AUTOMATICALLY APPLYING DATA LOSS PREVENTION RULES DURING MIGRATION

• US 20170070464A1
• Filed: 09/03/2015
• Published: 03/09/2017
• Est. Priority Date: 09/03/2015
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Willis, Tom, Lindley, Chad
• Granted Patent: US 10,447,638 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Data loss prevention (“DLP”) rules can be automatically applied to items during a migration. When a migration is performed, a migration engine may be configured with migration configuration settings which define the items to be migrated from the source system to the target system. The migration engine may also be configured with DLP configuration settings which define the type of items on which DLP should be performed. When the DLP configuration settings indicate that DLP should be applied to an item to be migrated, the migration engine routes the item to a DLP engine rather than directly migrating the item to the target system. After the DLP engine has processed the item, the DLP engine can return the processed item to the migration engine which in turn can migrate the processed item to the appropriate location in the target system.

Claims

1. A method, implemented by a system that includes a migration engine and a data loss prevention (DLP) engine, for performing DLP processing on selected items during a migration of the items from a source system to a target system, the method comprising:

accessing an item associated with an account on a source system;

determining, based on DLP configuration settings, whether the item should be subjected to DLP processing such that;

when it is determined that the item should not be subjected to DLP processing, the item is migrated to the target system by storing the item in association with a corresponding account on the target system; and

when it is determined that the item should be subject to DLP processing, DLP processing is performed on the item to generate a processed item, and the processed item is migrated to the target system by storing the processed item in association with the corresponding account on the target system.

2. The method of claim 1, wherein accessing an item associated with an account on a source system comprises accessing an email that is stored in a mailbox on the source system, and wherein migrating the email or the processed email to the target system comprises storing the email or processed email in a corresponding mailbox on the target system.

3. The method of claim 1, wherein the item is one of a contact, a task, a calendar item, a journal, an instant messaging conversation, a posted attachment, or a sticky note.

4. The method of claim 1, wherein the DLP configuration settings define which type of items are to be subjected to DLP processing.

5. The method of claim 1, wherein the DLP configuration settings define that items associated with one or more particular users should be subjected to DLP processing.

6. The method of claim 1, wherein the DLP configuration settings identify DLP rules that are to be used when performing DLP processing.

7. The method of claim 1, wherein the processed item is generated by performing an action that modifies content of the item.

8. The method of claim 7, wherein the item is an email and the action comprises one of:

removing content from the body of the email;

or

removing an attachment from the email.

9. The method of claim 7, further comprising:

adding an entry to a log that describes the action that was performed on the item.

10. The method of claim 7, further comprising:

generating and sending a notification that describes the action that was performed on the item.

11. A method, performed by a migration system that includes a migration engine and a DLP engine, for migrating a mailbox from a source system to a target system, the method comprising:

accessing, by the migration engine, an email within a mailbox on the source system as part of a migration of the mailbox from the source system to the target system;

prior to migrating the email to a corresponding mailbox on the target system, routing the email to the DLP engine;

performing, by the DLP engine, DLP processing on the email to generate a processed email; and

migrating the processed email to the corresponding mailbox on the target system.

12. The method of claim 11, further comprising:

determining, by the migration engine, that the email should be subjected to DLP processing based on DLP configuration settings.

13. The method of claim 11, wherein performing DLP processing on the email to generate a processed email comprises comparing content of the email to DLP rules.

14. The method of claim 13, wherein the DLP rules define one or more actions to take on the email when the email contains specified content, and wherein the processed email comprises a copy of the email with a portion of the email'"'"'s content removed.

15. The method of claim 14, wherein the portion of the email'"'"'s content comprises one or more of an attachment to the email or content within a body or title of the email.

16. The method of claim 11, wherein performing DLP processing on the email to generate a processed email comprises taking one or more actions to modify content of the email, the method further comprising:

generating one or more of a notification or a log entry that defines the one or more actions that were taken on the email.

17. The method of claim 11, further comprising:

accessing, by the migration engine, an item associated with the mailbox on the source system, the item comprising one of a contact, a task, or a calendar item;

prior to migrating the item to the target system, routing the item to the DLP engine;

performing DLP processing on the item to generate a processed item; and

migrating the processed item to the target system by storing the item in association with the corresponding mailbox on the target system.

18. The method of claim 11, wherein the email comprises a group communication.

19. A system comprising:

a migration engine configured to perform a migration from a source system to a target system based on migration configuration settings which define items that are to be migrated;

and a DLP engine configured to perform DLP processing on items received from the migration engine during the migration;

wherein the migration engine is configured with DLP configuration settings that identify which of the items that are to be migrated are to be routed to the DLP engine for DLP processing prior to being migrated; and

wherein, for each item received from the migration engine, the DLP engine processes the item to generate a processed item and then returns the processed item to the migration engine for migration to the target system.

20. The system of claim 19, wherein the items comprise one or more of emails, contacts, calendar items, or tasks.