Identification of potentially sensitive information in data strings
AssigneeSecurityMetrics, Inc.
InventorsBradley R. Caldwell, Alan B. Butt
Life of this patent
Estimating the term…
Abstract
Methods for identifying potentially sensitive information and protecting such potentially sensitive information include scanning systems that collect and/or disseminate such information. Without limitation, systems collect and/or disseminate personal identification numbers (e.g., personal identification numbers, tax identification numbers, etc.), such as merchant systems, bank systems, healthcare systems, and the like, that collect, use, or disseminate sensitive information may be scanned to identify sequences of data that are likely to be sensitive, and may take actions to protect such sequences of data. Scanning and protection systems are also disclosed.
Claims19
A system for identifying potentially sensitive information, comprising:
- a scanning device that communicates with a memory device that stores data including potentially sensitive information comprising a unique identifier associated with a specific individual, the scanning device programmed to:
- determine whether a number of sequential bytes corresponding to decimal numbers or decimal numbers and dashes corresponds to the potentially sensitive information;
- and
- search for a combination of place names within a predetermined number of bytes of the potentially sensitive information by:
- identifying a first potential place name within the predetermined number of bytes;
- identifying a second potential place name associated with the first potential place name;
- and
- confirming that the first potential place name and the second potential place name correspond to acceptable place names, each of the first potential place name and the second potential place name including a consecutive string of alphabetical characters with optional spaces, dashes, commas, periods, or apostrophes.
A system for identifying potentially sensitive information, comprising:
- a scanning device that communicates with a memory device that stores data including potentially sensitive information, the scanning device programmed to:
- search for a suspected sensitive data string comprising a series of bytes that correspond to numbers or numbers and dashes;
- and
- upon identifying a suspected sensitive data string, search for a place name within a predetermined number of bytes of the suspected sensitive data string by:
- identifying a potential place name within the predetermined number of bytes;
- and
- confirming that the potential place name corresponds to an acceptable place name, the potential place name including a consecutive string of alphabetical characters with optional spaces, dashes, commas, periods, or apostrophes.
Dependencies are inferred from the claim text.