Systems and methods for securing information in an electronic file

• US 8,522,050 B1
• Filed: 07/28/2010
• Issued: 08/27/2013
• Est. Priority Date: 07/28/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Wakerley, Todd
• Primary Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US12/844,990
• Time in Patent Office: 1,126 Days
• Field of Search: 713/189, 713/193, 726/22, 726/23, 726/24, 726/25, 726/26
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A computer-implemented method for securing information in an electronic file is described. Data in the electronic file is automatically scanned. Sensitive information in the electronic file is identified. The sensitive information is extracted from the electronic file. The sensitive information is encrypted. The encrypted sensitive information is stored.

Claims

1. A computer-implemented method for securing information in an electronic file, comprising:

receiving credentials for at least one selected online data store of a plurality of online data stores that are subscribed to by a user;

securing sensitive information in at least one electronic file that is stored in the at least one selected online data store, wherein securing sensitive information comprises;

automatically accessing the at least one selected online data store using the credentials;

automatically scanning data in the at least one electronic file;

identifying sensitive information in the at least one electronic file;

extracting the sensitive information from the at least one electronic file;

encrypting the sensitive information;

storing the encrypted sensitive information in a storage location; and

replacing the extracted sensitive information in the at least one electronic file with a redaction identifier, the redaction identifier referencing the storage location of the encrypted sensitive information.

2. The method of claim 1, further comprising using at least one heuristic to identify the sensitive information in the at least one electronic file.

3. The method of claim 1, further comprising storing the encrypted sensitive information in a location that is separate from the location of the at least one electronic file.

4. The method of claim 1, further comprising verifying the credentials associated with the user for the at least one selected online data store.

5. The method of claim 1, further comprising receiving a request to retrieve encrypted sensitive information.

6. The method of claim 5, further comprising retrieving the encrypted sensitive information.

7. The method of claim 6, further comprising decrypting the encrypted sensitive information.

8. A computing device configured to secure information in an electronic file, comprising:

a processor;

memory in electronic communication with the processor;

instructions being stored in the memory, the instructions being executable by the processor to;

receive credentials for at least one selected online data store of a plurality of online data stores that are subscribed to by a user;

secure sensitive information in at least one electronic file that is stored in the at least one selected online data store, wherein the instructions to secure sensitive information comprise instructions executable by the processor to;

automatically access the at least one selected online data store using the credentials;

automatically scan data in the at least one electronic file;

identify sensitive information in the at least one electronic file;

extract the sensitive information from the at least one electronic file;

encrypt the sensitive information;

store the encrypted sensitive information in a storage location; and

replace the extracted sensitive information in the at least one electronic file with a redaction identifier, the redaction identifier referencing the storage location of the encrypted sensitive information.

9. The computing device of claim 8, wherein the instructions are further executable by the processor to use at least one heuristic to identify the sensitive information in the at least one electronic file.

10. The computing device of claim 8, wherein the instructions are further executable by the processor to store the encrypted sensitive information in a location that is separate from the location of the at least one electronic file.

11. The computing device of claim 8, wherein the instructions are further executable by the processor to verify the credentials associated with the user for the at least one selected online data store.

12. The computing device of claim 8, wherein the instructions are further executable by the processor to receive a request to retrieve encrypted sensitive information.

13. The computing device of claim 8, wherein the instructions are further executable by the processor to retrieve the encrypted sensitive information.

14. The computing device of claim 13, wherein the instructions are further executable by the processor to decrypt the encrypted sensitive information.

15. A computer-program product for securing information in an electronic file, the computer-program product comprising a non-transitory computer-readable medium having instructions thereon, the instructions being executable by a processor to:

receive credentials for at least one selected online data store of a plurality of online data stores that are subscribed to by a user;

secure sensitive information in at least one electronic file that is stored in the at least one selected online data store, wherein the instructions to secure sensitive information comprise instructions executable by the processor to;

automatically access the at least one selected online data store using the credentials;

automatically scan data in the at least one electronic file;

identify sensitive information in the at least one electronic file;

extract the sensitive information from the at least one electronic file;

encrypt the sensitive information;

store the encrypted sensitive information in a storage location; and

replace the extracted sensitive information in the at least one electronic file with a redaction identifier, the redaction identifier referencing the storage location of the encrypted sensitive information.