IP Library Granted Patent US 8,601,594
Granted Patent B2
US 8,601,594 · App. 12/955,938 · Granted Dec 3, 2013

Automatically classifying an input from field with respect to sensitivity of information it is designed to hold

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,601,594
App. No.
12/955,938
Granted
Dec 3, 2013
Kind
B2
Abstract

A method and system for automatically classifying an input form field as designed to hold sensitive information. The method may include selecting an input characteristic associated with the input form field. The method may also include classifying the input form field as designed to hold sensitive information by considering classifying information of other input form fields having the same input characteristic. The method may further include statistically determining whether a similar input form field is indicated as designed to hold sensitive information by at least a predetermined threshold value of the other input fields. A computer program product is also disclosed.

Claims (42)

1. A computerized method for automatically classifying an analyzed input form field of an analyzed form with respect to sensitivity of information the analyzed input form field is designed to hold, the method comprising:

collecting, from a network, classifying information comprising a plurality of input characteristics of a plurality of input form fields of at least one web form, wherein the collecting of the classifying information includes performing crawling in the network;

providing the analyzed form; and

for the analyzed input form field, using a hardware processor to:

select, as a selected input characteristic, a certain input characteristic associated with the analyzed input form field, wherein:

the selected input characteristic is similar to a plurality of similar input form fields from the plurality of input form fields of the at least one web form in the classifying information; and

the selected input characteristic comprises one or more input characteristics selected from a group of input characteristics consisting of:

field label, field format, classification of a form in which at least one of the plurality of similar input form fields exists, and security level of the form in which said at least one of the plurality of similar input form fields exist;

when each one of the plurality of similar input form fields do not have the certain input characteristic, select a different input characteristic associated with the analyzed input form field, as the selected input characteristic, wherein the different input characteristic is different from the certain input characteristic; and

when each one of the plurality of similar input form fields have the selected input characteristic, statistically determine whether the analyzed input form field is designed to hold sensitive information by considering the plurality of similar input form fields.

2. The computerized method of claim 1 , wherein the network is the internet; wherein said collecting further comprises collecting the classifying information from the internet.

3. The computerized method of claim 2 , wherein the classifying information is maintained in a database.

4. The computerized method of claim 1 , further comprising requesting a user to verify the classification of the analyzed input form field.

5. The computerized method of claim 1 , further comprising allowing a user to manually change the classification of the analyzed input form field.

6. A computer program product for automatically classifying an analyzed input form field of an analyzed form with respect to sensitivity of information the analyzed input form field is designed to hold, wherein the computer program product is stored on a non-transitory tangible computer-readable storage medium, the computer program including code for:

collecting, from a network, classifying information comprising a plurality of input characteristics of a plurality of input form fields of at least one web form, wherein the collecting of the classifying information includes performing crawling in the network;

providing the analyzed form;

for the analyzed input form field, using a computerized processor to:

select, as a selected input characteristic, a certain input characteristic associated with the analyzed input form field, wherein:

the selected input characteristic is similar to a plurality of similar input form fields from the plurality of input form fields of the at least one web form in the classifying information; and

the selected input characteristic comprises one or more input characteristics selected from a group of input characteristics consisting of:

field label, field format, classification of a form in which at least one of the plurality of similar input form fields exists, and security level of the form in which said at least one of the plurality of similar input form fields exist;

when each one of the plurality of similar input form fields do not have the certain input characteristic, select a different input a different input characteristic associated with the analyzed input form field, as the selected input characteristic, wherein the different input characteristic is different from the certain input characteristic; and

when each one of the plurality of similar input form fields have the selected input characteristic, statistically determine whether the analyzed input form field is designed to hold sensitive information by considering the plurality of similar input form fields.

7. The computer program product of claim 6 , wherein the network is the internet; wherein said collecting further comprises collecting the classifying information from the internet.

8. The computer program product of claim 7 , wherein the classifying information is maintained in a database.

9. The computer program product of claim 6 , further comprising requesting a user to verify the classification of the analyzed input form field.

10. The computer program product of claim 6 , further comprising allowing a user to manually change the classification of the analyzed input form field.

11. A system for automatically classifying an analyzed input form field of an analyzed form with respect to sensitivity of information the analyzed input form field is designed to hold, the system comprising:

a hardware processor configured to:

collect, from a network, classifying information comprising a plurality of input characteristics of a plurality of input form fields of at least one web form, wherein the collecting of the classifying information includes performing crawling in the network;

for the analyzed input form field, using the hardware processor to

select, as a selected input characteristic, a certain input characteristic associated with the analyzed input form field; wherein:

the selected input characteristic is similar to a plurality of similar input form fields from the plurality of input form fields of the at least one web form in the classifying information; and

the selected input characteristic comprises one or more input characteristics selected from a group of input characteristics consisting of:

field label, field format, classification of a form in which at least one of the plurality of similar input form fields exists, and security level of the form in which said at least one of the plurality of similar input form fields exist;

when each one of the plurality of similar input form fields do not have the certain input characteristic, select a different input characteristic associated with the analyzed input form field, as the selected input characteristic, wherein the different input characteristic is different from the certain input characteristic; and

when each one of the plurality of similar input form fields have the selected input characteristic, statistically determine whether the input form field is designed to hold sensitive information by considering the plurality of similar input form fields.

12. The system of claim 11 , wherein the network is the internet; wherein the computerized processor is further configured to collect the classifying information from the internet.

13. The system of claim 12 , wherein the classifying information is maintained in a database.

14. The system of claim 11 , further comprising requesting a user to verify the classification of the analyzed input form field.

15. The system of claim 11 , further comprising allowing a user to manually change the classification of the analyzed input form field.

Assignments (2)
CONVEYOR IS ASSIGNING UNDIVIDED 50% INTEREST Recorded Jan 29, 2018
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: SERVICENOW, INC.; INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 045185/0315 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 3, 2011
From: GEVA, AMIR
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 025570/0850 →