Proprietary information identification, management and protection

• US 20030135386A1
• Filed: 12/12/2002
• Published: 07/17/2003
• Est. Priority Date: 12/12/2001
• Status: Active Grant

• Current Assignee: Infoprotection.com
• Original Assignee: Infoprotection.com
• Inventors: Fine, Naomi
• Granted Patent: US 7,281,020 B2
• Time in Patent Office: Days
• US Class Current: 705/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

Computerized methods and systems are presented for facilitating identification, management and/or protection of proprietary information. Data can be received that is descriptive of proprietary information, entities involved in creating, conveying, receiving or accessing the proprietary information as well as any information that will be created, conveyed, received or accessed. The system receives data and generates suggested actions and artifacts to aid in the identification, management and/or protection of proprietary information that may result from the circumstances described by the data received. Embodiments can also include receiving data descriptive of a process and determining potential proprietary information that may be involved. Relevant suggested actions and artifacts can also be generated.

Claims

1. A computer-implemented method for facilitating the identification, management or protection of proprietary data, the method comprising:

receiving data descriptive of proprietary information;

receiving data descriptive of one or more entities involved in at least one of;

creating, conveying, receiving or accessing the proprietary information;

generating one or more suggested actions based upon the data received and relating to the protection of the proprietary information; and

generating one or more artifacts based upon the data received.

2. The method claim 1 additionally comprising the step of receiving one or more rules that are referenced to generate the one or more suggested actions and one more artifacts.

3. The method of claim 1 additionally comprising the step of receiving data descriptive of a purpose and a setting under which the proprietary information will be created, conveyed, received or accessed.

4. The method of claim 1 additionally comprising the step of receiving data descriptive of a time period during which the information will be created, conveyed, received or accessed;

5. The method of claim 1 wherein the one or more artifacts generated comprises at least one of:

a classification label;

a confidentiality notice;

an instruction sheet for handling the proprietary information;

an agreement with language stating an intent to bind one or more entities regarding disclosure of the proprietary information;

a corporate policy related to the protection of the information;

a tracking form to record who will access the information;

a list of information considered proprietary;

a training;

a document to assess the information;

a meeting notice a letter on behalf of a first employer to a departing employee;

a letter on behalf of a first employer to subsequent employer of a departed employee;

a letter on behalf of an employer to a job applicant;

a letter requesting return of confidential information;

a certification of return of confidential information;

a certification of destruction of confidential information; and

a letter subsequent to verbal disclosure of confidential information.

6. The method of claim 1 wherein the suggested action comprises executing a non-disclosure agreement with language stating an intent to bind one or more entities regarding disclosure of the proprietary information.

7. The method of claim 1 wherein the suggested action comprises at least one of:

preparing an invention disclosure form;

conducting a patentability search and filing a patent application.

8. The method of claim 1 wherein the suggested action comprises the steps of:

determining a time period during which a classification will be associated with the proprietary information; and

associating an indicator of the classification with the proprietary information during the time period.

9. The method of claim 1 wherein the suggested action comprises restricting access to the proprietary information.

10. The method of claim 1 wherein the suggested action comprises storing an indication of which user accesses the proprietary information.

11. The method of claim 1 wherein the suggested action comprises conveying the proprietary information subject to an existing non-disclosure agreement with language stating an intent to bind one or more entities regarding disclosure of the proprietary information.

12. The method of claim 1 wherein the suggested action comprises tracking one or more entities to whom the proprietary information is revealed and from whom it is received.

13. The method of claim 1 wherein the suggested action comprises the development of an updated inventory of proprietary information.

14. A computer-implemented method for facilitating protection of proprietary data, the method comprising:

receiving data descriptive of information;

based upon the data descriptive of the information, presenting at least one of;

a description of one or more classifications that can be associated with the information;

examples of information associated with one or more classifications; and

a purpose for one or more classifications;

receiving an indication of a classification to be associated with the information, wherein the classification comprises an indication of a level of confidentiality; and

generating one or more suggested actions related to the information based upon the data descriptive of information and the indication of a classification to be associated with the information.

15. The method of claim 14 additionally comprising the steps of:

receiving data defining a set of persons authorized to access the information;

implementing one or more suggested actions facilitating at least one of;

identifying;

managing; and

protecting;

the information, based upon at least one of;

the indication of the classification to be associated with the information;

a means utilized to access the information; and

a user profile containing data descriptive of at least one of the persons authorized to access the information.

16. A computer-implemented method for facilitating identification, management or protection of proprietary data, the method comprising:

receiving data descriptive of a process;

based upon the data descriptive of the business process, presenting one or more suggested action items associated with at least one of;

identifying;

managing; and

protecting;

the proprietary information created, revealed, received or accessed as a result of the business process; and

generating one or more artifacts related to the protection of the proprietary information based upon the data descriptive of the process and a potential for creating, revealing, or accessing proprietary information as a result of the process.

17. A computerized system for facilitating identification, management or protection of proprietary data, the system comprising:

a computer server accessible with a network access device via a communications network; and

executable software stored on the server and executable on demand, the software operative with the server to cause the system to;

receive data descriptive of proprietary information;

receive data descriptive of one or more entities involved in at least one of;

creating, convey, receiving or accessing the proprietary information;

generate one or more suggested actions based upon the data received and relating to the protection of the proprietary information; and

generate one or more artifacts based upon the data received.

18. Computer executable program code residing on a computer-readable medium, the program code comprising instructions for causing the computer to:

receive data descriptive of proprietary information from the network access device;

receive data descriptive of one or more entities involved in conveying the proprietary information;

generating one or more suggested actions based upon the data received and relating to the protection of the proprietary information; and

generate one or more artifacts based upon the data received.

19. A computer data signal embodied in a digital data stream comprising data relating to managing risk associated with maintaining information as proprietary, wherein the computer data signal is generated by a method comprising the steps of:

receiving data descriptive of proprietary information;

receiving data descriptive of one or more entities involved in at least one of;

creating, conveying, receiving or accessing the proprietary information;

receiving data descriptive of a time period during which the information will be created, conveyed, received or accessed;

generating one or more suggested actions based upon the data received and relating to the protection of the proprietary information; and

generating one or more artifacts based upon the data received.

20. A method of interacting with a network access device so as to facilitate identification, management or protection of proprietary data, the method comprising the steps of:

initiating communication with a server via a communications network;

inputting data descriptive of proprietary information via a graphical user interface;

inputting data descriptive of one or more entities involved in creating, conveying, receiving or accessing the proprietary information;

inputting data descriptive of a time period during which the information will be created, conveyed, received or accessed;

receiving data descriptive of one or more suggested actions generated based upon the data input and relating to the protection of the proprietary information; and

receiving one or more artifacts based upon the data received.

21. A computer-implemented method for facilitating protection of an invention, the method comprising:

receiving an indication that the invention comprises at least one novel element;

receiving an indication that the invention comprises at least one of a product, a process, an apparatus and a composition;

receiving an indication of whether or not the invention comprises a physical manipulation;

receiving an indication of a date of any public disclosures;

receiving an indication of a date of any offers for sale;

generating an indication of availability of patent protection; and

generating an invention disclosure input medium.

22. A computer-implemented method for facilitating identification, management or protection of proprietary data, the method comprising:

receiving data descriptive of one or more customizations to data in a data structure wherein the data relates to the identification, management or protection of proprietary data; and

presenting to a user an artifact modified according to the data descriptive of the one or more customizations.

23. A graphical user interface displayable on a network access device, the interface comprising:

a first area for displaying data descriptive of a business process;

a second area for displaying one or more suggested actions for facilitating the identification, management or protection of proprietary data associated with the business process; and

a third area for displaying one or more artifacts for facilitating the identification, management or protection of proprietary data associated with the business process.