METHOD TO PROTECT SENSITIVE DATA FIELDS STORED IN ELECTRONIC DOCUMENTS

• US 20090135444A1
• Filed: 11/26/2007
• Published: 05/28/2009
• Est. Priority Date: 11/26/2007
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kumhyr, David Bruce, Girouard, Janice Marie, Best, Steven Francis, Eggers, Robert James JR.
• Application Number:
  US11/944,674
• Publication Number:
  US 20090135444A1
• Time in Patent Office: Days
• US Class Current: 358/1.150
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A computer implemented method, a computer program product, and a data processing system control the presentation of sensitive data within a document. A request to open a document is received. Responsive to receiving the request to open the document, sensitive data within the document is identified. Responsive to identifying sensitive data within the document, the occurrence of an expiration date for the sensitive data is identified. Responsive to identifying the occurrence of the expiration date for the sensitive data, the sensitive data is redacted to create an edited document. The edited document is then displayed to the user.

Claims

1. A computer implemented method for controlling the presentation of sensitive data within a document, the method comprising:

receiving a request to open a document;

responsive to receiving the request to open the document, determining whether sensitive data is present within the document;

responsive to a determination that the sensitive data is present within the document, determining whether an expiration date has occurred for the sensitive data;

responsive to identifying an occurrence of the expiration date for the sensitive data, redacting the sensitive data from the document to create an edited document; and

presenting the edited document after the sensitive data has been redacted from the document.

2. The computer implemented method of claim 1, wherein the step of identifying sensitive data within the document comprises:

determining whether a flag is associated with the document to indicate whether the document contains sensitive data.

3. The computer implemented method of claim 1, wherein the step of determining whether sensitive data is present within the document comprises:

parsing the document for at least one of a tag, a pointer, a flag, and a bit associated with text of the document to identify whether the document contains sensitive data

4. The computer implemented method of claim 1, wherein the expiration date is selected from one of a custom expiration date and a default expiration date.

5. The computer implemented method of claim 1, wherein the expiration date is one of a set calendar date, a set calendar time, a lapse of a set time duration, or the occurrence of an event.

6. The computer implemented method of claim 5, wherein the occurrence of the event is a predefined number of viewings of the document.

7. The computer implemented method of claim 1, wherein the step of redacting the sensitive data from the document to create an edited document is one of by blacking out the sensitive data, obscuring the sensitive data, blurring out the sensitive data, and replacing the sensitive data with non-sensitive content.

8. A computer program product comprising:

a computer readable medium having computer usable program code for transferring data between virtual partitions, the computer program product comprising;

computer usable program code for receiving a request to open a document;

computer usable program code, responsive to receiving the request to open the document, for determining whether sensitive data is present within the document;

computer usable program code, responsive to a determination that the sensitive data is present within the document, for determining whether an expiration date has occurred for the sensitive data;

computer usable program code, responsive to identifying an occurrence of the expiration date for the sensitive data, for redacting the sensitive data from the document to create an edited document; and

computer usable program code for presenting the edited document after the sensitive data has been redacted from the document.

9. The computer program product of claim 8, wherein the computer usable program code for identifying sensitive data within the document comprises:

computer usable program code for determining whether a flag is associated with the document to indicate whether the document contains sensitive data.

10. The computer program product of claim 8, wherein the computer usable program code for determining whether sensitive data is present within the document comprises:

computer usable program code for parsing the document for at least one of a tag, a pointer, a flag, and a bit associated with text of the document to identify whether the document contains sensitive data.

11. The computer program product of claim 8, wherein the expiration date is selected from one of a custom expiration date, and a default expiration date.

12. The computer program product of claim 8, wherein the expiration date is one of a set calendar date, a set calendar time, a lapse of a set time duration, or the occurrence of an event.

13. The computer program product of claim 12, wherein the occurrence of the event is a predefined number of viewings of the document.

14. The computer program product of claim 8, wherein computer usable program code for redacting the sensitive data from the document to create an edited document is one of computer usable program code for blacking out the sensitive data, computer usable program code for obscuring the sensitive data, computer usable program code for blurring out the sensitive data, and computer usable program code for replacing the sensitive data with non-sensitive content.

15. A data processing system comprising:

a bus;

a communications unit connected to the bus;

a storage device connected to the bus, wherein the storage device includes computer usable program code; and

a processor unit connected to the bus, wherein the processor unit executes the computer usable program code to receive a request to open a document, responsive to receiving the request to open the document, determine whether sensitive data is present within the document, responsive to a determination that the sensitive data is present within the document, determine whether an expiration date has occurred for the sensitive data, responsive to identifying an occurrence of the expiration date for the sensitive data, redact the sensitive data from the document to create an edited document, and present the edited document after the sensitive data has been redacted from the document.

16. The data processing system of claim 15, wherein the computer usable program code to identify sensitive data within the document comprises:

computer usable program code to determine whether a flag is associated with the document to indicate whether the document contains sensitive data.

17. The data processing system of claim 15, wherein the computer usable program code to determining whether sensitive data is present within the document comprises:

computer usable program code to parse the document for at least one of a tag, a pointer, a flag, and a bit associated with text of the document to identify whether the document contains sensitive data.

18. The data processing system of claim 15, wherein the expiration date is selected from one of a custom expiration date, and a default expiration date.

19. The data processing system of claim 15, wherein the expiration date is one of a set calendar date, a set calendar time, an elapse of a set time duration, or the occurrence of an event.

20. An apparatus comprising:

a data marking process for marking data within a document as sensitive data;

a data redaction process for redacting data from the document upon the occurrence of an expiration date associated with the sensitive data; and

a user interface for identifying a user indication of the sensitive data and identifying a user indication of the expiration date, wherein the data marking process, the data redaction process and the user interface are software components executing on a processor.