US 2024/0403450 A1Published application

Systems and methods for detecting sensitive information exposure

AssigneeCapital One Services, LLC

InventorsMatthew Louis NOWAK, Michael Anthony YOUNG, JR., Christopher McDANIEL

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems to detect and manage access to sensitive information. The system retrieves a dataset of entitlements for a plurality of users. The dataset of entitlements specifies one or more respective exposure vectors. The system detects a triggering event, including a release of sensitive information to a first subset of users of the plurality of users via a first exposure vector. The system then determines a second subset of users of the plurality of users that have access to the first exposure vector based on a comparison of the first exposure vector to the dataset of entitlements. The system monitors electronic communications of the second subset of users for activity related to the sensitive information to detect first activity of a first user of the second subset of users. The system generates for display a first notification to a second user based on detecting the first activity.

Claims20

Dependent claims

A system for automatically detecting exposures of sensitive information, the system comprising:

retrieving a dataset of entitlements for a plurality of users, wherein the dataset of entitlements specifies one or more respective exposure vectors corresponding to each of the plurality of users, wherein the dataset of entitlements specifies what locations, data, software, hardware, computer networks, or systems each user of the plurality of users has access to;
detecting a triggering event, wherein the triggering event comprises a release of sensitive information to a first subset of users of the plurality of users via a first exposure vector, wherein the first subset of users consists of users authorized to access the sensitive information;
and
in response to detecting the triggering event:
determining a second subset of users of the plurality of users that have access to the first exposure vector based on a comparison of the first exposure vector to the dataset of entitlements, wherein the second subset of users consists of users not authorized to access the sensitive information;
monitoring electronic communications of the second subset of users for activity related to the sensitive information;
based on monitoring the electronic communications, detecting first activity of a first user of the second subset of users that is related to the sensitive information;
and
generating for display, on a user interface, a first notification to a further user based on detecting the first activity, wherein the first notification comprises a warning to the further user that the sensitive information has been released to an unauthorized user.

6 more elements

A method for automatically detecting exposures of sensitive information, the method comprising:

retrieving a dataset of entitlements for a plurality of users, wherein the dataset of entitlements specifies one or more respective exposure vectors;
detecting a triggering event, wherein the triggering event comprises a release of sensitive information to a first subset of users of the plurality of users via a first exposure vector;
and
in response to detecting the triggering event:
determining a second subset of users of the plurality of users that have access to the first exposure vector based on a comparison of the first exposure vector to the dataset of entitlements;
monitoring electronic communications of the second subset of users for activity related to the sensitive information;
based on monitoring the electronic communications, detecting first activity of a first user of the second subset of users that is related to the sensitive information;
and
generating for display, on a user interface, a first notification to a further user based on detecting the first activity.

6 more elements

A non-transitory, computer-readable medium comprising instructions that, when executed by one or more processors, cause operations comprising:

retrieving a dataset of entitlements for a plurality of users, wherein the dataset of entitlements specifies one or more respective exposure vectors;
detecting a triggering event, wherein the triggering event comprises a release of sensitive information to a first subset of users of the plurality of users via a first exposure vector;
and
in response to detecting the triggering event:
determining a second subset of users of the plurality of users that have access to the first exposure vector based on a comparison of the first exposure vector to the dataset of entitlements;
monitoring electronic communications of the second subset of users for activity related to the sensitive information;
detecting first activity of a first user of the second subset of users that is related to the sensitive information;
and
generating for display, on a user interface, a notification to a further user based on detecting the first activity.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/325,977Filed 30 May 2023
Published: 5 Dec 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/604
Protecting data: tools and structures for managing or administering access control systems
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 2221/2101
Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for…:…