US 12,001,570 B2Granted

Big data distributed processing and secure data transferring with resource allocation and rebate

AssigneeBank of America Corporation

InventorsPratap Dande, Gilberto Dos Santos, JayaBalaji Murugan

Life of this patent

Estimating the term…

Loading patent…

Abstract

Aspects of the disclosure relate to resource allocation and rebating during in-flight data masking and on-demand encryption of big data on a network. Computer machine(s), cluster managers, nodes, and/or multilevel platforms can request, receive, and/or authenticate requests for a big data dataset, containing sensitive and non-sensitive data. Profiles can be auto provisioned, and access rights can be assigned. Server configuration and data connection properties can be defined. Secure connection(s) to the data store can be established. Sensitive information can be redacted into a sanitized dataset based on one or more data obfuscation types. RAM requirements and current RAM allocation can be diagnosed. Portion(s) of the current RAM allocation exceeding the RAM requirements can be rebated. The encrypted data can be transmitted, in response to the request, to a source, a target, and/or another computer machine and can be decrypted back into the sanitized dataset.

Claims20

Dependent claims

A computer-implemented method of resource allocation and rebating during in-flight data masking and on-demand encryption of big data on a network comprising the steps of:

authenticating, by an obfuscation computer machine, a request for a big data dataset based on credentials received from a source,
said obfuscation computer machine coupled to the network,
said obfuscation computer machine containing computer-readable memory,
said request stored in a first sector of the computer-readable memory;
said big data dataset stored in a data store coupled to the network, said big data dataset including sensitive information and non-sensitive information;
auto provisioning, by the obfuscation computer machine, a profile corresponding to the request, said profile stored in a second sector of the computer-readable memory;
assigning, by the obfuscation computer machine, access rights for the request based on the profile, said access rights stored in a third sector of the computer-readable memory;
defining, by the obfuscation computer machine, server configuration and data connection properties for the data store containing the big data dataset, said server configuration and said data connection properties stored in a fourth sector of computer-readable memory;
establishing, by the obfuscation computer machine, a secure connection from the obfuscation computer machine to the data store based on the server configuration and the data connection properties;
registering, by the obfuscation computer machine, at least one multiple data obfuscation type stored in a fifth sector of computer-readable memory;
loading, by the obfuscation computer machine into a sixth sector of computer-readable memory, the big data dataset from the data store on the network;
searching, by the obfuscation computer machine, the big data dataset for the sensitive information to be redacted;
redacting into a sanitized dataset, by the obfuscation computer machine, the sensitive information in the big data dataset based on said at least one multiple data obfuscation type and the non-sensitive information;
storing, by the obfuscation computer machine into a seventh sector of computer-readable memory, the sanitized dataset;
encrypting, by the obfuscation computer machine, the sanitized dataset into encrypted data, said encrypted data stored in an eighth sector of computer-readable memory;
and
transmitting, by the obfuscation computer machine, the encrypted data in response to the request.

14 more elements

A non-transitory computer-readable medium with computer-executable instructions stored thereon executed by a processor on an obfuscation computer machine to perform resource allocation and rebating during in-flight data masking and on-demand encryption of a big data dataset stored in a data store on a network, said big data dataset including sensitive information and non-sensitive information, said obfuscation computer machine communicatively coupled to the network, comprising:

authentication instructions to authenticate a request for the big data dataset based on credentials received from a source,
auto provision instructions to identify a profile corresponding to the request, said profile stored in a first sector of the computer-readable medium;
access instructions to assign access rights for the request based on the profile, said access rights stored in a second sector of the computer-readable medium;
server configuration and data connection instructions to define server configuration and connection properties for the data store containing the big data dataset, said server configuration and said data connection properties stored in a third sector of the computer-readable medium,
secure connection instructions to establish a secure connection from the obfuscation computer machine to the data store based on the server configuration and the data connection properties;
registration instructions to register at least one multiple data obfuscation type stored in a fourth sector of the computer-readable medium;
load instructions to load the big data dataset from the data store on the network into a fifth sector of the computer-readable medium;
search instructions to search the big data dataset for the sensitive information to be redacted;
redaction instructions to redact into a sanitized dataset the sensitive information in the big data dataset based on said at least one multiple data obfuscation type and the non-sensitive information;
storage instructions to store the sanitized dataset into a sixth sector of the computer-readable medium;
encryption instructions to encrypt the sanitized dataset into encrypted data, said encrypted data stored in a seventh sector of the computer-readable medium;
and
transmission instructions to transmit the encrypted data in response to the request.

10 more elements

A computing platform for performing resource allocation and rebating during in-flight data masking and on-demand encryption of big data on a network comprising:

a data store coupled to the network, said data store containing a big data dataset including sensitive information and non-sensitive information;
a computer machine having:
at least one hardware processor,
at least one communication interface communicatively coupled to the at least one hardware processor and the network, and
a computer-readable medium communicatively coupled to the at least one communication interface, the computer-readable medium storing computer-executable instructions that, when executed by said at least one hardware processor, cause the computer machine to:
authenticate a request for the big data dataset based on credentials received from a source;
auto provision a profile corresponding to the request, said profile stored in a first sector of the computer-readable medium;
assign access rights for the request based on the profile, said access rights stored in a second sector of the computer-readable medium;
define server configuration and data connection properties for the data store containing the big data dataset, said server configuration and said data connection properties stored in a third sector of the computer-readable medium;
establish a secure connection from the computer machine to the data store based on the server configuration and the data connection properties;
register at least one multiple data obfuscation type stored in a fourth sector of the computer-readable medium;
load the big data dataset from the data store on the network into a fifth sector of the computer-readable medium;
search the big data dataset for the sensitive information to be redacted;
redact into a sanitized dataset the sensitive information in the big data dataset based on said at least one multiple data obfuscation type and the non-sensitive information;
store the sanitized dataset into a sixth sector of the computer-readable medium;
encrypt the sanitized dataset into encrypted data, said encrypted data stored in a seventh sector of the computer-readable medium;
and
transmit the encrypted data in response to the request.

15 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/690,423Filed 9 Mar 2022 · continuation
Priority: 8 Jan 2020
Published: US 2022/0198030 A123 Jun 2022
Granted: 4 Jun 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 9/5016
The resources being hardware resources other than CPUs, Servers and Terminals: the resource being the memory
G06F 9/5072
Partitioning or combining of resources: grid computing
G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…

Family

Application16/737,271Parent of this continuation · filed 8 Jan 2020
US 2022/0198030 A1Pre-grant publication · published 23 Jun 2022
US 11,314,874 B2Parent of this continuation
US 2021/0209235 A1Published application
US 12,001,570 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key