Automated separation of corporate and private data for backup and archiving

• US 8,972,362 B2
• Filed: 12/04/2013
• Issued: 03/03/2015
• Est. Priority Date: 09/07/2011
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Gibson, Douglas E., Newstadt, Keith
• Primary Examiner(s): Woo, Isaac M
• Application Number:
  US14/097,163
• Publication Number:
  US 20140089279A1
• Time in Patent Office: 454 Days
• Field of Search: 707600-899
• US Class Current: 707/694
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1456 Hardware arrangements for backup
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/21 Design, administration or maintenance of databases
• CPC Class Codes: G06F 16/285 Clustering or classification

Abstract

A computing device categorizes data items as a corporate data items when a first criterion is satisfied and as personal data items when a second criterion is satisfied. The computing device provides identified corporate data items to a first backup system that stores the corporate data items to a corporate data store. The computing device further provides identified personal data items to a second backup system that stores the personal data items to a personal data store.

Claims

1. A method comprising:

categorizing a plurality of data items by a computing device, wherein a data item of the plurality of data items is categorized as a corporate data item responsive to one or more first criteria being satisfied and as a personal data item responsive to one or more second criteria being satisfied;

providing the plurality of corporate data items to a first system that stores the corporate data items to a corporate data store;

identifying a first subset of the plurality of personal data items as belonging to a first individual;

identifying a second system associated with the first individual, wherein the second system stores personal data items belonging to the first individual to a first personal data store; and

providing the first subset of personal data items to the second system.

2. The method of claim 1, further comprising:

applying indexed document matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

3. The method of claim 1, further comprising:

applying exact data matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

4. The method of claim 1, further comprising:

applying described content matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

5. The method of claim 1, further comprising:

applying vector machine learning to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

6. The method of claim 1, further comprising:

filtering out the personal data items from the plurality of data items responsive to an attempt by the first system to access the plurality of data items so that only the corporate data items are accessible by the first system; and

filtering out the corporate data items from the plurality of data items responsive to an attempt by the second system to access the plurality of data items so that only the personal data items are accessible by the second system.

7. The method of claim 1, wherein categorizing a data item comprises:

assigning a rating to the data item indicating a likelihood that the data item is a corporate data item;

providing the data item to the first system if the rating is within a first rating range; and

providing the data item to the second system if the rating is within a second rating range.

8. The method of claim 1, further comprising:

identifying a second subset of the plurality of personal data items as belonging to a second individual;

identifying a third system associated with the second individual, wherein the third system stores personal data items belonging to the second individual to a second personal data store; and

providing the second subset of personal data items to the third system.

9. The method of claim 1, wherein data items satisfying both the one or more first criteria and the one or more second criteria are categorized both as corporate data items and as personal data items.

10. The method of claim 1, further comprising:

receiving a command to search backed up or archived data; and

presenting the corporate data stored on the corporate data store and the personal data stored on the personal data store together in a unified interface, wherein the personal data is identified in the unified interface as personal data and the corporate data is identified in the unified interface as corporate data.

11. A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

categorizing a plurality of data items by the processing device, wherein a data item of the plurality of data items is categorized as a corporate data item responsive to one or more first criteria being satisfied and as a personal data item responsive to one or more second criteria being satisfied;

providing the plurality of corporate data items to a first system that stores the corporate data items to a corporate data store;

identifying a first subset of the plurality of personal data items as belonging to a first individual;

identifying a second system associated with the first individual, wherein the second system stores personal data items belonging to the first individual to a first personal data store; and

providing the first subset of personal data items to the second system.

12. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

applying indexed document matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

13. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

applying exact data matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

14. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

applying described content matching to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

15. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

applying vector machine learning to the plurality of data items by a data loss prevention (DLP) system to determine which of the plurality of data items contains sensitive corporate information, wherein data items containing sensitive corporate information are classified as corporate data items.

16. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

filtering out the personal data items from the plurality of data items responsive to an attempt by the first system to access the plurality of data items so that only the corporate data items are accessible by the first system; and

filtering out the corporate data items from the plurality of data items responsive to an attempt by the second system to access the plurality of data items so that only the personal data items are accessible by the second system.

17. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

identifying a second subset of the plurality of personal data items as belonging to a second individual;

identifying a third system associated with the second individual, wherein the third system stores personal data items belonging to the second individual to a second personal data store; and

providing the second subset of personal data items to the third system.

18. The non-transitory computer readable storage medium of claim 11, wherein data items satisfying both the one or more first criteria and the one or more second criteria are categorized both as corporate data items and as personal data items.

19. The non-transitory computer readable storage medium of claim 11, the operations further comprising:

receiving a command to search backed up or archived data; and

presenting the corporate data stored on the corporate data store and the personal data stored on the personal data store together in a unified interface, wherein the personal data is identified in the unified interface as personal data and the corporate data is identified in the unified interface as corporate data.

20. A computing device comprising:

a memory; and

a processing device coupled to the memory, the processing device to;

categorize a plurality of data items by the processing device, wherein a data item of the plurality of data items is categorized as a corporate data item responsive to one or more first criteria being satisfied and as a personal data item responsive to one or more second criteria being satisfied;

provide the plurality of corporate data items to a first system that stores the corporate data items to a corporate data store;

identify a first subset of the plurality of personal data items as belonging to a first individual;

identify a second system associated with the first individual, wherein the second system stores personal data items belonging to the first individual to a first personal data store; and

provide the first subset of personal data items to the second system.