IP Library › Granted Patent US 10,885,225
Granted Patent B2
US 10,885,225 · App. 16/003,739 · Granted Jan 5, 2021

Protecting personally identifiable information (PII) using tagging and persistence of PII

Inventors: Andreas Balzer (Dublin, IE); David Mowatt (Dublin, IE); Muiris Woulfe (Dublin, IE)
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
G06F21/6254G06F40/205H04L9/0894G06F16/93H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,885,225
App. No.
16/003,739
Granted
Jan 5, 2021
Kind
B2
Abstract

A system includes an electronic processor configured to store records in a client database. The records included personally identifiable information associated with entities and a client identifier reference associated with each of the individuals, the personally identifiable information is accessible based on an authorization level associated with a user. The electronic processor is also configured to receive a document containing both non-personally identifiable information and personally identifiable information, parse the document to determine the presence personally identifiable information in the document, verify the access rights of the reader of the document, match the personally identifiable information included in the document with records stored in the client database, substitute the personally identifiable information included in the document with the corresponding client identifier reference referring to the client database, and generate a human-legible view of the document containing the corresponding client identifier reference.

Claims (67)

1. A computer system for protecting information associated with a plurality of entities, the computer system comprising:

an electronic processor configured to

store records in a client database, each of the records including personally identifiable information associated with at least one of the plurality of entities and a client identifier reference associated with at least one of the plurality of entities, the personally identifiable information accessible based on an authorization level associated with a user;

receive a document containing both non-personal data and personally identifiable information;

parse the document to determine the presence of personally identifiable information in the document;

determine, based on the records stored in the client database, one of the plurality of entities associated with the personally identifiable information included in the document;

substitute the personally identifiable information included in the document with the client identifier reference stored in the client database corresponding to the one of the plurality of entities;

generate a human-legible view of the document containing the client identifier reference corresponding to the one of the plurality of entities;

in response to a first personally identifiable information matching only one record in the client database, removing the first personally identifiable information from the document and replacing the first personally identifiable information with a first client identifier reference;

in response to the first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and

in response to the first personally identifiable information matching none of the records in the client database, updating the client database with a new record and generating a new client identifier reference associated with the first personally identifiable information.

2. The computer system of claim 1 , wherein each of the plurality of entities is an item selected from the group consisting of an individual, a group, an organization and a content.

3. The computer system of claim 1 , wherein the document includes personally identifiable information included in an item selected from the group consisting of textual data, audio data, image data, and video data.

4. The computer system of claim 1 , wherein the electronic processor is further configured to

generate the human-legible view of the document having portions of the document redacted based on the access rights to the personally identifiable information of entities included in the document.

5. The computer system of claim 1 , wherein the client identifier reference includes information associated with the client database.

6. The computer system of claim 1 , wherein the electronic processor is further configured to:

in response to a first personally identifiable information matching only one record in the client database, remove the first personally identifiable information from the document and replace the first personally identifiable information with a first client identifier reference.

7. The computer system of claim 1 , wherein the electronic processor is further configured to

in response to a first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database.

8. The computer system of claim 1 , wherein the electronic processor is further configured to

in response to a first personally identifiable information matching none of the records in the client database, update the client database with a new record and generate a new client identifier reference associated with the first personally identifiable information.

9. The computer system of claim 1 , wherein the electronic processor is further configured to

determine that a first personally identifiable information is associated with an entity that does not have a record in the client database; and

add a new record associated with the personally identifiable information.

10. The computer system of claim 1 , wherein the personally identifiable information includes an item selected from the group consisting of name, date of birth, place of birth, email address, phone number, fax number, particular content, social networking credential, biometric information, financial account number, organization issued identification, and government issued identification.

11. The computer system of claim 1 , wherein the client database is accessible based on an authorization level associated with the user.

12. The computer system of claim 1 , wherein the client identifier reference includes a plurality of segments, the plurality of segments having a first segment associated with an individual and a second segment associated with an organization.

13. The computer system of claim 1 , wherein the electronic processor is further configured to

retrieve a plurality of documents including personally identifiable information associated with an entity.

14. The computer system of claim 13 , wherein the electronic processor is further configured to redact personally identifiable information included in at least one of the plurality of documents and not associated with the entity.

15. The computer system of claim 1 , wherein the electronic processor is further configured to

delete all documents containing personally identifiable information associated with an individual.

16. A method for protecting personally identifiable information of entities, the method comprising:

storing records in a client database, the records including personally identifiable information associated with entities and a client identifier reference associated with each of the entities, the personally identifiable information accessible based on an authorization level associated with a user;

receiving a document containing both non-personal data and personally identifiable information of one or more entities, the personally identifiable information of the one or more entities including at least one selected from the group consisting of audio data and image data;

parsing the document to determine the presence of personally identifiable information included in the document;

determining, based on the records stored in the client database, one of the entities associated with the personally identifiable information included in the document;

substituting the personally identifiable information included in the document with a client identifier reference stored in the client database corresponding to the one of the entities;

generating a human-legible view of the document containing the client identifier reference;

in response to a first personally identifiable information matching only one record in the client database, removing the first personally identifiable information from the document and replacing the first personally identifiable information with a first client identifier reference;

in response to the first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and

in response to the first personally identifiable information matching none of the records in the client database, updating the client database with a new record and generating a new client identifier reference associated with the first personally identifiable information.

17. The method of claim 16 , further comprising:

retrieve all documents containing personally identifiable information associated with an individual; and

delete all documents containing personally identifiable information associated with the individual.

18. A non-transitory computer-readable medium containing instructions that when executed by one or more electronic processors cause the one or more electronic processors to:

store records in a client database, each of the records including personally identifiable information associated with at least one of a plurality of individuals and a client identifier reference associated with at least one of the plurality of individuals, the personally identifiable information accessible based on an authorization level associated with a user;

receive a document containing both non-personal data and personally identifiable information;

parse the document to determine the presence of personally identifiable information in the document;

determining, based on the records stored in the client database, one of the plurality of individuals associated with the personally identifiable information included in the document;

substitute the personally identifiable information included in the document with the client identifier reference stored in the client database corresponding to the one of the plurality of individuals;

generate a human-legible view of the document containing the client identifier reference corresponding to the one of the plurality of individuals;

in response to a first personally identifiable information matching only one record in the client database, removing the first personally identifiable information from the document and replacing the first personally identifiable information with a first client identifier reference;

in response to the first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and

in response to the first personally identifiable information matching none of the records in the client database, updating the client database with a new record and generating a new client identifier reference associated with the first personally identifiable information.

19. A computer system for protecting information associated with entities, the computer system comprising:

an electronic processor configured to

store a record in a client database, the record including personally identifiable information associated with an entity and a client identifier reference associated with the entity, the personally identifiable information accessible based on an authorization level associated with a user;

receive a document containing both non-personal data and personally identifiable information;

parse the document to determine the presence personally identifiable information in the document;

determine, based on the record stored in the client database, the entity associated with the personally identifiable information included in the document;

substitute the personally identifiable information included in the document with the client identifier reference stored in the client database corresponding to the entity;

generate a human-legible view of the document containing the client identifier reference corresponding to the entity;

in response to a first personally identifiable information matching only one record in the client database, removing the first personally identifiable information from the document and replacing the first personally identifiable information with a first client identifier reference;

in response to the first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and

in response to the first personally identifiable information matching none of the records in the client database, updating the client database with a new record and generating a new client identifier reference associated with the first personally identifiable information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 8, 2018
From: WOULFE, MUIRIS; BALZER, ANDREAS; MOWATT, DAVID
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 046030/0439 →
Continuity (1)
Related Publication 20190377900A1 · Dec 12, 2019
Cited By (3)
US 12,367,250 US 12,499,267 US 12,632,595