System and method for data theft prevention
AssigneeMastercard International Incorporated
InventorAlan Gorenstein
Life of this patent
Estimating the term…
Abstract
Data theft may be prevented by modifying a data storage device having standard data records to include “mine” data records. The mine data records may include executable code that when executed implement a breach action that destroys the data records and/or external storage devices in some manner. The mine data records may be recorded in a data decoder. Should an authorized user desire to access the data storage device, an authorizer may provide (or have previously provided) the authorized user with instructions identifying the mine data record locations based on the data decoder.
Claims20
A system for data theft prevention, comprising:
- a data decoder, communicably coupled to a database having protected data therein, identifying mine data locations within the database, executable code being stored within the database at the mine data locations;
- a network interface configured to provide access to the database from outside the database;
- and,
- an authorizer including a processor and computer readable instructions that when executed by the processor:
- verify a user device attempting to access the database as an authorized user device, and
- when established as an authorized user device, instruct the authorized user device to avoid the mine data locations identified within the data decoder.
A method for data theft prevention including,
- storing protected data on a data storage device,
- inserting executable code within the protected data at a plurality of mine data locations;
- generating, via a processor executing computer readable instructions, a data decoder indicating the plurality of mine data locations;
- and,
- instructing, via a processor executing computer readable instructions, an authorized user device requesting access to the protected data about the mine data locations such that when the authorized user device accesses the data storage device the authorized user device avoids the executable code.
A data storage device, comprising:
- protected data including a plurality of mine data records and a plurality of standard data records;
- executable code located at the plurality of mine data records that, when executed, implement a breach action;
- locations of the plurality of mine data records being recorded in a data decoder accessible by an authorized user to prevent access of the executable code by the authorized user.
Dependencies are inferred from the claim text.