# US 2018/0322305 A1 · System and method for data theft prevention > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0322305 A1 - Document ID: US20180322305A1 - Status: Published application - Kind: A1 - Application number: 15/588,341 - Filed: 2017-05-05 - Published: 2018-11-08 - Earliest claimed: 2017-05-05 - Assignees: Mastercard International Incorporated - Applicants: Mastercard International Incorporated - Inventors: Alan Gorenstein - Web page: https://patentgrep.com/patent/US20180322305A1 ## CPC - G06F 21/60: Protecting data - G06F 21/562: {Static detection} - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 63/04: {for providing a confidential data exchange among entities communicating through data packet networks} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04W 12/126: Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning - H04W 12/128: Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Data theft may be prevented by modifying a data storage device having standard data records to include “mine” data records. The mine data records may include executable code that when executed implement a breach action that destroys the data records and/or external storage devices in some manner. The mine data records may be recorded in a data decoder. Should an authorized user desire to access the data storage device, an authorizer may provide (or have previously provided) the authorized user with instructions identifying the mine data record locations based on the data decoder. ## Claims ### Claim 1 A system for data theft prevention, comprising: a data decoder, communicably coupled to a database having protected data therein, identifying mine data locations within the database, executable code being stored within the database at the mine data locations; a network interface configured to provide access to the database from outside the database; and, an authorizer including a processor and computer readable instructions that when executed by the processor: verify a user device attempting to access the database as an authorized user device, and when established as an authorized user device, instruct the authorized user device to avoid the mine data locations identified within the data decoder. ### Claim 2 (depends on 1) The system of claim 1, the mine data locations including an image associated with a data entry within the database. ### Claim 3 (depends on 1) The system of claim 1, the mine data locations including text associated with a data entry within the database, wherein the text is reformatted into an executable call-out. ### Claim 4 (depends on 1) The system of claim 1, an executable call-out being located in one of the mine locations, and the executable code being initiated by the executable call-out and being located in other of the mine data locations. ### Claim 5 (depends on 1) The system of claim 1, the executable code being parsed into a plurality of segments between multiple of the mine data locations. ### Claim 6 (depends on 5) The system of claim 5, the executable code being configured to execute when a threshold number of the plurality of segments of the executable code are accessed. ### Claim 7 (depends on 1) The system of claim 1, the executable code configured to send a breach alert when executed. ### Claim 8 (depends on 1) The system of claim 1, the executable code configured to delete the database when executed. ### Claim 9 (depends on 1) The system of claim 1, the executable code configured to delete all memory within a computer from which the executable code is downloaded. ### Claim 10 (depends on 1) The system of claim 1, wherein the data decoder is located in a separate device from the database. ### Claim 11 (depends on 1) The system of claim 1, the computer readable instructions of the authorizer being triggered in response to a data request from a user device. ### Claim 12 A method for data theft prevention including, storing protected data on a data storage device, inserting executable code within the protected data at a plurality of mine data locations; generating, via a processor executing computer readable instructions, a data decoder indicating the plurality of mine data locations; and, instructing, via a processor executing computer readable instructions, an authorized user device requesting access to the protected data about the mine data locations such that when the authorized user device accesses the data storage device the authorized user device avoids the executable code. ### Claim 13 (depends on 12) The method of claim 12, the inserting executable code including inserting executable code in a first of the mine data locations, and a call-out for initiating said executable code in a second of the mine data location of the protected data. ### Claim 14 (depends on 12) The method of claim 12, the inserting executable code including parsing the executable code between the plurality of mine data locations. ### Claim 15 (depends on 13) The method of claim 13, the inserting executable code including selecting the plurality of mine data locations randomly. ### Claim 16 A data storage device, comprising: protected data including a plurality of mine data records and a plurality of standard data records; executable code located at the plurality of mine data records that, when executed, implement a breach action; locations of the plurality of mine data records being recorded in a data decoder accessible by an authorized user to prevent access of the executable code by the authorized user. ### Claim 17 (depends on 16) The data storage device of claim 16, the breach action including erasing data at a device external to the data storage device. ### Claim 18 (depends on 16) The data storage device of claim 16, the breach action initiating a breach alert sent to a device external the data storage device. ### Claim 19 (depends on 16) The data storage device of claim 16, the executable code, when implemented, initiating a safeguard procedure allowing an authorized user device to prevent execution of the executable code. ### Claim 20 (depends on 16) The data storage device of claim 16, the locations of the plurality of mine data records being selected based on a random function.