Contextual data loss prevention for a group-based communication system
AssigneeSalesforce, Inc.
InventorFelipe Ryan
Life of this patent
Estimating the term…
Abstract
A system, method, and computer-readable media for providing contextual data loss prevention (DLP) within a group-based communication system. At least a portion of a DLP policy may be suspended within a DLP engine based on a context for which a user input is to be displayed. Accordingly, the user input may be displayed without interference from the DLP engine.
Claims20
One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method of data loss prevention (DLP) within a group-based communication system, the method comprising:
- receiving a first user input in a first channel of the group-based communication systems wherein the first channel of the group-based communication system is accessible to a first plurality of users;
- applying, through a DLP engine, a DLP policy to the first user input;
- based on applying the DLP policy, if the first user input violates the DLP policy, inhibiting display of the first user input in the first channel of the group-based communication system;
- in response to the first user input violating the DLP policy, creating a second channel of the group-based communication system, wherein the second channel of the group-based communication system is accessible to a second plurality of users comprising a subset of the first plurality of users;
- wherein the second channel is a vault channel for sharing sensitive information in a safe manner;
- receiving a second user input in the second channel of the group-based communication system;
- and
- in response to applying the DLP policy, displaying the second user input in the second channel.
A method of data loss prevention (DLP) within a group-based communication system, the method comprising:
- receiving a first user input in a first channel of the group-based communication systems wherein the first channel of the group-based communication system is accessible to a first plurality of users;
- applying, through a DLP engine, a DLP policy to the first user input;
- based on applying the DLP policy, if the first user input violates the DLP policy, inhibiting display of the first user input in the first channel of the group-based communication system;
- in response to the first user input violating the DLP policy, creating a second channel of the group-based communication system, wherein the second channel of the group-based communication system is accessible to a second plurality of users comprising a subset of the first plurality of users;
- wherein the second channel is a vault channel for sharing sensitive information in a safe manner;
- receiving a second user input in the second channel of the group-based communication system;
- and
- in response to applying the DLP policy, displaying the second user input in the second channel.
A data loss prevention system comprising:
- a data store;
- and
- a processor, programmed to perform a method of data loss prevention (DLP) within a group-based communication system, the method comprising:
- receiving a first user input in a first channel of the group-based communication system, wherein the first channel of the group-based communication system is accessible to a first plurality of users;
- applying, through a DLP engine, a DLP policy to the first user input;
- based on applying the DLP policy, if the first user input violates the DLP policy, inhibiting display of the first user input in the first channel of the group-based communication system;
- in response to the first user input violating the DLP policy, creating a second channel within of the group-based communication system, wherein the second channel of the group-based communication system is accessible to a second plurality of users comprising a subset of the first plurality of users;
- wherein the second channel is a vault channel for sharing sensitive information in a safe manner;
- receiving a second user input in the second channel of the group-based communication system;
- and
- in response to applying the DLP policy, displaying the second user input in the second channel.
Dependencies are inferred from the claim text.