Granted Patent B1

US 10,489,066 · App. 15/441,216 · Granted Nov 26, 2019

Inventor: Thomas Krinke (Forest Lake, MN)

Assignee: Veritas Technologies LLC

G06F3/0619G06F3/065G06F3/067G06F11/1451G06F11/1458G06F2201/84

Abstract

Claims (85)

1. A computer-implemented method for ensuring right-to-erasure compliance during data recovery, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

intercepting, by the at least one processor of the computing device, a request to perform a recovery process to restore backup data to a memory, wherein the recovery process comprises a sequence of computing actions to restore data to the memory from a backup image stored in a database;

automatically comparing, by the at least one processor of the computing device, the backup image of the backup data with a record of right-to-erasure orders in response to intercepting the request;

determining, by the at least one processor of the computing device and based on the comparison, that the backup image includes individual data related to at least one right-to-erasure order;

erasing, by the at least one processor of the computing device, the individual data to ensure the recovery process complies with the at least one right-to-erasure order;

recording, by the at least one processor of the computing device, the erasure of the individual data in an audit log; and

completing, by the at least one processor of the computing device, the recovery process to restore the backup data without the individual data to the memory to ensure the recovery process does not violate the at least one right-to-erasure order.

2. The method of claim 1 , wherein the record of right-to-erasure orders comprises at least one of:

an identity of an individual;

a creation date of the at least one right-to-erasure order;

an execution date of data erasure for the at least one right-to-erasure order; and

a list of backup images associated with the at least one right-to-erasure order.

3. The method of claim 1 , wherein determining that the backup image includes individual data related to the at least one right-to-erasure order comprises:

identifying at least one individual for which the backup image contains information; and

determining that the at least one individual is associated with the at least one right-to-erasure order in the record of right-to-erasure orders.

4. The method of claim 1 , wherein erasing the individual data to ensure the recovery process complies with the at least one right-to-erasure order comprises at least one of:

identifying the individual data based on metadata of the backup image;

notifying an administrator of the at least one right-to-erasure order;

isolating the backup image in a quarantine environment;

deleting the individual data from the backup image; and

deleting the backup image.

5. The method of claim 4 , wherein the administrator comprises a user with special privilege to access right-to-erasure data.

6. The method of claim 1 , wherein the audit log comprises a list of actions showing at least one of:

deletion of the individual data; and

deletion of the backup image.

7. The method of claim 1 , wherein completing the recovery process to restore the backup data comprises at least one of:

reintroducing the backup image to an unquarantined environment;

completing the recovery process using the backup image after erasing the individual data;

completing the recovery process using a different backup image that does not include the individual data; and

alerting a user about a lack of backup images that comply with the at least one right-to-erasure order.

8. The method of claim 1 , further comprising automatically sending a notification of the completion of the recovery process, such that the notification complies with the at least one right-to-erasure order.

9. A system for ensuring right-to-erasure compliance during data recovery, the system comprising:

at least one memory device that stores one or more computer-readable instructions; and

a computing device comprising at least one hardware processor that executes the one or more computer-readable instructions to:

intercept a request to perform a recovery process to restore backup data to a memory, wherein the recovery process comprises a sequence of computing actions to restore data to the memory from a backup image stored in a database;

automatically compare the backup image of the backup data with a record of right-to-erasure orders in response to intercepting the request;

determine, based on the comparison, that the backup image includes individual data related to at least one right-to-erasure order;

erase the individual data to ensure the recovery process complies with the at least one right-to-erasure order;

record the erasure of the individual data in an audit log; and

complete the recovery process to restore the backup data without the individual data to the memory to ensure the recovery process does not violate the at least one right-to-erasure order.

10. The system of claim 9 , wherein the record of right-to-erasure orders comprises at least one of:

an identity of an individual;

a creation date of the at least one right-to-erasure order;

an execution date of data erasure for the at least one right-to-erasure order; and

a list of backup images associated with the at least one right-to-erasure order.

11. The system of claim 9 , wherein the at least one hardware processor executes the one or more computer-readable instructions to determine that the backup image includes individual data related to the at least one right-to-erasure order by:

identifying at least one individual for which the backup image contains information; and

determining that the individual is associated with the at least one right-to-erasure order in the record of right-to-erasure orders.

12. The system of claim 9 , wherein the at least one hardware processor executing the one or more computer-readable instructions to erase the individual data to ensure the recovery process complies with the at least one right-to-erasure order comprises at least one of:

identifying the individual data based on metadata of the backup image;

notifying an administrator of the at least one right-to-erasure order;

isolating the backup image in a quarantine environment;

deleting the individual data from the backup image; and

deleting the backup image.

13. The system of claim 12 , wherein the administrator comprises a user with special privilege to access right-to-erasure data.

14. The system of claim 9 , wherein the audit log comprises a list of actions showing at least one of:

deletion of the individual data; and

deletion of the backup image.

15. The system of claim 9 , wherein the at least one hardware processor executing the one or more computer-readable instructions to complete the recovery process to restore the backup data comprises least one of:

reintroducing the backup image to an unquarantined environment;

completing the recovery process using the backup image after erasing the individual data;

completing the recovery process using a different backup image that does not include the individual data; and

alerting a user about a lack of backup images that comply with the at least one right-to-erasure order.

16. The system of claim 9 , wherein the at least one hardware processor further executes the one or more computer-readable instructions to automatically send a notification of the completion of the recovery process, such that the notification complies with the at least one right-to-erasure order.

17. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

intercept a request to perform a recovery process to restore backup data to a memory, wherein the recovery process comprises a sequence of computing actions to restore data to the memory from a backup image stored in a database;

automatically compare the backup image of the backup data with a record of right-to-erasure orders in response to intercepting the request;

determine, based on the comparison, that the backup image includes individual data related to at least one right-to-erasure order;

erase the individual data to ensure the recovery process complies with the at least one right-to-erasure order;

record the erasure of the individual data in an audit log; and

complete the recovery process to restore the backup data without the individual data to the memory to ensure the recovery process does not violate the at least one right-to-erasure order.

18. The non-transitory computer-readable medium of claim 17 , wherein the record of right-to-erasure orders comprises at least one of:

an identity of an individual;

a creation date of the at least one right-to-erasure order;

an execution date of data erasure for the at least one right-to-erasure order; and

a list of backup images associated with the at least one right-to-erasure order.

19. The non-transitory computer-readable medium of claim 17 , wherein the computer-executable instructions cause the computing device to determine that the backup image includes individual data related to the at least one right-to-erasure order by:

identifying at least one individual for which the backup image contains information; and

determining that the individual is associated with the at least one right-to-erasure order in the record of right-to-erasure orders.

20. The non-transitory computer-readable medium of claim 17 , wherein the computer-executable instructions which cause the computing device to erase the individual data to ensure the recovery process complies with the at least one right-to-erasure order comprise instructions for at least one of:

identifying the individual data based on metadata of the backup image;

notifying an administrator of the at least one right-to-erasure order;

isolating the backup image in a quarantine environment;

deleting the individual data from the backup image; and

deleting the backup image.

Assignments (11)

Cited By (2)

US 12,216,791 US 12,430,427