Granted Patent B2

US 11,494,272 · App. 16/866,145 · Granted Nov 8, 2022

Inventors: Simon Zhang (Chengdu, CN); Leon Qianyun Cheng (Chengdu, CN)

Assignee: EMC IP HOLDING COMPANY LLC

G06F11/1458G06F16/2246G06F16/285G06N5/003G06N5/04G06N20/00G06F2201/80

Abstract

Claims (67)

1. A computer-implemented method for data protection, comprising:

determining, by a processing unit, objects to be protected by a protection policy that are selected by a user in a set of objects;

generating, by the processing unit, one or more filtering conditions based on an analysis of the objects selected by the user; and

setting the protection policy for objects not selected by the user meeting the one or more filtering conditions in the set of objects,

wherein generating the one or more filtering conditions comprises:

determining the objects not selected by the user in the set of objects;

performing unsupervised clustering on the objects not selected by the user to obtain a plurality of classes and objects corresponding to each of the classes; and

generating a data set for creating a decision tree based on the plurality of classes of the objects not selected by the user and a reserved class of the objects selected by the user.

2. The method of claim 1 , further comprising:

obtaining a new object;

determining whether the new object meets the one or more filtering conditions; and

setting the protection policy for the new object responsive to determining that the new object meets the one or more filtering conditions.

3. The method of claim 1 , wherein generating the one or more filtering conditions further comprises:

generating a decision tree by supervised classification based on the data set; and

generating the one or more filtering conditions based on a path from a leaf node corresponding to the reserved class to a root node in the decision tree.

4. The method of claim 3 , wherein generating the decision tree by supervised classification comprises:

generating the decision tree by using a classification and regression tree (CART) algorithm; and

splitting the decision tree based on the data set until a stop condition is met, the stop condition being that if the decision tree is split again, the objects selected by the user will be assigned to different leaf nodes in the decision tree.

5. The method of claim 1 , wherein setting the protection policy comprises:

determining the objects not selected by the user meeting the one or more filtering conditions in the set of objects; and

reminding the user, based on a comparison between the objects not selected by the user meeting the one or more filtering conditions and the objects selected by the user, whether one or more objects are missed in the selection.

6. The method of claim 1 , wherein generating the one or more filtering conditions comprises:

presenting the generated one or more filtering conditions to the user; and

receiving adjustment of the one or more filtering conditions by the user.

7. The method of claim 1 , wherein each of the one or more filtering conditions comprises an object attribute, a logical operator, and a comparison value, and a dynamic filter is formed for the one or more filtering conditions of the protection policy and the protection policy.

8. An electronic device, comprising:

a processing unit; and

a memory coupled to the processing unit and having instructions stored thereon, wherein when the instructions are executed by the processing unit, the following actions are performed:

determining objects to be protected by a protection policy that are selected by a user in a set of objects;

generating one or more filtering conditions based on an analysis of the objects selected by the user; and

setting the protection policy for objects not selected by the user meeting the one or more filtering conditions in the set of objects,

wherein generating the one or more filtering conditions comprises:

determining the objects not selected by the user in the set of objects;

performing unsupervised clustering on the objects not selected by the user to obtain a plurality of classes and objects corresponding to each of the classes; and

generating a data set for creating a decision tree based on the plurality of classes of the objects not selected by the user and a reserved class of the objects selected by the user.

9. The device of claim 8 , wherein the actions further comprise:

obtaining a new object;

determining whether the new object meets the one or more filtering conditions; and

setting the protection policy for the new object responsive to determining that the new object meets the one or more filtering conditions.

10. The device of claim 8 , wherein generating the one or more filtering conditions further comprises:

generating a decision tree by supervised classification based on the data set; and

generating the one or more filtering conditions based on a path from a leaf node corresponding to the reserved class to a root node in the decision tree.

11. The device of claim 10 , wherein generating the decision tree by supervised classification comprises:

generating the decision tree by using a classification and regression tree (CART) algorithm; and

splitting the decision tree based on the data set until a stop condition is met, the stop condition being that if the decision tree is split again, the objects selected by the user will be assigned to different leaf nodes in the decision tree.

12. The device of claim 8 , wherein setting the protection policy comprises:

determining the objects not selected by the user meeting the one or more filtering conditions in the set of objects; and

reminding the user, based on a comparison between the objects not selected by the user meeting the one or more filtering conditions and the objects selected by the user, whether one or more objects are missed in the selection.

13. The device of claim 8 , wherein generating the one or more filtering conditions comprises:

presenting the generated one or more filtering conditions to the user; and

receiving adjustment of the one or more filtering conditions by the user.

14. The device of claim 8 , wherein each of the one or more filtering conditions comprises an object attribute, a logical operator, and a comparison value, and a dynamic filter is formed for the one or more filtering conditions of the protection policy and the protection policy.

15. A computer program product tangibly stored in a non-transitory computer-readable medium and comprising computer-executable instructions, wherein when executed, the computer-executable instructions cause a computer to perform operations, the operations comprising:

determining objects to be protected by a protection policy that are selected by a user in a set of objects;

generating one or more filtering conditions based on an analysis of the objects selected by the user; and

setting the protection policy for objects not selected by the user meeting the one or more filtering conditions in the set of objects,

wherein generating the one or more filtering conditions comprises:

determining the objects not selected by the user in the set of objects;

performing unsupervised clustering on the objects not selected by the user to obtain a plurality of classes and objects corresponding to each of the classes; and

generating a data set for creating a decision tree based on the plurality of classes of the objects not selected by the user and a reserved class of the objects selected by the user.

16. The computer program product of claim 15 , wherein the operations further comprise:

obtaining a new object;

determining whether the new object meets the one or more filtering conditions; and

setting the protection policy for the new object responsive to determining that the new object meets the one or more filtering conditions.

17. The computer program product of claim 15 , wherein generating the one or more filtering conditions further comprises:

generating a decision tree by supervised classification based on the data set; and

generating the one or more filtering conditions based on a path from a leaf node corresponding to the reserved class to a root node in the decision tree.

Assignments (9)

Priority Claims (1)

Continuity (1)