DATA REDACTION SYSTEM

• US 20150089663A1
• Filed: 09/24/2013
• Published: 03/26/2015
• Est. Priority Date: 09/24/2013
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Gile, Michael Scott
• Granted Patent: US 9,934,390 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

An electronic data storage and retrieval system comprising one or more first computing devices and a second computing device. The one or more first computing devices comprise a plurality of first data files, wherein, each of the plurality of first data files is associated with a first authentication level. The second computing device is associated with a second authentication level. Upon receiving a request to provide at least one of the plurality of first data files from the second computing device, the one or more first computing devices compares the first authentication level with the second authentication level, and creates a copy of the at least one of the plurality of first data files. The copy of the at least one of the plurality of first data files comprises a portion of the at least one of the plurality of first data files.

Claims

1. A method of providing one or more electronic data files comprising,

storing a first copy of the one or more electronic data files on a first computing device, wherein a first authentication level is associated with the first copy of the one or more electronic data files;

receiving at the first computing device a request for the first copy of the one or more electronic data files, wherein, the request for the first copy of the one or more electronic data files is received from a second computing device;

determining a second authentication level associated with the request;

using the first authentication level and second authentication level to create a second copy of the one or more electronic data files, wherein, the second copy of the one or more electronic data files comprises a portion of the first copy of the one or more electronic data files; and

sending the second copy of the one or more electronic data files to the second computing device.

2. The method of claim 1 wherein,

the second computing device comprises a remote mobile computing device;

and

the request for the first copy of the one or more electronic data files comprises an http request from one of,

a mobile computing device browser, and

a mobile computing device application.

3. The method of claim 1 wherein,

the first authentication level is referenced in an authentication packet received by the first computing device;

the second authentication level is referenced in an authentication token received by the first computing device; and

using the first authentication level and second authentication level to create a second copy of the one or more electronic data files comprises,

comparing information in the authentication packet to information in the authentication token, and

determining which of one or more redaction modules to implement.

4. The method of claim 3 wherein, the one or more redaction modules comprise at least one of,

a text string redaction module;

an image matching redaction module; and

a binary code redaction module.

5. The method of claim 4 wherein, the text string redaction module comprises redacting at least one of,

one or more keywords;

one or more expressions; and

one or more contact information.

6. The method of claim 4 wherein, using the first authentication level and second authentication level to create a second copy of the one or more electronic data files comprises aggregating information received form the text string redaction module, image matching redaction module, and binary code redaction module to create the second copy of the data file.

7. The method of claim 4 wherein, the image matching redaction module comprises modifying a color of one or more image pixels.

8. An electronic data storage and retrieval system comprising,

one or more first computing devices comprising a plurality of first data files, wherein, each of the plurality of first data files is associated with a first authentication level;

and

a second computing device associated with a second authentication level, wherein,

upon receiving a request to provide at least one of the plurality of first data files, the one or more first computing devices,

compares the first authentication level with the second authentication level,

creates a copy of the at least one of the plurality of first data files, and

sends the copy of the at least one of the plurality of first data files to the second computing device,

the request is received from the second computing device, and

the copy of the at least one of the plurality of first data files comprises a portion of the at least one of the plurality of first data files.

9. The electronic data storage and retrieval system of claim 8 wherein, the one or more first computing devices comprises,

a reverse proxy computing device adapted to receive the request;

an application computing device adapted to receive the request from the reverse proxy computing device;

a data removal computing device adapted to receive,

the at least one of the plurality of first data files from the application computing device, and

an authentication token from the reverse proxy computing device, wherein, the authentication token is associated with the second authentication level; and

an authentication computing device adapted to provide the data removal computing device with an authentication packet, wherein the authentication packet,

is associated with the first authentication level, and

comprises one or more content access settings associated with the at least one of the plurality of first data files;

wherein,

the data removal computing device is adapted to,

create the copy of the at least one of the plurality of first data files, and

provide the copy of the at least one of the plurality of first data files to the reverse proxy; and

the reverse proxy is adapted to provide the copy of the at least one of the plurality of first data files to the second computing device.

10. The electronic data storage and retrieval system of claim 9 further comprising using one or more redaction modules to create the copy of the at least one of the plurality of first data files.

11. The electronic data storage and retrieval system of claim 9 further comprising, a cache computing device adapted to at least temporarily store the copy of the at least one of the plurality of first data files.

12. The electronic data storage and retrieval system of claim 11 wherein, at least one of the reverse proxy computing device, application computing device, authentication computing device and cache computing device comprise a single device.

13. The electronic data storage and retrieval system of claim 9 wherein, the authentication token comprises one or more content access settings associated with the second computing device.

14. A non-transitory, tangible computer readable storage medium, encoded with processor readable instructions to perform a method of providing a data file to a remote device comprising,

receiving a request for the data file, wherein,

the request is received from the remote device, and

the data file comprises a first data file;

identifying,

for the first data file,

a file type, and

a first authentication level, and

a second authentication level associated with the request for the data file;

implementing one or more redaction modules, wherein each of the one or more redaction modules is adapted to,

remove a portion of the first data file, and

create a redaction module data file;

aggregating each of the redaction module data files into a single data file, wherein the single data file comprises a second data file; and

providing the second data file to the remote device.

15. The non-transitory, tangible computer readable storage medium of claim 14 wherein,

the file type comprises a media file;

the media file comprises at least one image;

at least one of the one or more redaction modules comprises image recognition software; and

the portion of the first data file removed comprises at least a portion of an image.

16. The non-transitory, tangible computer readable storage medium of claim 14 wherein,

the request for the data file comprises an http request;

and

the file type is identified through one or more http request headers.

17. The non-transitory, tangible computer readable storage medium of claim 14 further comprising, identifying a first data file content through mime-type identification.

18. The non-transitory, tangible computer readable storage medium of claim 14 wherein,

the portion of the first data file comprises content type;

and further comprising,

assigning a priority to each of the one or more redaction modules, wherein, the priority is based at least in part on the first data file content.

19. The non-transitory, tangible computer readable storage medium of claim 18 wherein the content type comprises one of text, image, and audio.

20. The non-transitory, tangible computer readable storage medium of claim 14 wherein, the one or more redaction modules are further adapted to determine at least a portion of a content type of the first data file.