METHOD FOR MANAGING HIERARCHICAL STORAGE DURING DETECTION OF SENSITIVE INFORMATION, COMPUTER READABLE STORAGE MEDIA AND SYSTEM UTILIZING SAME

• US 20120226858A1
• Filed: 03/01/2011
• Published: 09/06/2012
• Est. Priority Date: 03/01/2011
• Status: Active Grant

• Current Assignee: Xbridge Systems, Inc.
• Original Assignee: Xbridge Systems, Inc.
• Inventors: Fichaud, Pierre R., Casey, Martin D., Bolton, Benjamin R., Sagawa, James M., Steitz, Jack E.
• Granted Patent: US 8,769,200 B2
• Time in Patent Office: Days
• US Class Current: 711/117
• CPC Class Codes: G06F 12/02 Addressing or allocation; Relocation program address sequencing G06F9/00; arrangements for selecting an address in a digital store G11C8/00
• CPC Class Codes: G06F 12/08 in hierarchically structured memory systems, e.g. virtual memory systems
• CPC Class Codes: G06F 16/185 Hierarchical storage management [HSM] systems, e.g. file migration or policies thereof details of archiving G06F16/11

Abstract

Examples of methods, systems, and computer-readable media for detection of sensitive information on hierarchical storage management mainframes are described using multiple techniques. The techniques may include determining if data has been migrated from a first storage medium to a second storage medium, recalling the migrated data from a second storage medium to the first storage medium, reading the migrated data, then remigrating the data to the second storage medium.

Claims

1. A method for analyzing a mainframe system having a hierarchical storage unit for sensitive information, comprising:

receiving a request to analyze a first data set of records from the mainframe system;

determining that the first data set of records has been migrated by the hierarchical storage unit from a first source to a second source by operation of the mainframe system;

recalling the first data set of records from the second source to the first source;

reading the first data set of records from the first source;

re-migrating the first data set of records to the second source;

inferring structure in at least one of a plurality of records of the first data set to define fields in the at least one of the plurality of records; and

analyzing the fields for sensitive information.

2. The method of claim 1, further comprising receiving a request to analyze a second data set of records, wherein the second data set of records is managed by the hierarchical storage unit;

determining the second data set of records has not been migrated by the hierarchical storage unit; and

reading the second data set of records without modifying a last access date associated with the second data set of records.

3. The method of claim 1, wherein the first source performs faster than the second source.

4. The method of claim 1, wherein inferring structure in at least one of a plurality of records to define fields in the at least one of the plurality of records includes treating at least one record as a single field having a uniform structure.

5. The method of claim 1, wherein inferring structure in the at least one of a plurality of records to define fields in the at least one of the plurality of records includes scanning at least one of the plurality of records for fields containing packed decimal indicators;

storing locations and lengths of the fields containing packed decimal indicators in a map; and

evaluating the map to identify a viable sensitive information field.

6. The method of claim 1, wherein inferring structure in at least one of a plurality of records to define fields in the at least one of the plurality of records includes for at least one record applying a pre-defined field structure layout to the at least one record.

7. The method of claim 1, further comprising:

receiving a request to analyze a second set of data records;

determining the second data set of records has been migrated from the second source a third source;

recalling the second data set of records from the third source to the first source;

reading the second data set of records from the first source;

re-migrating the first data set of records to the source having the third performance characteristic.

8. One or more computer readable storage media encoded with instructions executable by one or more processing units of a computing system for analyzing a mainframe system having a hierarchical storage unit for sensitive information, the instructions comprising instructions for receiving a request to analyze a first data set of records from the mainframe system;

determining that the first data set of records has been migrated from a first source to a second source by operation of the mainframe system;

recalling the first data set of records from the second source to the first source;

reading the first data set of records from the first source;

re-migrating the first data set of records to the second source;

inferring structure in at least one of a plurality of records of the first data set to define fields in the at least one of the plurality of records; and

analyzing the fields for sensitive information.

9. The storage media of claim 8, wherein the instructions further comprise instructions for receiving a request to analyze a second set of records, wherein the second data set of records is managed by the hierarchical storage unit;

determining the second data set of records has not been migrated by the hierarchical storage unit; and

reading the second data set of records without modifying a last access date associated with the second data set of records.

10. The storage media of claim 8, wherein the first source performs faster than the second source.

11. The storage media of claim 8, wherein the instructions for inferring structure in at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for treating at least one record as a single field having a uniform structure.

12. The storage media of claim 8, wherein the instructions for inferring structure in the at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for scanning at least one of the plurality of records for fields containing packed decimal indicators;

storing locations and lengths of the fields containing packed decimal indicators in a map; and

evaluating the map to identify a viable sensitive information field.

13. The storage media of claim 8, wherein the instructions for inferring structure in the at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for applying a pre-defined field structure layout to at least one record.

14. The storage media of claim 8, wherein the instructions further comprise instructions for receiving a request to analyze a second set of data records;

determining the second data set of records has been migrated from the second source a third source;

recalling the second data set of records from the third source to the first source;

reading the second data set of records from the first source;

re-migrating the first data set of records to the source having the third performance characteristic.

15. A system for analyzing a mainframe system having a hierarchical storage unit for sensitive information, comprising at least one processing unit coupled to a memory, wherein the memory is encoded with computer executable instructions that, when executed, cause the at least one processing unit to receive a request to analyze a first data set of records from the mainframe system ;

determine that the first data set of records has been migrated by the hierarchical storage unit from a first source to a second source by operation of the mainframe system;

recall the first data set of records from the second source to the first source;

read the first data set of records from the first source;

re-migrate the first data set of records to the second source;

infer structure in at least one of a plurality of records of the first data set to define fields in the at least one of the plurality of records; and

analyze the fields for sensitive information.

16. The system of claim 15, wherein the computer executable instructions further cause the at least one processing unit to receive a request to analyze a second data set of records, wherein the second data set of records is managed by the hierarchical storage unit;

determine the second data set of records has not been migrated by the hierarchical storage unit; and

read the second data set of records without modifying a last access date associated with the second data set of records.

17. The system of claim 15, wherein the instructions for inferring structure in at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for treating at least one record as a single field having a uniform structure.

18. The system of claim 15, wherein the instructions for inferring structure in the at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for scanning at least one of the plurality of records for fields containing packed decimal indicators;

storing locations and lengths of the fields containing packed decimal indicators in a map; and

evaluating the map to identify a viable sensitive information field.

19. The system of claim 15, wherein the instructions for inferring structure in the at least one of a plurality of records to define fields in the at least one of the plurality of records include instructions for applying a pre-defined field structure layout to at least one record.

20. The system of claim 15, wherein the instructions further comprise instructions for receiving a request to analyze a second set of data records;

determining the second data set of records has been migrated from the second source a third source;

recalling the second data set of records from the third source to the first source;

reading the second data set of records from the first source;

re-migrating the first data set of records to the source having the third performance characteristic.