Back to results
US 2015/0089357 A1Published application
Policy-aware configurable data redaction based on sensitivity and use factors
AssigneeXerox Corporation
InventorsDavid R. Vandervort, Andrés Quiroz Hernandez, Yasmine Charif
Life of this patent
Estimating the term…
Abstract
The present invention generally relates to systems and methods for document redaction. The disclosed techniques adapt to the needs of different levels of data sensitivity and different needs for disclosure or analysis by using pre-defined templates related to use cases, and mapping those to the relative sensitivity of private data types both in their natural form and after redaction by various redaction types. In this way, data is given the appropriate level of protection within the needs of a given use case.
Claims21
A computer-implemented method for redacting data, the method comprising:
- obtaining from a user, using an electronic interface, for each of a plurality of redaction types, a corresponding identification scope and a corresponding disclosure impact, whereby a plurality of triples are obtained, each triple comprising a redaction type, a corresponding identification scope, and a corresponding disclosure impact;
- generating an initial redaction matrix from the plurality of triples, wherein the initial redaction matrix is incomplete;
- obtaining from a user, using an electronic interface, a selection of a policy, wherein the policy specifies a technique for completing the initial redaction matrix;
- applying the policy to the initial redaction matrix using an electronic processor, whereby a completed redaction matrix is obtained;
- obtaining, from a user, using an electronic interface, an indication of a need to know a content for each of a plurality of data types used in an application;
- and
- applying the completed redaction matrix to a corresponding data type used in the application, whereby an application template is obtained, wherein the application template specifies a particular redaction type for each of the plurality of data types used in the application;
- and
- applying the application template to the application, whereby data used by the application is redacted.
6 more elements
A system for redacting data, the system comprising at least one processor configured to:
- obtain from a user, using an electronic interface, for each of a plurality of redaction types, a corresponding identification scope and a corresponding disclosure impact, whereby a plurality of triples are obtained, each triple comprising a redaction type, a corresponding identification scope, and a corresponding disclosure impact;
- generate an initial redaction matrix from the plurality of triples, wherein the initial redaction matrix is incomplete;
- obtain from a user, using an electronic interface, a selection of a policy, wherein the policy specifies a technique for completing the initial redaction matrix;
- apply the policy to the initial redaction matrix, whereby a completed redaction matrix is obtained;
- obtain, from a user, using an electronic interface, an indication of a need to know a content for each of a plurality of data types used in an application;
- and
- apply the completed redaction matrix to a corresponding data type used in the application, whereby an application template is obtained, wherein the application template specifies a particular redaction type for each of the plurality of data types used in the application;
- and
- apply the application template to the application, whereby data used by the application is redacted.
6 more elements
Non-transitory computer readable media including instructions which, when executed by at least one electronic processor, cause the at least one processor to:
- obtain from a user, using an electronic interface, for each of a plurality of redaction types, a corresponding identification scope and a corresponding disclosure impact, whereby a plurality of triples are obtained, each triple comprising a redaction type, a corresponding identification scope, and a corresponding disclosure impact;
- generate an initial redaction matrix from the plurality of triples, wherein the initial redaction matrix is incomplete;
- obtain from a user, using an electronic interface, a selection of a policy, wherein the policy specifies a technique for completing the initial redaction matrix;
- apply the policy to the initial redaction matrix, whereby a completed redaction matrix is obtained;
- obtain, from a user, using an electronic interface, an indication of a need to know a content for each of a plurality of data types used in an application;
- and
- apply the completed redaction matrix to a corresponding data type used in the application, whereby an application template is obtained, wherein the application template specifies a particular redaction type for each of the plurality of data types used in the application;
- and
- apply the application template to the application, whereby data used by the application is redacted.
6 more elements
Dependencies are inferred from the claim text.