US 2016/0110558 A1Published application

Client identifying data (cid) target-state-compliant computer-executable applications

OwnerBartholomaus Johannes POHL, Thomas Ralf HALLER +2inventors

InventorsBartholomaus Johannes POHL, Thomas Ralf HALLER, Johann Franz MAREK, Thierry Daniel SCHAFFLUETZEL

Life of this patent

Estimating the term…

Loading patent…

Abstract

An approach for facilitating client identifying data (CID) target-state-compliant computer-executable applications is disclosed. In some implementations, a CID questionnaire that includes one or more requests for information relating to CID exposure associated with an application may be provided to a first user. One or more inputs to the one or more information requests may be received from the first user. Current state information associated with the application may be determined based on the one or more inputs and one or more CID-related criteria. The current state information may include risk information indicating current CID exposure associated with the application. Target state information associated with the application may be received. Remediation information associated with the application may be provided to one or more users. The remediation information may be determined based on the current statement information and the target statement information.

Claims20

Dependent claims

A method of facilitating client identifying data (CID) target-state-compliant computer-executable applications, the method being implemented on a computer that includes one or more processors, the method comprising:

providing, to a first user, a CID questionnaire that includes one or more requests for information relating to CID exposure associated with an application;
receiving, from the first user, one or more inputs to the one or more information requests;
determining current state information associated with the application based on the one or more inputs and one or more CID-related criteria, wherein the current state information includes risk information indicating current CID exposure associated with the application, wherein the risk information indicates severity of the current CID exposure;
wherein the current CID exposure is determined based on one or more of the following first CID-related criteria:
CID types of exposed CID,
types of clients associated with the exposed CID, or
an amount of the clients associated with the exposed CID, and
wherein the severity of the current CID exposure is determined based on one or more of the following second CID-related criteria:
an amount of users to which the exposed CID is accessible,
types of users to which the exposed CID is accessible,
domains in which the exposed CID is accessible, or
data protection being applied for the exposed CID;
calculating the current CID exposure based on the one or more first CID-related criteria and first potential characteristics related to the one or more inputs;
calculating the severity of the current CID exposure based on the one or more second CID-related criteria and second potential characteristics related to the one or more inputs;
receiving target state information associated with the application;
and
providing remediation information associated with the application to one or more users, wherein the remediation information is determined based on the current state information and the target state information, and wherein the step of providing the remediation information further comprises displaying a user interface indicating:
the remediation information indicating one or more remedial actions to be taken for the application to become compliant with the target state information;
the current CID exposure;
and
the severity of the current CID exposure.

18 more elements

A system for facilitating client identifying data (CID) target-state-compliant computer-executable applications, the system including one or more processors executing one or more computer program modules that cause the system to:

provide, to a first user, a CID questionnaire that includes one or more requests for information relating to CID exposure associated with an application;
receive, from the first user, one or more inputs to the one or more information requests;
determine current state information associated with the application based on the one or more inputs and one or more CID-related criteria, wherein the current state information includes risk information indicating current CID exposure associated with the application, wherein the risk information indicates severity of the current CID exposure;
wherein the current CID exposure is determined based on one or more of the following first CID-related criteria:
CID types of exposed CID,
types of clients associated with the exposed CID, or
an amount of the clients associated with the exposed CID, and
wherein the severity of the current CID exposure is determined based on one or more of the following second CID-related criteria:
an amount of users to which the exposed CID is accessible,
types of users to which the exposed CID is accessible,
domains in which the exposed CID is accessible, or
data protection being applied for the exposed CID;
calculate the current CID exposure based on the one or more first CID-related criteria and first potential characteristics related to the one or more inputs;
calculate the severity of the current CID exposure based on the one or more second CID-related criteria and second potential characteristics related to the one or more inputs;
receive target state information associated with the application;
and
provide remediation information associated with the application to one or more users, wherein the remediation information is determined based on the current state information and the target state information, and wherein, in the operation of providing the remediation information, the one or more processors are further configured to cause the system to display a user interface indicating:
the remediation information indicating one or more remedial actions to be taken for the application to become compliant with the target state information;
the current CID exposure;
and
the severity of the current CID exposure.

18 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/892,310Filed 22 May 2014
Priority: EP 13002710.524 May 2013
Published: 21 Apr 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06Q 10/101
Office automation; Time management: collaborative creation, e.g. joint development of products or services
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06F
Computing and data processing