System and method for backup data discrimination
A remote agent for providing data protection services includes persistent storage and a backup orchestrator. The persistent storage stores lifecycle policies. The backup orchestrator instantiates a backup agent in a client in response to a backup generation for the client, the backup generation is specified by the lifecycle policies; using the backup agent: generating a backup including backup data for the client and backup metadata that associates portions of the backup data with respective persons; and storing the backup in backup storage based on the lifecycle policies.
1. A remote agent for providing data protection services to clients, comprising:
persistent storage for storing:
lifecycle policies that specify when backups of the clients are to be generated; and
privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information;
a backup orchestrator programmed to:
instantiate a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies; and
using the backup agent:
generate a backup using the privacy policies comprising:
backup data for the client,
data tags for the client, and
backup metadata that associates portions of the backup data with respective persons; and
store the backup in backup storage based on the lifecycle policies,
wherein generating data tags for the client comprises:
for a first portion of client data of the client:
identifying that the first portion of the client data includes personal information of a person of the persons based on the privacy policies;
generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons;
for a second portion of client data of the client:
identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies; and
generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
2. The remote agent of claim 1 , wherein generating the backup using the privacy policies comprises:
generating the backup data;
generating the backup metadata based on the data tags; and
aggregating the backup data and the backup metadata to obtain the backup.
3. The remote agent of claim 1 , wherein generating the data tags for the client comprises:
for a third portion of client data of the client:
identifying a second person of the persons that repeatedly accessed the third portion of the client data based on system metadata of the client; and
generating a third data tag of the data tags indicating that the third portion of the client data is associated with the second person of the persons that repeatedly accessed the third portion of the client data.
4. The remote agent of claim 1 , wherein generating data tags for the client comprises:
for a third portion of client data of the client:
identifying that the third portion of the client data is publicly available; and
generating a third data tag of the data tags indicating that the third portion of the client data does not include the personal information of the person of the persons.
5. The remote agent of claim 1 , wherein generating data tags for the client comprises:
making a determination that a third portion of client data of the client is an aggregate data structure;
in response to the determination:
identifying sub-portions of the third portion of the client data; and
generating a portion of the data tags indicating associations between portions of the client data and corresponding sub-portions of the third portion of the client data.
6. The remote agent of claim 1 , wherein the backup metadata comprises:
a first entry that associates third portion of the backup data and a plurality of persons of the persons.
7. The remote agent of claim 6 , wherein the backup metadata further comprises:
a second entry that specifies that a fourth portion of the backup data is only associated with a single person of the persons.
8. The remote agent of claim 6 , wherein the backup metadata further comprises:
a second entry that associates a sub-portion of the third portion of the backup data and a second plurality of persons of the persons.
9. The remote agent of claim 8 , wherein the sub-portion of the third portion of the backup data is a smallest addressable data unit of a database.
10. A method for providing data protection services to clients based on lifecycle policies that specify when backups of the clients are to be generated and privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information, comprising:
instantiating a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies;
using the backup agent:
generating a backup using the privacy policies comprising:
backup data for the client,
data tags for the client, and
backup metadata that associates portions of the backup data with respective persons; and
storing the backup in backup storage based on the lifecycle policies,
wherein generating data tags for the client comprises:
for a first portion of client data of the client:
identifying that the first portion of the client data includes personal information of a person of the persons based on the privacy policies; and
generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons; and
for a second portion of client data of the client:
identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies; and
generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
11. The method of claim 10 , wherein generating the backup using the privacy policies comprises:
generating the backup data;
generating the backup metadata based on the data tags; and
aggregating the backup data and the backup metadata to obtain the backup.
12. The method of claim 10 , wherein generating the data tags for the client comprises:
for a third portion of client data of the client:
identifying a second person of the persons that repeatedly accessed the third portion of the client data based on system metadata of the client; and
generating a third data tag of the data tags indicating that the third portion of the client data is associated with the second person of the persons that repeatedly accessed the third portion of the client data.
13. The method of claim 10 , wherein generating data tags for the client comprises:
for a third portion of client data of the client:
identifying that the third portion of the client data is publicly available; and
generating a third data tag of the data tags indicating that the third portion of the client data does not include the personal information of the person of the persons.
14. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for providing data protection services to clients based on lifecycle policies that specify when backups of the clients are to be generated and privacy policies that specify a classification system for data of the clients which discriminates portions of the data of the clients that comprise personal information from other portions of the data of the clients that do not comprise personal information, the method comprising:
instantiating a backup agent in a client of the clients in response to a backup generation for the client, wherein the backup generation is specified by the lifecycle policies; and
using the backup agent:
generating a backup using the privacy policies comprising:
backup data for the client,
data tags for the client, and
backup metadata that associates portions of the backup data with respective persons; and
storing the backup in backup storage based on the lifecycle policies,
wherein generating data tags for the client comprises:
for a first portion of client data of the client:
identifying that the portion of the client data includes personal information of a person of the persons based on the privacy policies;
generating a first data tag of the data tags comprising information indicating that the first portion of the client data is confidential, wherein the first data tag further comprises a first data portion identifier identifying the first portion of the client data and person association information including the personal information of the person of the persons;
for a second portion of client data of the client:
identifying that the second portion of the client data does not include the personal information of the person of the persons based on the privacy policies; and
generating a second data tag of the data tags comprising information indicating a confidentiality status of the second portion of the client data that does not include the personal information of the person of the persons, wherein the second data tag further comprises a second data portion identifier identifying the second portion of the client data and the person association information including the personal information of the person of the persons.
15. The non-transitory computer readable medium of claim 14 , wherein generating the backup using the privacy policies comprises:
generating the backup data;
generating the backup metadata based on the data tags; and
aggregating the backup data and the backup metadata to obtain the backup.
16. The non-transitory computer readable medium of claim 14 , wherein generating data tags for the client comprises:
for a third portion of client data of the client:
identifying a second person of the persons that repeatedly accessed the third portion of the client data based on system metadata of the client; and
generating a third data tag of the data tags indicating that the third portion of the client data is associated with the second person of the persons that repeatedly accessed the third portion of the client data.
17. The non-transitory computer readable medium of claim 14 , wherein generating data tags for the client comprises:
for a third portion of client data of the client:
identifying that the third portion of the client data is publicly available; and
generating a third data tag of the data tags indicating that the third portion of the client data does not include the personal information of the person of the persons.