Method and system for applying data retention policies in a computing platform

• US 9,588,974 B2
• Filed: 12/18/2015
• Issued: 03/07/2017
• Est. Priority Date: 07/07/2014
• Status: Active Grant

• Current Assignee: Twilio, Inc.
• Original Assignee: Twilio, Inc.
• Inventors: Ballai, Adam, Milliron, Timothy S.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US14/974,312
• Publication Number:
  US 20160103846A1
• Time in Patent Office: 445 Days
• Field of Search: 726/1
• US Class Current: 1/1
• CPC Class Codes: G06F 16/113 Details of archiving lifecycle management in storage systems G06F3/0649; backup systems G06F11/1446
• CPC Class Codes: G06F 16/125 characterised by the use of retention policies retention policies for HSM systems G06F16/185
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Systems and methods for a multitenant computing platform. Original data is generated through operation of a computing platform system on behalf of an account of the computing platform system, and the original data is moderated according to a data retention policy set for the account. The moderated data is stored at the computing platform system. The computing platform system moderates the generated data by securing sensitive information of the generated data from access by the computing platform system, and providing operational information from the generated data. The operational information is accessible by the computing platform system during performance of system operations.

Claims

1. A method, comprising:

at a hardware data manager system;

securing sensitive information of original data from access by a computing platform system that generates the original data, the original data being generated by the platform system through operation of the platform system on behalf of a platform account of the platform system, the data manager system securing the sensitive information according to a data retention policy set for the platform account, and

providing operational information from the generated data, the operational information being accessible by the computing platform system during performance of system operations.

2. The method of claim 1, wherein the computing platform system is a multi-tenant computing platform system.

3. The method of claim 2, wherein the data retention policy defines actions to secure the sensitive information, and wherein securing sensitive information comprises performing the actions defined by the data retention policy.

4. The method of claim 2, wherein the data includes at least one of data logs, API request records, API response records, captured packets, form data input, user generated data, generated media, and obtained media.

5. The method of claim 2, wherein actions include at least one of data redaction, data censoring, data classifying, data bucketing, data aggregating, data encryption, and partial deletion.

6. The method of claim 2, wherein system operations include at least one of usage analytics, business intelligence operations, infrastructure scaling operations, metering account usage, billing for account usage, fraud detection, error detection, general event pattern detection, platform administration operations, allocating resources, deallocating resources, cluster management operations, and auditing operations.

7. The method of claim 2, wherein data manager system receives the data retention policy in a data retention policy message provided by an external system, and the data retention policy is associated with an account identifier specified by the data retention policy message, the account identifier being an account identifier of the platform account.

8. The method of claim 2, wherein the data retention policy is received from an external account holder system, and the data retention policy is received with a request to apply the data retention policy to one or more specified data elements.

9. The method of claim 2, wherein the computing platform system is a multi-tenant telephony communication platform system, and wherein the data is generated responsive to execution of a communication on the communication platform system.

10. The method of claim 1,

wherein the data manager system secures the sensitive information from access by the computing platform system by performing at least one of removing, censoring and encrypting of the sensitive information,

wherein the data manager system provides the operational information from the generated data by at least one of preserving operational information from the generated data and generating operation information from the generated data, and

wherein the data manager system performs the encrypting by using an external system associated with the platform account, and the encrypted sensitive information is secured from access by the computing platform system.

11. A hardware data manager system comprising:

a processing unit; and

a storage medium storing machine-executable instructions of a data retention policy engine,

wherein the processing unit is constructed to execute the machine-executable instructions of the data retention policy engine,

wherein the machine-executable instructions comprise instructions for controlling the data manager system

to;

secure sensitive information of original data from access by a computing platform system that generates the original data, the original data being generated by the platform system through operation of the platform system on behalf of a platform account of the platform system, the data manager system securing the sensitive information according to a data retention policy set for the platform account, and

provide operational information from the generated data, the operational information being accessible by the computing platform system during performance of system operations.

12. The data manager system of claim 11, wherein the computing platform system is a multi-tenant computing platform system.

13. The data manager system of claim 12, wherein the data retention policy defines actions to secure the sensitive information, and wherein the data manager system is constructed to secure sensitive information by performing the actions defined by the data retention policy.

14. The data manager system of claim 12, wherein the data includes at least one of data logs, API request records, API response records, captured packets, form data input, user generated data, generated media, and obtained media.

15. The data manager system of claim 13, wherein actions include at least one of data redaction, data censoring, data classifying, data bucketing, data aggregating, data encryption, and partial deletion.

16. The data manager system of claim 12, wherein system operations include at least one of usage analytics, business intelligence operations, infrastructure scaling operations, metering account usage, billing for account usage, fraud detection, error detection, general event pattern detection, platform administration operations, allocating resources, deallocating resources, cluster management operations, and auditing operations.

17. The data manager system of claim 12, wherein the data manager system is constructed to receive the data retention policy in a data retention policy message provided by an external system,

wherein the data retention policy is associated with an account identifier specified by the data retention policy message, and

wherein the account identifier is an account identifier of the platform account.

18. The data manager system of claim 12, wherein the data manager system is constructed to receive the data retention policy from an external account holder system, and

wherein the data retention policy is received with a request to apply the data retention policy to one or more specified data elements.

19. The data manager system of claim 12, wherein the computing platform system is a multi-tenant telephony communication platform system, and wherein the data is generated responsive to execution of a communication on the communication platform system.

20. The data manager system of claim 11,

wherein the data manager system is constructed to secure the sensitive information from access by the computing platform system by performing at least one of removing, censoring and encrypting of the sensitive information,

wherein the data manager system is constructed to provide the operational information from the generated data by at least one of preserving operational information from the generated data and generating operation information from the generated data, and

wherein the data manager system is constructed to perform the encrypting by using an external system associated with the platform account, and

wherein the encrypted sensitive information is secured from access by the computing platform system.