Protecting Assets on a Device

• US 20140068706A1
• Filed: 08/28/2013
• Published: 03/06/2014
• Est. Priority Date: 08/28/2012
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aissi, Selim
• Application Number:
  US14/012,597
• Publication Number:
  US 20140068706A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

Embodiments of the present invention are directed to systems and methods for protecting data assets on a device. In embodiments of the invention, a data protection module dynamically and statically searches for one or more data assets and identifies the data assets based on one or more security and privacy attributes. The data assets are classified based on a policy and protected using one or more protection mechanisms. Additionally, data assets are ranked and a security and privacy map is generated and maintained. The security and privacy map may include association of the data assets with their location, ranking, protection mechanism, etc. In some embodiments, a user interface is provided on the device for viewing and generating the policy and/or the security and privacy map.

Claims

1. A method for protecting data assets on a computing device, the method comprising:

searching, by a data protection module run by a processor, for at least one data asset on the computing device;

identifying, by the data protection module run by the processor, the at least one data asset based on at least one attribute associated with the at least one data asset;

classifying the at least one data asset; and

generating a map using the classification of the data asset.

2. The method of claim 1, further comprising:

ranking the at least one data asset.

3. The method of claim 1,

wherein the steps of the searching, identifying and classifying are based on a policy set by one or more entities.

4. The method of claim 3, further comprising:

protecting the at least one data asset according to the policy.

5. The method of claim 4,

wherein the protecting the at least one data asset includes one or more of an encryption, de-contexting, tokenization, masking, hashing, or deletion of the data asset.

6. The method of claim 3,

wherein the one or more entities include an application owner, a user of the computing device, a financial institution, a payment processing network, or an additional service provider.

7. The method of claim 1,

wherein the data protection module is part of a downloadable application.

8. The method of claim 1,

wherein the data protection module is a standalone application module on the computing device.

9. The method of claim 3,

wherein the policy includes a sub-classification of the at least one data asset.

10. A computing device comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising;

searching, by a data protection module, for at least one data asset on the computing device;

identifying, by the data protection module, the at least one data asset based on at least one attribute associated with the at least one data asset;

classifying the at least one data asset; and

generating a map using the classification of the data asset.

11. The computing device of claim 10, further comprising:

ranking the at least one data asset.

12. The computing device of claim 10,

wherein the steps of the searching, identifying and classifying are based on a policy set by one or more entities.

13. The computing device of claim 12, further comprising:

protecting the at least one data asset according to the policy.

14. The computing device of claim 13,

wherein the protecting the at least one data asset includes one or more of an encryption, de-contexting, tokenization, masking, hashing, or deletion of the data asset.

15. The computing device of claim 10,

wherein the data protection module is part of a downloadable application.

16. The computing device of claim 10,

wherein the data protection module is a standalone application module.

17. The computing device of claim 10,

wherein the computing device is a mobile phone.

18. A system comprising:

a server computer; and

a computing device communicatively coupled to the server computer through a communications network, the computing device comprising a processor and a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising;

searching, by a data protection module, for at least one data asset on the computing device;

identifying, by the data protection module, the at least one data asset based on at least one attribute associated with the at least one data asset;

classifying the at least one data asset; and

generating a map using the classification of the data asset.

19. The system of claim 18,

wherein the steps of the searching, identifying and classifying are based on a policy set by one or more entities.

20. The system of claim 18,

wherein the data protection module is part of a downloadable application.