IP Library Granted Patent US 12664311
Granted Patent B2
US 12664311 · App. 18/622,518 · Granted Jun 23, 2026

Integrated logging library for obfuscating sensitive information

Inventor: Pedro Betancourt (McKinney, TX)
Assignee: Capital One Services, LLC
G06F21/6254G06F11/3476
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12664311
App. No.
18/622,518
Granted
Jun 23, 2026
Kind
B2
Abstract

In some implementations, a device may configure, for a component that uses a platform, a logging library that is associated with a logging framework configured for the platform, wherein the logging library is configured to obfuscate the sensitive data. The device may obtain, for the component, component data via the platform, wherein the component data is associated with one or more operations of the component. The device may generate, via the logging framework, log data that includes obfuscated data generated via the logging library based on obtaining the component data, wherein the obfuscated data obfuscates any sensitive information in the log data. The device may perform, via the component, one or more actions using the log data.

Claims (78)

1 . A system for an integrated logging library for obfuscating sensitive information, the system comprising:

one or more memories; and

one or more processors, communicatively coupled to the one or more memories, configured to:

identify one or more components that are configured to integrate with a platform that outputs the sensitive information;

perform, for the platform, one or more control actions associated with configuring a logging library for the one or more components based on identifying whether each of the one or more components is compliant with a most recent version or update of the logging library,

wherein the logging library is configured to obfuscate the sensitive information in logs of the one or more components,

wherein the logging library is integrated within a logging framework that is configured for the platform, and

wherein the logging library includes configuration information that is configured to cause the logging library to be executed for any log data generated for the one or more components via the logging framework;

obtain, for a component of the one or more components, component data via the platform,

wherein the component data is associated with one or more operations of the component;

generate, via the logging framework and based on the component data, log data that includes obfuscated data generated via the logging library,

wherein the obfuscated data obfuscates any sensitive information in the log data; and

perform, via the component, one or more actions using the log data.

2 . The system of claim 1 ,

wherein the logging library includes one or more plugins for the logging framework.

3 . The system of claim 1 ,

wherein the logging library indicates one or more obfuscation rules, wherein a generation of the component data triggers the one or more obfuscation rules to be applied to the log data.

4 . The system of claim 1 ,

wherein the one or more processors, to perform the one or more actions, are configured to:

store, in a centralized log repository, the log data.

5 . The system of claim 1 ,

wherein the one or more processors, to perform the one or more control actions, are configured to:

transmit a report indicating any components, from the one or more components, that do not have the most recent version or update of the logging library configured in the logging framework.

6 . The system of claim 1 ,

wherein the one or more processors, to perform the one or more control actions, are configured to:

configure any non-compliant components, from the one or more components, with the most recent version or update of the logging library for the logging framework,

wherein a non-compliant component does not have the most recent version or update of the logging library configured in the logging framework.

7 . The system of claim 1 , wherein the one or more processors, to perform the one or more control actions, are configured to:

periodically scan to identify any new components that have been recently configured to integrate with the platform.

8 . The system of claim 1 , wherein the one or more processors, to perform the one or more control actions, are configured to:

configure, in response to determining that a component is not configured with the most recent version or update of the logging library, the component with the most recent version or update of the logging library.

9 . A method for obfuscating sensitive data, comprising:

configuring, by a device and for a component that uses a platform, a logging library that is associated with a logging framework configured for the platform based on identifying whether the component is compliant with a most recent version or update of the logging library,

wherein the logging library is configured to obfuscate the sensitive data, and

wherein the logging library includes configuration information that is configured to cause the logging library to be executed for any log data generated for the component via the logging framework;

obtaining, by the device and for the component, component data via the platform,

wherein the component data is associated with one or more operations of the component;

generating, by the device and via the logging framework, log data that includes obfuscated data generated via the logging library based on obtaining the component data,

wherein the obfuscated data obfuscates any sensitive information in the log data; and

performing, by the device and via the component, one or more actions using the log data.

10 . The method of claim 9 , further comprising:

identifying one or more components, including the component, that are configured to integrate with the platform; and

performing, for the platform, one or more control actions associated with configuring the logging library for the one or more components.

11 . The method of claim 10 ,

wherein performing the one or more control actions comprises:

transmitting a report indicating any components, from the one or more components, that do not have the logging library configured in the logging framework.

12 . The method of claim 10 ,

wherein performing the one or more control actions comprises:

configuring any non-compliant components, from the one or more components, with the most recent version or update of the logging library for the logging framework,

wherein a non-compliant component does not have the most recent version or update of the logging library configured in the logging framework.

13 . The method of claim 9 ,

wherein the logging library includes one or more plugins for the logging framework.

14 . The method of claim 9 ,

wherein the logging library indicates one or more obfuscation rules, wherein a generation of the component data triggers the one or more obfuscation rules to be applied to the log data.

15 . The method of claim 9 ,

wherein performing the one or more actions comprises:

storing, in a log repository, the log data.

16 . A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

one or more instructions that, when executed by one or more processors of a device, cause the device to:

identify one or more components that are configured to integrate with a platform that outputs sensitive information;

perform, for the platform, one or more control actions associated with configuring a logging library for the one or more components based on identifying whether each of the one or more components is compliant with a most recent version or update of the logging library,

wherein the logging library is configured to obfuscate the sensitive information in logs of the one or more components,

wherein the logging library is integrated within a logging framework that is configured for the platform, and

wherein the logging library includes configuration information that is configured to cause the logging library to be executed for any log data generated for the one or more components via the logging framework;

cause log data to be generated via the logging framework and based on component data of a component,

wherein the log data includes obfuscated data generated via the logging library, and

wherein the obfuscated data obfuscates any sensitive information in the log data; and

store, via the component, the log data in a log repository.

17 . The non-transitory computer-readable medium of claim 16 ,

wherein the logging library is included in a module of the logging framework.

18 . The non-transitory computer-readable medium of claim 16 ,

wherein the logging library indicates one or more obfuscation rules, wherein a generation of the component data triggers the one or more obfuscation rules to be applied to the log data.

19 . The non-transitory computer-readable medium of claim 16 ,

wherein the one or more instructions, that cause the device to perform the one or more control actions, cause the device to:

transmit a report indicating any components, from the one or more components, that do not have the logging library configured in the logging framework.

20 . The non-transitory computer-readable medium of claim 16 , wherein the one or more instructions, that cause the device to perform the one or more control actions, cause the device to:

configure any non-compliant components, from the one or more components, with the most recent version or update of the logging library for the logging framework,

wherein a non-compliant component does not have the most recent version or update of the logging library configured in the logging framework.