US 12,111,949 B2 · Rights management regarding user data associated with data lifecycle discovery platform

Abstract

Techniques for data lifecycle discovery and management. Data lifecycle discovery platform (DLDP) can identify data of users, data type, and language of data stored in data stores (DSs) of entities based on scanning of data from databases. DLDP determines compliance of DLDP and DSs with obligations relating to data protection arising out of jurisdictional laws or agreements. DLDP generates rules to facilitate complying with and enforcing laws and agreements. DLDP can determine, and present to authorized users, risk scores relating to levels of compliance of the DLDP, associated platforms, or entities, risk indicator metrics, or a privacy health index of the organization associated with DLDP. DLDP can manage user rights regarding data, and access to data in DSs and information relating thereto stored in secure data store of DLDP. DLDP can remediate issues involving anomalies indicating non-compliance. DLDP can utilize machine learning to enhance various functions of DLDP.

A system, comprising:

a processor that executes computer-executable components stored in a memory, the computer-executable components comprising:
a secure data store that stores information relating to items of data associated with users that are stored in a set of data stores, wherein the information is generated based on scanning the items of data in the set of data stores;
a classifier component that:
analyzes the items of data;
determines, for each of the items of data, a data type;
and
assigns the respective data type for the items of data;
a rights management component that, determines, based on a set of rules, a set of rights of users with regard to a first subset of the items of data and a second subset of the information that are related to the users, wherein the set of rules is determined based on a set of obligations, the set of obligations being associated with the data type of each item of data in the set of data stores and related to data privacy and security;
and
a governance component that:
monitors trend information relating to data of users that is accessed by an entity;
determines a quantity of users engaging in an activity, the activity subject to the set of rights of users;
compares the quantity of users to a defined threshold value for the activity, the threshold value defined based on the set of rights;
in response to the quantity of users exceeding the defined threshold value, determines, based on an analysis of the trend information, that the trend information comprises a trend spike for the activity indicative of an anomaly representing a potential violation of the set of rules;
and
facilitates remediation of the anomaly at least by notifying the entity of the anomaly;
wherein the first subset of the items of data comprises an item of data of a user, wherein the rights management component receives, from a communication device of the user, a request to modify the item of data to due to inaccuracy of the item of data, and, upon authentication of the user and grant, by the rights management component, of a permission right to modify the item of data, initiates processing of the request to modify the item of data;
wherein the user is a first user, wherein the set of data stores is associated with an entity, wherein the set of rules comprises a rule that specifies the request to modify is to be processed and completed within a defined amount of time, wherein the rule corresponds to an obligation of the set of obligations, wherein the computer-executable components further comprise a notification component that generates notification messages, and
wherein, in response to a determination that the request to modify has not been processed and completed within the defined amount of time based on the rule, the notification component communicates a notification message to a device of a second user associated with the entity to notify the second user that the request to modify has not been processed and completed within the defined amount of time in violation of the rule and the obligation.

16 more elements

Facts

Application

17/127,400Filed 18 Dec 2020

Published

US 2022/0198054 A123 Jun 2022

Granted

8 Oct 2024

Term ends

Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/78
Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer: to…
G06N 5/025
Knowledge engineering; Knowledge acquisition: extracting rules from data

Rights management regarding user data associated with data lifecycle discovery platform

Life of this patent

Rights management regarding user data associated with data lifecycle discovery platform

Life of this patent

Abstract

Claims20