# US 12,182,288 B2 · Remediating storage of sensitive data on hardware device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,288 B2 - Document ID: US12182288B2 - Status: Granted - Kind: B2 - Application number: 17/490,344 - Filed: 2021-09-30 - Published: 2023-03-30 - Granted: 2024-12-31 - Earliest claimed: 2021-09-30 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: Allison Renner Walton; Ana Andrijic; Jazzmine Marie White; David C. White, Jr. - Web page: https://patentgrep.com/patent/US12182288B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00) - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques are provided herein for remediating storage of sensitive data on a hardware device. In one example, a request to remediate storage of sensitive data on a hardware device is obtained. In response to the request, a database is automatically searched. The database correlates the hardware device with an indication of how to remediate the storage of the sensitive data on the hardware device. Based on the database, the storage of the sensitive data on the hardware device is remediated. ## Claims ### Claim 1 A computer-implemented method comprising: obtaining a request to remove sensitive data stored on a hardware device; in response to the request, automatically searching a database that correlates the hardware device with an indication of how to remove the sensitive data stored on the hardware device, wherein the database includes a mapping that maps a type of the hardware device to the indication of how to remove the sensitive data stored on the hardware device; identifying a risk level associated with a type of the sensitive data stored on the hardware device, wherein the database further includes a mapping that maps the type of the sensitive data stored on the hardware device to the risk level; providing an indication of the risk level; and based on the indication of the risk level and the indication of how to remove the sensitive data stored on the hardware device, removing the sensitive data from the hardware device. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein obtaining the request to remove the sensitive data stored on the hardware device includes: obtaining, from a user device, a picture or video of the hardware device, the computer-implemented method further comprising: identifying the hardware device from the picture or video. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein obtaining the request to remove the sensitive data stored on the hardware device includes: obtaining an identifier corresponding to the hardware device, the computer-implemented method further comprising: automatically identifying the hardware device from the identifier. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the hardware device is an aggregated hardware device that includes one or more individual hardware components configured to store the sensitive data. ### Claim 5 (depends on 4) The computer-implemented method of claim 4, further comprising: providing, for display on a user device, an annotated graphical rendering of the aggregated hardware device, wherein the annotated graphical rendering indicates one or more locations of the one or more individual hardware components on the aggregated hardware device. ### Claim 6 (depends on 4) The computer-implemented method of claim 4, further comprising: providing an indication of whether the one or more individual hardware components are removable from the aggregated hardware device. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, further comprising: providing an indication of the type of the sensitive data stored on the hardware device. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein removing the sensitive data from the hardware device includes: providing an indication of one or more operations to remove the sensitive data from the hardware device. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein removing the sensitive data from the hardware device includes: erasing the sensitive data from the hardware device. ### Claim 10 (depends on 1) The computer-implemented method of claim 1, wherein identifying the risk level associated with the type of the sensitive data includes: identifying a plurality of risk levels associated with a plurality of types of the sensitive data; determining a highest risk level from the plurality of risk levels; and assigning the highest risk level to the hardware device. ### Claim 11 An apparatus comprising: a network interface configured to obtain or provide network communications; and one or more processors coupled to the network interface, wherein the one or more processors are configured to: obtain a request to remove sensitive data stored on a hardware device; in response to the request, automatically search a database that correlates the hardware device with an indication of how to remove the sensitive data stored on the hardware device, wherein the database includes a mapping that maps a type of the hardware device to the indication of how to remove the sensitive data stored on the hardware device; identifying a risk level associated with a type of the sensitive data stored on the hardware device, wherein the database further includes a mapping that maps the type of the sensitive data stored on the hardware device to the risk level; providing an indication of the risk level; and based on the indication of the risk level and the indication of how to remove the sensitive data stored on the hardware device, remove the sensitive data from the hardware device. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to: obtain, from a user device, a picture or video of the hardware device; and identify the hardware device from the picture or video. ### Claim 13 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to: obtain an identifier corresponding to the hardware device; and automatically identify the hardware device from the identifier. ### Claim 14 (depends on 11) The apparatus of claim 11, wherein the hardware device is an aggregated hardware device that includes one or more individual hardware components configured to store the sensitive data. ### Claim 15 (depends on 11) The apparatus of claim 11, wherein removing the sensitive data from the hardware device includes: erasing the sensitive data from the hardware device. ### Claim 16 One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to: obtain a request to remove sensitive data stored on a hardware device; in response to the request, automatically search a database that correlates the hardware device with an indication of how to remove the sensitive data stored on the hardware device, wherein the database includes a mapping that maps a type of the hardware device to the indication of how to remove the sensitive data stored on the hardware device; identifying a risk level associated with a type of the sensitive data stored on the hardware device, wherein the database further includes a mapping that maps the type of the sensitive data stored on the hardware device to the risk level; providing an indication of the risk level; and based on the indication of the risk level and the indication of how to remove the sensitive data stored on the hardware device, remove the sensitive data from the hardware device. ### Claim 17 (depends on 16) The one or more non-transitory computer readable storage media of claim 16, wherein the instructions further cause the processor to: obtain, from a user device, a picture or video of the hardware device; and identify the hardware device from the picture or video. ### Claim 18 (depends on 16) The one or more non-transitory computer readable storage media of claim 16, wherein the instructions further cause the processor to: obtain an identifier corresponding to the hardware device; and automatically identify the hardware device from the identifier. ### Claim 19 (depends on 16) The one or more non-transitory computer readable storage media of claim 16, wherein the hardware device is an aggregated hardware device that includes one or more individual hardware components configured to store the sensitive data. ### Claim 20 (depends on 16) The one or more non-transitory computer readable storage media of claim 16, wherein removing the sensitive data from the hardware device includes: erasing the sensitive data from the hardware device.