Method and system for applying data retention policies in a computing platform

• US 9,858,279 B2
• Filed: 01/23/2017
• Issued: 01/02/2018
• Est. Priority Date: 07/07/2014
• Status: Active Grant

• Current Assignee: Twilio, Inc.
• Original Assignee: Twilio, Inc.
• Inventors: Ballai, Adam, Milliron, Timothy S.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US15/412,843
• Publication Number:
  US 20170132233A1
• Time in Patent Office: 344 Days
• Field of Search: 726 2
• CPC Class Codes: G06F 16/113 Details of archiving lifecycle management in storage systems G06F3/0649; backup systems G06F11/1446
• CPC Class Codes: G06F 16/125 characterised by the use of retention policies retention policies for HSM systems G06F16/185
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Systems and methods for a multitenant computing platform. Original data is generated through operation of a computing platform system on behalf of an account of the computing platform system, and the original data is moderated according to a data retention policy set for the account. The moderated data is stored at the computing platform system. The computing platform system moderates the generated data by securing sensitive information of the generated data from access by the computing platform system, and providing operational information from the generated data. The operational information is accessible by the computing platform system during performance of system operations.

Claims

1. A method comprising:

a computing system generating original image data for a first platform account;

a data manager system securing sensitive information of the original image data from access by the computing system, according to a data retention policy set for the first platform account;

the data manager system providing operational information from the generated original image data of the first platform account, the operational information being accessible by a platform operations system during performance of system operations by the platform operations system.

2. The method of claim 1, wherein the data retention policy defines actions to secure the sensitive information, and wherein securing sensitive information comprises performing the actions defined by the data retention policy, and wherein actions include at least one of data redaction, data censoring, data classifying, data bucketing, data aggregating, data encryption, and partial deletion.

3. The method of claim 1, wherein securing sensitive information includes data classifying.

4. The method of claim 1, wherein securing sensitive information includes data bucketing.

5. The method of claim 1, wherein securing sensitive information includes data aggregating.

6. The method of claim 1, wherein system operations include usage analytics.

7. The method of claim 1, wherein system operations include business intelligence.

8. The method of claim 1, wherein system operations include metering account usage.

9. The method of claim 1, wherein system operations include pattern detection.

10. The method of claim 1, wherein system operations include fraud detection.

11. A method comprising:

a computing system generating original audio data for a first platform account;

a data manager system securing sensitive information of the original audio data from access by the computing system, according to a data retention policy set for the first platform account;

the data manager system providing operational information from the generated original audio data of the first platform account, the operational information being accessible by a platform operations system during performance of system operations by the platform operations system.

12. The method of claim 11, wherein the data retention policy defines actions to secure the sensitive information, and wherein securing sensitive information comprises performing the actions defined by the data retention policy, and wherein actions include at least one of data redaction, data censoring, data classifying, data bucketing, data aggregating, data encryption, and partial deletion.

13. The method of claim 11, wherein securing sensitive information includes data classifying.

14. The method of claim 11, wherein securing sensitive information includes data bucketing.

15. The method of claim 11, wherein securing sensitive information includes data aggregating.

16. The method of claim 11, wherein system operations include usage analytics.

17. The method of claim 11, wherein system operations include business intelligence.

18. The method of claim 11, wherein system operations include metering account usage.

19. The method of claim 11, wherein system operations include pattern detection.

20. The method of claim 11, wherein system operations include fraud detection.