Information Infrastructure Management Tools With Extractor, Storage and Data Release Control Functions and Segmental Data Stores

• US 20150156206A1
• Filed: 01/15/2015
• Published: 06/04/2015
• Est. Priority Date: 01/05/2007
• Status: Active Application

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Redlich, Ron M., Nemzow, Martin A.
• Application Number:
  US14/597,323
• Publication Number:
  US 20150156206A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 16/2465 Query processing support for facilitating data mining operations in structured databases
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Method and system of organizing and processing data in a distributed computing system having designated, distributed data stores for sensitive content (e.g., trade secrets) or select content (e.g., critical content). Sensitive/select data is extracted via configurable filters and stored in the designated data stores, sometimes subject to security controls, with limiting distribution functions and controlled release of the sensitive/select data. Distribution is limited due to designated, configurable filters.

Claims

1. A method of organizing and processing data in a distributed computing system having security sensitive content and select content, said security sensitive content represented by one or more security sensitive words, characters, images, data elements or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, said select content represented by one or more predetermined words, characters, images, data elements or data objects, said distributed computing system having a plurality of extract data stores for respective ones of said plurality of security levels and having a plurality of select content data stores for respective ones of a plurality of enterprise designated filters, said plurality of extract data stores and said select content data stores operatively coupled over a communications network, the method of organizing and processing data comprising:

extracting said security sensitive content from a data input to obtain extracted security sensitive data for a corresponding security level and remainder data;

storing said extracted security sensitive data for said corresponding security level in a respective security sensitive extract store and storing said remainder data in said distributed computer system;

limiting distribution of said data input with respect to said distributed computing system based upon throughput from at least one of said enterprise designated filters; and

,

controlling release of corresponding extracted security sensitive data from said respective extract stores with said associated security clearances for corresponding security levels.

2. A method of organizing and processing data as claimed in claim 1 wherein limiting distribution of said data input includes at least one data process from the group of data processes including a copy process, a data extract process, a data archive process, a data destruction process, an inter-enterprise data distribution process, an intra-enterprise data distribution process, a denial data distribution process, and a limited data distribution process.

3. A method of organizing and processing data as claimed in claim 1 including fully or partially reconstructing all or part of said data input with said corresponding extracted data and remainder data after controlling release thereof.

4. A method of organizing and processing data as claimed in claim 1 wherein said enterprise designated filter is a categorical filter which includes content, contextual and taxonomic classification filter elements for an enterprise policy from the group of enterprise policies including level of service policy, customer privacy policy, supplier privacy policy, enterprise human resource privacy policy, financial data handling policy, public company reporting policy, health care regulation policy, technical innovation policy, competitive reporting policy and document or data retention policy.

5. A method of organizing and processing data as claimed in claim 1 including identifying and storing said select content from said data input, or a representation thereof, into said select content store with said corresponding enterprise designated filter, and imposing a classification taxonomy onto said stored select content or representation thereof.

6. A method of organizing and processing data as claimed in claim 5 wherein said data input has a source indicator and said select content, when stored in said select content data store, includes a corresponding representative source indicator and the method includes generating a tag or label responsive to said source indicator and said corresponding representative source indicator.

7. A method of organizing and processing data in a distributed computing system having security sensitive content and select content, said security sensitive content represented by one or more security sensitive words, characters, images, data elements or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, said select content represented by one or more predetermined words, characters, images, data elements or data objects, said distributed computing system being a client-server computer system with at least one server computer and having a plurality of extract data stores for respective ones of said plurality of security levels and having a plurality of select content data stores for respective ones of a plurality of enterprise designated filters, said plurality of extract data stores and said select content data stores operatively coupled to said server and to at least one client computer over a communications network, the method of organizing and processing data comprising:

extracting at said server computer said security sensitive content from a data input to obtain extracted security sensitive data for a corresponding security level and remainder data;

effecting the storage of said extracted security sensitive data for said corresponding security level in a respective security sensitive extract store and storing said remainder data in said distributed computer system;

limiting distribution of said data input via said server computer with respect to said distributed computing system based upon throughput from at least one of said enterprise designated filters; and

,

controlling release of corresponding extracted security sensitive data via said server computer from said respective extract stores with said associated security clearances for corresponding security levels.

8. A method of organizing and processing data as claimed in claim 7 wherein limiting distribution of said data input includes at least one data process from the group of data processes including a copy process, a data extract process, a data archive process, a data destruction process, an inter-enterprise data distribution process, an intra-enterprise data distribution process, a denial data distribution process, and a limited data distribution process.

9. A method of organizing and processing data as claimed in claim 7 including fully or partially reconstructing all or part of said data input via said server computer with said corresponding extracted data and remainder data after controlling release thereof.

10. A method of organizing and processing data as claimed in claim 7 wherein said enterprise designated filter is a categorical filter which includes content, contextual and taxonomic classification filter elements for an enterprise policy from the group of enterprise policies including level of service policy, customer privacy policy, supplier privacy policy, enterprise human resource privacy policy, financial data handling policy, public company reporting policy, health care regulation policy, technical innovation policy, competitive reporting policy and document or data retention policy.

11. A method of organizing and processing data as claimed in claim 7 including identifying and effecting the storage of said select content from said data input, or a representation thereof, into said select content store with said corresponding enterprise designated filter, and imposing a classification taxonomy onto said stored select content or representation thereof.

12. A method of organizing and processing data as claimed in claim 11 wherein said data input has a source indicator and said select content, when stored in said select content data store, includes a corresponding representative source indicator and the method includes generating a tag or label responsive to said source indicator and said corresponding representative source indicator.

13. A distributed computing system for organizing and processing data having security sensitive content and select content, said security sensitive content represented by one or more security sensitive words, characters, images, data elements or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, said select content represented by one or more predetermined words, characters, images, data elements or data objects, said distributed computing system operatively coupled to a communications network and comprising:

a plurality of extract data stores for respective ones of said plurality of security levels operatively coupled to said communications network;

a plurality of select content data stores for respective ones of a plurality of enterprise designated filters operatively coupled to said communications network;

means for extracting said security sensitive content from a data input to obtain extracted security sensitive data for a corresponding security level and remainder data;

means for storing said extracted security sensitive data for said corresponding security level in a respective security sensitive extract store and storing said remainder data in said distributed computer system;

means for limiting distribution of said data input with respect to said distributed computing system based upon throughput from at least one of said enterprise designated filters; and

,

means for controlling release of corresponding extracted security sensitive data from said respective extract stores with said associated security clearances for corresponding security levels.

14. A computer system for organizing and processing data as claimed in claim 13 wherein means for limiting distribution of said data input includes means for detecting at least one data process from the group of data processes including a copy process, a data extract process, a data archive process, a data destruction process, an inter-enterprise data distribution process, an intra-enterprise data distribution process, a denial data distribution process, and a limited data distribution process.

15. A computer system for organizing and processing data as claimed in claim 13 including means for fully or partially reconstructing all or part of said data input with said corresponding extracted data and remainder data after controlling release thereof.

16. A computer system for organizing and processing data as claimed in claim 13 wherein said enterprise designated filter is a categorical filter which includes content, contextual and taxonomic classification filter elements for an enterprise policy from the group of enterprise policies including level of service policy, customer privacy policy, supplier privacy policy, enterprise human resource privacy policy, financial data handling policy, public company reporting policy, health care regulation policy, technical innovation policy, competitive reporting policy and document or data retention policy.

17. A computer system for organizing and processing data as claimed in claim 13 including means for identifying and storing said select content from said data input, or a representation thereof, into said select content store with said corresponding enterprise designated filter, and means for imposing a classification taxonomy onto said stored select content or representation thereof.

18. A computer system for organizing and processing data as claimed in claim 13 wherein said data input has a source indicator and said select content, when stored in said select content data store, includes a corresponding representative source indicator and the system includes means for generating a tag or label responsive to said source indicator and said corresponding representative source indicator.

19. A computer system for organizing and processing data as claimed in claim 13 including means for fully or partially reconstructing all or part of said data input with said corresponding extracted data and remainder data after controlling release thereof.