Systems and methods for protecting sensitive data in communications
AssigneeGoogle Inc.
InventorsGarth Shoemaker, Ivan Medvedev
Life of this patent
Estimating the term…
Abstract
Systems and methods for protecting sensitive data in communications are described, including identifying first information in content created by a user for a communication; sending the first information to a vault; receiving, from the vault, an identifier associated with the first information; replacing the first information in the content with second information that is associated with the first information and does not provide any indication of the content of the first information; and sending the communication comprising the content with the second information and the identifier.
Claims20
A computer-implemented method, comprising:
- identifying first information in content created by a user for a communication;
- sending the first information to a vault;
- receiving, from the vault, an identifier associated with the first information;
- replacing the first information in the content with second information that is associated with the first information and does not provide any indication of the content of the first information;
- providing the user with a user control to select a manner of the replacing from designating at least one of a placeholder, a blank format, a link, and a user-defined replacement format, and to prevent the sending of the second information for the recipient that does not support the capability to process the communication comprising the content with the second information and the identifier;
- and
- sending the communication comprising the content with the second information and the identifier, wherein the sending the communication is limited to a user-defined expiration period after which the first information cannot be retrieved from the vault.
A non-transitory computer readable medium having stored therein computer executable instructions for:
- identifying first information in content created by a user for a communication;
- sending the first information to a vault;
- receiving, from the vault, an identifier associated with the first information;
- replacing the first information in the content with second information that is associated with the first information and does not provide any indication of the content of the first information;
- receiving another communication associated with an access limit based on at least one of a time duration, an access location of a recipient, and an access device of a recipient, the another communication comprising another content, another second information, and another identifier;
- sending the another identifier to the vault;
- receiving, from the vault, another first information associated with the another identifier;
- and
- rendering the another content in the another communication with the another second information replaced with the another first information;
- and
- sending the communication comprising the content with the second information and the identifier.
At least one computing device comprising storage and a processor configured to perform:
- at a computer processor, identifying first information in content created by a user for a communication;
- sending, by the computer processor, the first information to a vault;
- receiving, from the vault, an identifier associated with the first information;
- replacing the first information in the content with second information that is associated with the first information and does not provide any indication of the content of the first information;
- providing the user with a user control to select a manner of the replacing from designating at least one of a placeholder, a blank format, a link, and a user-defined replacement format, and to prevent the sending of the second information for the recipient that does not support the capability to process the communication comprising the content with the second information and the identifier;
- and
- the computer processor sending the communication comprising the content with the second information and the identifier, wherein the sending the communication is limited to a user-defined expiration period after which the first information cannot be retrieved from the vault.
Dependencies are inferred from the claim text.