Method and system for managing personally identifiable information and sensitive information in an application-independent manner

• US 20060143459A1
• Filed: 12/23/2004
• Published: 06/29/2006
• Est. Priority Date: 12/23/2004
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Jones, Brian, Rothschiller, Chad, Villaron, Shawn Alan
• Application Number:
  US11/021,725
• Publication Number:
  US 20060143459A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

Methods and systems are provided for managing personally identifiable and/or sensitive information (PII/SI) in a manner that is independent of a software application that is used for creating or editing a document containing the PII/SI. PII/SI in a document is marked or flagged in an application-independent manner so that a solution application programmed to discover and process marked PII/SI may readily discover the marked information for redacting the information, editing the information, or otherwise disposing of the information as desired. PII/SI in documents may be annotated according to the Extensible Markup Language (XML). A separate XML namespace may be used to distinguish the annotated PII/SI from other content in the document. An application-independent solution may be built for scanning a given document for all annotated information belonging to the namespace associated with the PII/SI. Once the annotated information is located in a given document, it may be redacted, edited, or otherwise processed or disposed of as desired.

Claims

1. A computer-readable medium having stored thereon computer-executable instructions which when executed by a computer perform a method of managing sensitive information in a computer-generated document, comprising:

receiving an identification of sensitive information in a computer-generated document;

receiving a marking of the identified sensitive information in the document electronically to allow the marked sensitive information to be detected;

parsing the document for locating the marked sensitive information;

locating the marked sensitive information in the document; and

modifying the marked sensitive information located in the document.

2. The computer-readable medium of claim 1, whereby identifying sensitive information in the computer-generated document includes identifying sensitive information that should not be passed to all users of the document.

3. The computer-readable medium of claim 2, whereby receiving an identification of the sensitive information includes receiving and identification of personally identifiable information in the document that identifies attributes associated with an author or editor of the document.

4. The computer-readable medium of claim 1, further comprising defining one or more markings for marking the identified sensitive information in the document electronically to allow the marked sensitive information to be detected.

5. The computer-readable medium of claim 1, prior to parsing the document for locating the marked sensitive information, passing the document to a sensitive information solution application for processing located sensitive information contained in the document.

6. The computer-readable medium of claim 1, whereby modifying the marked sensitive information in the document includes redacting the marked sensitive information from the document.

7. The computer-readable medium of claim 1, whereby modifying the marked sensitive information in the document includes replacing the marked sensitive information located in the document with non-sensitive information.

8. The computer-readable medium of claim 1,

whereby receiving a marking of the identified sensitive information in the document electronically to allow the marked sensitive information to be detected includes receiving an application of Extensible Markup Language (XML) tags to the identified sensitive information;

and

whereby parsing the document for locating the marked sensitive information includes parsing the document for locating the XML tags applied to the identified sensitive information.

9. The computer-readable medium of claim 8, whereby modifying the marked sensitive information in the document includes modifying the sensitive information tagged with the XML tags.

10. The computer-readable medium of claim 8, further comprising associating the XML tags applied to the identified sensitive information with an XML namespace.

11. The computer-readable medium of claim 10, further comprising defining the XML tags applied to the identified sensitive information and defining the XML namespace in an XML schema file associated with the document.

12. The computer-readable medium of claim 8, prior to parsing the document for locating the XML tags applied to the sensitive information, passing the document to a solution application enabled to parse the document for locating the XML tags applied to the sensitive information.

13. The computer-readable medium of claim 12, further comprising reading the XML schema file associated with the document for obtaining names and definitions associated with the XML tags applied to the identified sensitive information.

14. A method of managing sensitive information in a computer-generated document, comprising:

receiving an application of Extensible Markup Language (XML) tags to sensitive information in a computer-generated document for marking the sensitive information to allow the marked sensitive information to be detected;

parsing the document for locating the XML tags applied to the marked sensitive information; and

upon locating the marked sensitive information in the document, modifying the marked sensitive information in the document.

15. The method of claim 14, further comprising associating the XML tags applied to the sensitive information with an XML namespace.

16. A computer-readable medium having stored thereon computer-executable instructions which when executed by a computer perform a method of managing sensitive information in a computer-generated document, comprising:

receiving an identification of personally identifiable information in a computer-generated document;

receiving an application of Extensible Markup Language (XML) tags to the identified personally identifiable information to allow the marked personally identifiable information to be detected;

parsing the document for locating the XML tags applied to the identified personally identifiable information;

locating the marked personally identifiable information in the document; and

modifying the marked personally identifiable information located in the document.

17. The computer-readable medium of claim 16, whereby modifying the marked personally identifiable information in the document includes redacting the marked personally identifiable information from the document.

18. The computer-readable medium of claim 16, whereby modifying the marked personally identifiable information in the document includes replacing the marked personally identifiable information located in the document with non-personally identifiable information.

19. The computer-readable medium of claim 16, further comprising associating the XML tags applied to the identified personally identifiable information with an XML namespace.

20. The computer-readable medium of claim 19, further comprising:

prior to parsing the document for locating the XML tags applied to the personally identifiable information, passing the document to a solution application enabled to parse the document for locating the XML tags applied to the personally identifiable information; and

reading an XML schema file associated with the document for obtaining names and definitions associated with the XML tags applied to the identified personally identifiable information.