Intent-aware data leak mitigation
AssigneeU.S. Bank National Association
InventorMuthu Selvam
Life of this patent
Estimating the term…
Abstract
A data flow is intercepted, the intercepted data including a set of data fields carrying a corresponding set of content. An intent is identified behind a transaction including the intercepted data. A conformity indication is set relative to a first data field in the set of data fields to indicate nonconformity of a first content of the first data field, the setting including comparing the first content with expected data corresponding to a mapping of the intent in a knowledge graph. Based on the conformity indication, the first content is modified to form modified content. In the transaction in the data flow, the first content is replaced with the modified content, the replacing forming a modified transaction. The modified transaction is transmitted to a receiver data processing system over a data integration channel.
Claims20
A computer-implemented method, comprising:
- identifying an intent behind a transaction, the transaction comprising a first content of a first data field in intercepted data;
- setting a conformity indication relative to the first data field to indicate nonconformity of a first content of the first data field, the setting comprising comparing the first content with an expected data corresponding to the intent;
- modifying, based on the conformity indication, the first content to form a modified content;
- replacing in the transaction, the first content with the modified content, the replacing forming a modified transaction;
- and
- transmitting the modified transaction to a receiver data processing system over a data integration channel.
A computer program product comprising one or more non-transitory computer readable storage media, and program instructions collectively stored on the one or more non-transitory computer readable storage media, the program instructions executable by a set of one or more processors to cause the set of one or more processors to perform operations comprising:
- identifying an intent behind a transaction, the transaction comprising a first content of a first data field in intercepted data;
- setting a conformity indication relative to the first data field to indicate nonconformity of a first content of the first data field, the setting comprising comparing the first content with an expected data corresponding to the intent;
- modifying, based on the conformity indication, the first content to form a modified content;
- replacing in the transaction, the first content with the modified content, the replacing forming a modified transaction;
- and
- transmitting the modified transaction to a receiver data processing system over a data integration channel.
A computer system comprising a set of one or more processors and one or more non-transitory computer readable storage media, and program instructions collectively stored on the one or more non-transitory computer readable storage media, the program instructions executable by the set of one or more processors to cause the processor to perform operations comprising:
- identifying an intent behind a transaction, the transaction comprising a first content of a first data field in intercepted data;
- setting a conformity indication relative to the first data field to indicate nonconformity of a first content of the first data field, the setting comprising comparing the first content with an expected data corresponding to the intent;
- modifying, based on the conformity indication, the first content to form a modified content;
- replacing in the transaction, the first content with the modified content, the replacing forming a modified transaction;
- and
- transmitting the modified transaction to a receiver data processing system over a data integration channel.
Dependencies are inferred from the claim text.