first utterance requests a first notification be output when a first event occurs;
- generating first trigger data representing the first notification is to be output when the first event occurs;
- and
- associating the first trigger data with the user profile;
- during a second time period subsequent to the first time period:
- receiving first event data;
- determining that the first event data corresponds to the first event represented by the first trigger data;
- determining, using the first trigger data, that the first notification is to be output with respect to the user profile;
- determining first output text data representing the first notification;
- determining, using semantic analysis, that the first output text data includes a representation of first sensitive data;
- based at least in part on the first output text data including the representation of the first sensitive data, determining a first privacy control associated with the user profile and indicating stored user recognition data to be used to access the representation of the first sensitive data;
- generating second output text data requesting an input usable to authenticate a user identity using the stored user recognition data;
- determining, using text-to-speech (TTS) processing, first output audio data from the second output text data;
- causing the first output audio data to be presented;
- after causing the first output audio data to be presented, receiving authentication data;
- determining, using the stored user recognition data, that the authentication data satisfies the first privacy control;
- based at least in part on determining that the authentication data satisfies the first privacy control, processing, using TTS processing, the first output text data to determine second output audio data, the second output audio data including the representation of the first sensitive data;
- and
- causing the second output audio data to be presented.
A computer-implemented method comprising:
- receiving first input data corresponding to a first user input, the first input data associated with a user profile;
- determining, from the first input data, that the first user input requests a first notification be output when a first event occurs;
- generating first trigger data representing the first notification is to be output when the first event occurs;
- after generating the first trigger data, receiving event data;
- determining the event data corresponds to the first event represented by the first trigger data;
- determining, using the first trigger data, that the first notification is to be output with respect to the user profile;
- determining first output data corresponding to the first notification;
- processing, using semantic analysis, the first output data to determine that the first output data includes a representation of sensitive data;
- based at least in part on determining that the first output data includes the representation of the sensitive data, determining second output data corresponding to the first notification, wherein the second output data excludes the representation of the sensitive data, and wherein the second output data requests an input for user authentication processing;
- causing the second output data to be presented;
- after causing the second output data to be presented, receiving authentication data;
- determining that the authentication data satisfies a first privacy control to access the representation of the sensitive data;
- and
- based at least in part on the authentication data satisfying the first privacy control, causing the first output data to be presented.
A system comprising:
- at least one processor;
- and
- at least one memory including instructions that, when executed by the at least one processor, cause the system to:
- receive first input data corresponding to a first user input, the first input data associated with a user profile;
- determine, from the first input data, that the first user input requests a first notification be output when a first event occurs;
- generate first trigger data representing the first notification is to be output when the first event occurs;
- after the generation of the first trigger data, receive event data;
- determining the event data corresponds to the first event represented by the first trigger data;
- determine, using the first trigger data, that the first notification is to be output with respect to the user profile;
- determining first output data corresponding to the first notification;
- process, using semantic analysis, the first output data to determine that the first output data includes a representation of sensitive data;
- based at least in part on determining that the first output data includes the representation of the sensitive data, determine second output data corresponding to the first notification, wherein the second output data excludes the representation of the sensitive data, and wherein the second output data requests an input for user authentication processing;
- cause the second output data to be presented;
- after causing the second output data to be presented, receive authentication data;
- determine that the authentication data satisfies a first privacy control to access the representation of the sensitive data;
- and
- based at least in part on the authentication data satisfying the first privacy control, cause the first output data to be presented.
Dependencies are inferred from the claim text.