ELECTRONIC DISCOVERY SYSTEM

• US 20130091136A1
• Filed: 11/30/2012
• Published: 04/11/2013
• Est. Priority Date: 03/27/2009
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Richards, Phillip L., Hobart, Eric B., Andersen, David M., Miller, Emerson D., Mayer, Michael J., Whalen, John N., Toomey, Brian L., Stellhorn, David W.
• Granted Patent: US 8,868,561 B2
• Time in Patent Office: Days
• US Class Current: 707/737
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06F 16/25 Integrating or interfacing systems involving database management systems
• CPC Class Codes: G06F 16/285 Clustering or classification
• CPC Class Codes: G06F 16/35 Clustering; Classification
• CPC Class Codes: G06F 16/355 Class or cluster creation or modification
• CPC Class Codes: G06F 16/58 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery and custodian management. Embodiments herein disclosed provide for an enterprise wide e-discovery system that provides for data to be identified, located, retrieved, preserved, searched, reviewed and produced in an efficient and cost-effective manner across the entire enterprise system. In addition, by structuring management of e-discovery based on case/matter, custodian and data and providing for linkage between the same, further efficiencies are realized in terms of identifying, locating and retrieving data and leveraging results of previous e-discoveries with current requests.

Claims

1. A method for conducting electronic discovery within an enterprise environment, comprising:

generating, via a computer processor, an electronic discovery case, wherein the electronic discovery case is a matter in which electronic data is sought, located, collected and searched for a purpose of using the electronic data as evidence in one of a legal proceeding, an audit, a regulatory investigation or a forensic investigation;

linking, via a computer processor, a custodian profile of a custodian to the electronic discovery case, wherein linking is configured to associate custodian data stored in the custodian profile with case data stored an electronic discovery case-specific file and wherein the custodian profile includes information relating to storage locations in the network associated with the custodian; and

in response to linking the custodian profile to the electronic discovery case, automatically collecting, via a computer network, electronic data associated with the custodian by accessing at least one of the storage locations.

2. The method of claim 1, wherein generating the electronic discovery case further comprises storing, in computer memory, the electronic discovery case in a first network location and linking the custodian profile further comprises linking the custodian profile of the custodian, which is stored in a second network location, to the electronic discovery case.

3. The method of claim 1, further comprising storing, in computer memory, a coded reference to the collected electronic data in an electronic discovery case-specific file.

4. The method of claim 1, wherein collecting electronic data further comprises implementing, via the computer network, a local collector to copy electronic data residing on a networked computing device to a targeted networked computing device associated with the custodian.

5. The method of claim 4, wherein linking the custodian profile of the custodian further comprises linking, via a computer processor, the custodian profile, which stores an Internet Protocol (IP) address of the targeted network computing device computing, to the electronic discovery case and wherein collecting electronic data further comprises accessing the IP address in the custodian profile to collect the electronic data residing on the targeted networked computing device.

6. The method of claim 1, wherein collecting electronic data further comprises accessing a network storage area associated with the custodian and copying electronic files residing on the network storage area.

7. The method of claim 1, wherein collecting electronic data further comprises accessing an email exchange server associated with the custodian and copying electronic communication residing on the email exchange server.

8. The method of claim 1, wherein collecting electronic data further comprises copying electronic files and storing the copies of the electronic files in a network storage area in association with a barcode.

9. The method of claim 1, further comprising:

generating, via a computer processor, one or more search terms to apply to the electronic data; and

storing, in computer memory, the search terms in the electronic discovery case-specific file.

10. The method of claim 1, further comprising:

generating, via a computer processor, a preservation notice; and

communicating, via a computer network, the preservation notice to the custodian.

11. The method of claim 10, further comprising generating, via a computer processor, a reminder notice related to preservation of data and communicating, via computer network, the reminder notice to the custodian.

12. The method of claim 11, further comprising:

monitoring, via a computing network, a status of the custodian;

determining, via a computer processor, a status change for the custodian; and

changing, via a computer processor, in the custodian profile a collection status for the custodian based on the status change.

13. A computer program product for conducting electronic discovery in an enterprise environment, the computer program product comprising a non-transitory computer-readable medium having computer-readable program instructions stored therein, wherein said computer-readable program instructions comprise:

first instructions configured for generating an electronic discovery case, wherein the electronic discovery case is a matter in which electronic data is sought, located, collected and searched for a purpose of using the electronic data as evidence in one of a legal proceeding, an audit, a regulatory investigation or a forensic investigation;

second instructions configured for linking a custodian profile of a custodian to the electronic discovery case, wherein linking is configured to associate custodian data stored in the custodian profile with case data stored an electronic discovery case-specific file and wherein the custodian profile includes information relating to storage locations in the network associated with the custodian; and

third instructions configured for in response to linking the custodian profile to the electronic discovery case, automatically collecting, via a computer network, electronic data associated with the custodian by accessing at least one of the storage locations.

14. The computer program product of claim 13, further comprising fourth instructions configured for storing in the electronic discovery case a coded reference to the collected electronic files.

15. The computer program product of claim 13, wherein the third instructions are further configured to access a network storage area associated with the custodian and an email exchange server associated the custodian and copy electronic files residing on the network storage area and electronic communication residing on the email exchange server.

16. The computer program product of claim 13, further comprising fourth instructions configured for generating one or more search terms to apply to the electronic data and sixth instructions configured for storing the search terms in the electronic discovery case-specific file.

17. The computer program product of claim 13, further comprising fourth instructions configured for monitoring, via the computing network, a status of the custodian, fifth instructions configured for determining a status change for the custodian and sixth instructions for changing in the custodian profile a collection status for the custodian based on the status change.