Back to results
US 9,519,759 B2Granted
Secure access to programming data
AssigneeBank of America Corporation
InventorsManu Jacob Kurian, Sorin N. Cismas
Life of this patent
Estimating the term…
Abstract
Embodiments for preventing data loss and allowing selective data access are provided. In some embodiments, the system and method are configured to receive task protocols and registration requests; determine an allowed list based on the protocols or requests, the list comprising registered data and codes needed to execute a task; allow a user to establish a connection to a device to execute the task on the device; identify data being transferred to and from the device; compare the data being transferred and the allowable list; and determine that at least some of the data being transferred is allowable.
Claims18
A system for preventing data loss, whereby the system selectively allows or denies data access based on pre-approvals, the system comprising:
- a computer apparatus including a processor and a memory;
- and
- a software module stored in the memory, comprising executable instructions that when executed by the processor cause the processor to:
- receive a request to create a container, wherein the container is a file system comprising access parameters that define one or more permitted actions and one or more permitted users for the container;
- determine a fingerprint of the container, the fingerprint being a record of a structure, a content, and communication channels of the container at a first point in time for comparison to the container at a later time, wherein the fingerprint is stored locally within the container;
- generate the container with the access parameters and the fingerprint;
- receive task protocols and registration requests associated with the container;
- determine an allowed list for the container based on the task protocols and the registration requests, the allowed list comprising registered data and codes needed to execute a task;
- determine that a user is attempting to access container data of the container, wherein the user is one of the one or more permitted users;
- in response to determining that the user is attempting to access the container data, determine that the container is not in compliance with the fingerprint;
- in response to determining that the container is not in compliance with the fingerprint, compare the container data to the allowed list;
- allow a first portion of the container data to be accessed by the user based on a determination that the first portion of the container data is included in the allowed list;
- determine that a remaining portion of the container data is not included in the allowed list, wherein the remaining portion of the container data excludes the first portion of the container data, includes a second portion of the container data, and includes a third portion of the container data;
- search content of the remaining portion of the container data to determine whether or not the remaining portion of the container data contains confidential or proprietary information;
- allow the second portion of the container data to be accessed by the user based on a determination that the second portion of the container data does not contain the confidential or proprietary information;
- and
- block the third portion of the container data from being accessed by the user based on a determination that the third portion of the container data does contain the confidential or proprietary information.
14 more elements
A computer program product for preventing data loss, the computer program product comprising:
- a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
- computer readable program code configured to receive a request to create a container, wherein the container is a file system comprising access parameters that define one or more permitted actions and one or more permitted users for the container;
- computer readable program code configured to determine a fingerprint of the container, the fingerprint being a record of a structure, a content, and communication channels of the container at a first point in time for comparison to the container at a later time, wherein the fingerprint is stored locally within the container;
- computer readable program code configured to generate the container with the access parameters and the fingerprint computer readable program code configured to receive task protocols and registration requests associated with the container;
- computer readable program code configured to determine an allowed list for the container based on the task protocols and the registration requests, the allowed list comprising registered data and codes needed to execute a task;
- computer readable program code configured to determine that a user is attempting to access container data of the container, wherein the user is one of the one or more permitted users;
- computer readable program code configured to, in response to determining that the user is attempting to access the container data, determine that the container is not in compliance with the fingerprint;
- computer readable program code configured to, in response to determining that the container is not in compliance with the fingerprint, compare the container data being transferred and to the allowed list;
- computer readable program code configured to allow a first portion of the container data to be accessed by the user based on a determination that the first portion of the container data is included in the allowed list;
- computer readable program code configured to determine that a remaining portion of the container data is not included in the allowed list, wherein the remaining portion of the container data excludes the first portion of the container data, includes a second portion of the container data, and includes a third portion of the container data;
- computer readable program code configured to search content of the remaining portion of the container data to determine whether or not the remaining portion of the container data contains confidential or proprietary information;
- and
- computer readable program code configured to allow the second portion of the container data to be accessed by the user based on a determination that the second portion of the container data does not contain the confidential or proprietary information;
- and
- computer readable program code configured to block the third portion of the container data from being accessed by the user based on a determination that the third portion of the container data does contain the confidential or proprietary information.
12 more elements
A computer-implemented method for preventing data loss, the method comprising:
- receiving a request to create a container, wherein the container is a file system comprising access parameters that define one or more permitted actions and one or more permitted users for the container;
- determining a fingerprint of the container, the fingerprint being a record of a structure, a content, and communication channels of the container at a first point in time for comparison to the container at a later time, wherein the fingerprint is stored locally within the container;
- generating the container with the access parameters and the fingerprint;
- receiving task protocols and registration requests associated with the container;
- determining, by a computing device processor, an allowed list for the container based on the task protocols and the registration requests, the allowed list comprising registered data and codes needed to execute a task;
- determining that a user is attempting to access container data of the container, wherein the user is one of the one or more permitted users;
- in response to determining that the user is attempting to access the container data, determining that the container is not in compliance with the fingerprint;
- in response to determining that the container is not in compliance with the fingerprint, comparing, by a computing device processor, the container data to the allowed list;
- allowing, by a computing device processor, a first portion of the container data to be accessed by the user based on a determination that the first portion of the container data is included in the allowed list;
- determining, by a computing device processor, that a remaining portion of the container data is not included in the allowed list, wherein the remaining portion of the container data excludes the first portion of the container data, includes a second portion of the container data, and includes a third portion of the container data;
- searching, by a computing device processor, content of the remaining portion of the container data to determine whether or not the remaining portion of the container data contains confidential or proprietary information;
- allowing, by a computing device processor, the second portion of the container data to be accessed by the user based on a determination that the second portion of the container data does not contain the confidential or proprietary information;
- and
- blocking, by a computing device processor, the third portion of the container data from being accessed by the user based on a determination that the third portion of the container data does contain the confidential or proprietary information.
11 more elements
Dependencies are inferred from the claim text.