Automated pre-commit scan of application code for privacy protected data accesses
AssigneeMicrosoft Technology Licensing, LLC
InventorsSaurav Kumar, Ming Liao
Life of this patent
Estimating the term…
Abstract
Technologies for protected data management are described. Embodiments include receiving a request to commit a code element to a codebase in a software application. The code element is scanned using a pre-commit scan. The scan includes a query that is customized to identify a protected data element and/or a protected data element access. The scan can identify at least one portion of the code element that accesses the protected data element. A database of registered protected data elements is searched for the protected data element and/or protected data element access. A notification can be generated and sent to a developer account that is associated with the request to commit the code element.
Claims20
A method comprising:
- receiving a request to commit a code element to a codebase for a software application;
- prior to committing the code element to the codebase, scanning the code element using an automated scan;
- the scan comprises at least one query that is configured to identify, in the code element, at least one protected data element access;
- detecting, by the scan of the code element, at least one portion of the code element that contains the at least one protected data element access;
- searching a database of registered protected data elements for the at least one protected data element access;
- determining that the at least one protected data element access does not have a match in the database of registered protected data elements;
- and
- prior to committing the code element to the codebase, generating and sending a notification to a developer account associated with the request to commit the code element.
A system comprising:
- at least one memory device;
- and
- a processing device, operatively coupled to the at least one memory device, to:
- receive a request to commit a code element to a codebase for a software application;
- scan the code element using a scan that comprises a query that is customized to identify a protected data element;
- detect, by the scan of the code element, at least one portion of the code element that accesses the protected data element;
- search a database of registered protected data elements for the protected data element;
- and
- in response to determining that the protected data element does not have a match in the database of registered protected data elements, generate a notification to a developer account that is associated with the request to commit the code element.
Dependencies are inferred from the claim text.