Securing data
AssigneeUnited Services Automobile Association (USAA)
InventorsJoel Andrew McKay, David South, Robert Aaron Ghavidel, Donald Nathaniel Holloway, III
Life of this patent
Estimating the term…
Abstract
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for securing data. One of the methods includes receiving, by the map reduce framework, data for analysis. The method includes identifying, by the map reduce framework, private data in received data. The method includes encrypting the private data. The method includes storing the encrypted private data in a location separate from the received data. The method includes obfuscating the private data by adding a reference to the location of the encrypted private data in the received data.
Claims21
A computer implemented method for identifying and obfuscating private data in a map-reduce framework, the method comprising:
- receiving, by the map-reduce framework, data for analysis;
- identifying, by the map-reduce framework, the private data in the received data;
- identifying a type of the private data;
- selecting an encryption key based on the type of the private data;
- encrypting the private data using the selected encryption key;
- storing the encrypted private data in a location separate from the received data;
- and
- obfuscating the private data by adding, to the received data, a reference to the location of the encrypted private data.
A non-transitory computer storage medium encoded with computer program instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:
- receiving, by the map-reduce framework, data for analysis;
- identifying, by the map-reduce framework, the private data in the received data;
- identifying a type of the private data;
- selecting an encryption key based on the type of the private data;
- encrypting the private data using the selected encryption key;
- storing the encrypted private data in a location separate from the received data;
- and
- obfuscating the private data by adding, to the received data, a reference to the location of the encrypted private data.
A system comprising:
- a data ingestion component configured to receive data for analysis;
- a big data security component configured to:
- identify the private data in the received data,
- identify a type of the private data;
- select an encryption key based on the type of the private data;
- encrypt the private data using the selected encryption key, and
- obfuscate the private data by adding, to the received data, a reference to a location of the encrypted private data;
- and
- a data management component configured to store the encrypted private data in the location separate from the received data.
Dependencies are inferred from the claim text.