Information infrastructure management data processing tools for processing data flow with distribution controls

• US 10,250,639 B2
• Filed: 01/15/2015
• Issued: 04/02/2019
• Est. Priority Date: 01/05/2007
• Status: Active Grant

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Redlich, Ron M., Nemzow, Martin A.
• Primary Examiner(s): Rahman, S M A
• Application Number:
  US14/597,345
• Publication Number:
  US 20150199405A1
• Time in Patent Office: 1,538 Days
• Field of Search: 709223
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 16/2465 Query processing support for facilitating data mining operations in structured databases
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Method of processing and organizing (sometimes sanitizing) data throughput in an information infrastructure of a distributed computing system with configurable filters. Data stores are created with the data throughput. Filters operate on data to locate, extract, separate and store sensitive content (e.g., trade secrets) or select content (e.g., critical content) in designated, distributed data stores. Configurable filters expand sensitive/select data throughput, contract throughput, inferencing throughput, and hierarchical/orthogonal classifier filters reorganize the sensitive/select data, all to segment and store sensitive/select data in designated stores. Data output enables (a) sanitation; (b) data storage organization; (c) classification; (d) application of data processing (copying, distribution, archiving, etc.).

Claims

1. A method of processing data throughput in an information infrastructure in a distributed computing system with respective ones of a plurality of filters, comprising:

identifying sensitive content or select content in said data throughput with one or more of said plurality of filters, said sensitive content represented by one or more sensitive words, characters, images, data elements or data objects therein grouped into a plurality of sensitivity levels, said select content represented by one or more predetermined words, characters, images, data elements or data objects;

extracting and storing said sensitive content from said data throughput in respective data stores based upon said plurality of sensitivity levels;

classifying both the extracted sensitive content and said select content with a taxonomic category filter and generating classification tags therefor;

associating respective classification tags to the classified extracted sensitive content and said select content;

using the classification tags for data processing the stored sensitive content and said select content with;

(a) a data mining process;

(b) a copy process;

(c) a transfer process to other predetermined storage stores;

(d) a supplemental data search process; and

(e) a presentation process responsive to a data inquiry;

using the classification tags in a structured data format for the transfer process and data storage; and

,

repeating the extraction and storage on further data throughput.

2. The method of processing data throughput in an information infrastructure as claimed in claim 1

wherein said presentation process responsive to said data inquiry or is implemented as (i) a service oriented architecture application or (ii) a request for a continuous data workflow process;

and

wherein the stored sensitive content and select content is released, with or without encryption, from multiple data stores based upon a data release request or a request for a continuous data workflow process.

3. The method of processing data throughput in an information infrastructure as claimed in claim 1 wherein

said data processing on the stored sensitive content and said select content is subject to (i) an access permission control or (ii) a process permission control;

in the event said access control or said process control denies access or process, said data processing on said stored sensitive content and said select content includes (x) a data mining process on other data stores; and

, (y) a further supplemental data search process on said other data stores; and

,

repeating the extraction and storage on data generated by said data mining process of said other data stores and data generated by said supplemental data search process on said other data stores.

4. The method of processing data throughput in an information infrastructure as claimed in claim 1 wherein said presentation process responsive to said data inquiry includes, prior to a release of the stored sensitive content and the stored select content, controls the release of said stored sensitive content and stored select content based upon one or more of the following control release parameters:

(i) verification of inquiring party;

(ii) historic data relative to an inquiring party;

(iii) verification of chain of title of said stored sensitive content or select content to be released;

(iv) financial consideration by an inquiring party;

(v) data exchange by an inquiring party; and

, (vi) delivery of said stored sensitive content or select content to be released in at least two data streams to a respective number of computer screens.

5. The method of processing data throughput in an information infrastructure as claimed in claim 1 including, as part of the extracting and storing,

obtaining remainder data elements from said data throughput and, prior to storing said sensitive content and select content,

subjecting said remainder data elements to an inference process to verify that said sensitive content and select content cannot be inferenced therefrom;

and,

in the event said sensitive content or select content can be inferenced therefrom, extracting supplemental sensitive content and select content from said data throughput with a taxonomic filter prior to storing.

6. The method of processing data throughput in an information infrastructure as claimed in claim 1 wherein:

the associated respective tags are used as either labels in said structured data format or as placeholders in said structured data format.

7. The method of processing data throughput in an information infrastructure as claimed in claim 1 wherein

the associated respective tags are used to map said sensitive content or said select content in said data throughput by employing categorical labels from said taxonomic category filter along one axis of said map and representations of said sensitive content or said select content on another axis of said map.

8. The method of processing data throughput in an information infrastructure as claimed in claim 1 including:

sanitizing data by said supplemental data search process;

wherein non-extracted data from said sensitive content extraction creates sanitized data;

inferencing said sanitized data with one or more of a;

(i) a content filter, (ii) a contextual filter, or (iii) a taxonomic filter; and

obtaining an inferenced sanitized data result therefrom.

9. The method of processing data throughput in an information infrastructure as claimed in claim 8 including using (x) said content filter, (y) said contextual filter, and (z) said taxonomic filter;

and

wherein one or more of the filters defines financial data, data unique to a service level, health data, consumer data, customer data, competitor data, personnel data, intellectual property data or public company reporting data.

10. The method of processing data throughput in an information infrastructure as claimed in claim 8 including assessing risk by inferencing and generating a risk measurement.

11. The method of processing data throughput in an information infrastructure as claimed in claim 10 wherein the extraction and storage builds up layers of sensitive content or said select content in said respective data stores.

12. The method of processing data throughput in an information infrastructure as claimed in claim 1 wherein said stored sensitive content and said select content is released from multiple data stores.

13. The method of processing data throughput in an information infrastructure as claimed in claim 12 wherein said data inquiry is a request from a continuous data workflow process.

14. The method of processing data throughput in an information infrastructure as claimed in claim 13 wherein said release based upon said continuous data workflow process includes encryption.

15. The method of processing data throughput in an information infrastructure as claimed in claim 12 wherein said presentation process implements a service oriented architecture application.

16. A method of sanitizing data processed in a distributed computing system having sensitive content and select content, said sensitive content represented by one or more sensitive words, characters, images, data elements or data objects therein, said sensitive content having a plurality of sensitivity levels, each sensitivity level having an associated security clearance, said select content represented by one or more predetermined words, characters, images, data elements or data objects, said distributed computing system having a plurality of extract data stores for respective ones of said plurality of sensitivity levels and having a plurality of select content data stores, said plurality of extract data stores and said select content data stores operatively coupled over a communications network, the method of sanitizing data comprising:

extracting said sensitive content from a data input to obtain extracted sensitive data for a corresponding sensitivity level and remainder data;

storing said extracted sensitive data for said corresponding sensitivity level in a respective secure extract store in said distributed computer system;

extracting said select content from either said data input or said remainder data and storing extracted select content in said select content data stores;

wherein non-extracted data from said select content extraction and remainder data from said sensitive content extraction creates sanitized sensitive content data and select content data;

inferencing said sanitized sensitive content data and select content data with (a) a content filter, (b) a contextual filter, and (c) a taxonomic filter; and

obtaining an inferenced sensitive content data and an inferenced select content data therefrom.

17. The method of sanitizing data as claimed in claim 16 wherein said content filter, said contextual filter, and said taxonomic filter defines any of financial data, data unique to a service level, health data, consumer data, customer data, competitor data, personnel data, intellectual property data or public company reporting data.

18. The method of sanitizing data as claimed in claim 16 including assessing risk by inferencing and generating a risk measurement.