IP Library Granted Patent US 11,308,236
Granted Patent B2
US 11,308,236 · App. 16/991,221 · Granted Apr 19, 2022

Managing obfuscation of regulated sensitive data

Inventors: Rhonda L. Childress (Austin, TX); Michael Bender (Rye Brook, NY); Natalie Brooks Powell (Bolingbrook, IL); Evelyn R Anderson (Houston, TX)
Assignee: KYNDRYL, INC.
G06F21/6254G06F21/84H04L63/107H04L63/20G06F2221/032
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,308,236
App. No.
16/991,221
Granted
Apr 19, 2022
Kind
B2
Abstract

In an approach to managing obfuscation of regulated sensitive data, one or more computer processors detect content for display on a computing device. One or more computer processors analyze the content for sensitive data. One or more computer processors retrieve one or more applicable regulations, where the regulations are associated with displaying sensitive data. One or more computer processors determine a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations. One or more computer processors identify one or more context rules applicable to the sensitive data in the content. One or more computer processors determine the one or more context rules override the one or more applicable regulations. One or more computer processors display the sensitive data in the content.

Claims (90)

1. A method comprising:

detecting, by one or more computer processors, content for displaying on a display of a computing device;

analyzing, by one or more computer processors, the content for sensitive data based on obfuscation identifiers that include data that is used to identify a user of the computing device;

retrieving, by one or more computer processors, one or more applicable regulations, wherein the regulations are associated with data sharing and data privacy regulations associated with displaying the sensitive data;

determining, by one or more computer processors, a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations;

identifying, by one or more computer processor, one or more context rules associated with sensitive data of the user of the computing device, wherein the sensitive data of the user of the computing device is applicable to the sensitive data in the content;

determining, by one or more computer processors, whether the one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data; and

displaying, by one or more computer processors, the content in accordance with the determination of whether one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data.

2. The method of claim 1 , further comprising:

determining, by one or more computer processors, the one or more context rules do not override the one or more applicable regulations; and

obfuscating, by one or more computer processors, the sensitive data in the content.

3. The method of claim 1 , further comprising:

determining, by one or more computer processors, the one or more context rules override the one or more applicable regulations; and

displaying, by one or more computer processors, the sensitive data in the content.

4. The method of claim 1 , wherein retrieving the one or more applicable regulations further comprises:

retrieving, by one or more computer processors, one or more data privacy regulations;

based on the retrieved one or more data privacy regulations, generating, by one or more computer processors, a corpus of data privacy rules; and

storing, by one or more computer processors, the corpus of data privacy rules.

5. The method of claim 4 , wherein retrieving the one or more data privacy regulations further comprises:

determining, by the one or more computer processors, a geo-location of the computing device;

retrieving, by one or more computer processors, one or more data privacy regulations associated with the geo-location from one or more publicly available and trusted sources; and

retrieving, by one or more computer processors, one or more data privacy regulations from one or more corporate databases.

6. The method of claim 4 , further comprising, retrieving, by one or more computer processors, an origin of each of the one or more data privacy regulations.

7. The method of claim 1 , further comprising, monitoring, by one or more computer processors, a geo-location of the computing device to change applied data privacy regulations based on a change in the geo-location of the computing device.

8. The method of claim 1 , further comprising:

receiving, by one or more computer processors, the one or more obfuscation identifiers;

receiving, by one or more computer processors, the one or more context rules, wherein each of the one or more context rules is associated with at least one of the one or more obfuscation identifiers;

receiving, by one or more computer processors, priorities of the one or more context rules;

storing, by one or more computer processors, the received one or more obfuscation identifiers, the received one or more context rules, and the received priorities of the one or more context rules; and

resolving, by one or more computer processors, the one or more context rules and the one or more applicable regulations based on a location and a context of the user.

9. A computer program product comprising:

one or more computer readable storage media and program instructions collectively stored on the one or more computer readable storage media, the stored program instructions comprising:

program instructions to detect content for displaying on a display of a computing device;

program instructions to analyze the content for sensitive data based on obfuscation identifiers that include data that is used to identify a user of the computing device;

program instructions to determine a geo-location of the computing device;

program instructions to retrieve one or more applicable regulations associated with the geo-location, wherein the regulations are associated with data sharing and data privacy regulations associated with displaying the sensitive data;

program instructions to determine a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations;

program instructions to identify one or more context rules associated with sensitive data of the user of the computing device applicable to the sensitive data in the content, wherein the sensitive data of the user of the computing device is applicable to the sensitive data in the content;

program instructions to determine whether the one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data; and

program instructions to display the content in accordance with the determination of whether one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data.

10. The computer program product of claim 9 , the stored program instructions further comprising:

program instructions to determine the one or more context rules do not override the one or more applicable regulations; and

program instructions to obfuscate the sensitive data in the content.

11. The computer program product of claim 9 , the stored program instructions further comprising:

program instructions to determine the one or more context rules override the one or more applicable regulations; and

program instructions to display the sensitive data in the content.

12. The computer program product of claim 9 , wherein program instructions to retrieve the one or more applicable regulations comprise:

program instructions to retrieve one or more data privacy regulations;

based on the retrieved one or more data privacy regulations, program instructions to generate a corpus of data privacy rules; and

program instructions to store the corpus of data privacy rules.

13. The computer program product of claim 12 , wherein program instructions to retrieve the one or more data privacy regulations comprise:

program instructions to retrieve one or more data privacy regulations from one or more publicly available sources; and

program instructions to retrieve one or more data privacy regulations from one or more corporate databases.

14. The computer program product of claim 9 , the stored program instructions further comprising:

program instructions to receive the one or more obfuscation identifiers;

program instructions to receive the one or more context rules, wherein each of the one or more context rules is associated with at least one of the one or more obfuscation identifiers;

program instructions to receive priorities of the one or more context rules;

program instructions to store the received one or more obfuscation identifiers, the received one or more context rules, and the received priorities of the one or more context rules; and

program instructions to resolve the one or more context rules and the one or more applicable regulations based on a location and a context of the user.

15. A computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions collectively stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the stored program instructions comprising:

program instructions to detect content for displaying on a display of a computing device;

program instructions to analyze the content for sensitive data based on obfuscation identifiers that include a data, a text, or an image that is used to identify a user of the computing device;

program instructions to retrieve one or more applicable regulations, wherein the regulations are associated with data sharing and data privacy regulations associated with displaying the sensitive data;

program instructions to determine a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations;

program instructions to identify one or more context rules associated with sensitive data of the user of the computing device applicable to the sensitive data in the content, wherein the sensitive data of the user of the computing device is applicable to the sensitive data in the content;

program instructions to determine whether the one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data; and

program instructions to display the content in accordance with the determination of whether one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data.

16. The computer system of claim 15 , the stored program instructions further comprising:

program instructions to determine the one or more context rules do not override the one or more applicable regulations; and

program instructions to obfuscate the sensitive data in the content.

17. The computer system of claim 15 , the stored program instructions further comprising:

program instructions to determine the one or more context rules override the one or more applicable regulations; and

program instructions to display the sensitive data in the content.

18. The computer system of claim 15 , wherein program instructions to retrieve the one or more applicable regulations comprise:

program instructions to retrieve one or more data privacy regulations;

based on the retrieved one or more data privacy regulations, program instructions to generate a corpus of data privacy rules; and

program instructions to store the corpus of data privacy rules.

19. The computer system of claim 18 , wherein program instructions to retrieve the one or more data privacy regulations comprise:

program instructions to determine a geo-location of the computing device;

program instructions to retrieve one or more data privacy regulations associated with the geo-location from one or more publicly available and trusted sources; and

program instructions to retrieve one or more data privacy regulations from one or more corporate databases.

20. The computer system of claim 15 , the stored program instructions further comprising:

program instructions to receive the one or more obfuscation identifiers;

program instructions to receive the one or more context rules, wherein each of the one or more context rules is associated with at least one of the one or more obfuscation identifiers;

program instructions to receive priorities of the one or more context rules;

program instructions to store the received one or more obfuscation identifiers, the received one or more context rules, and the received priorities of the one or more context rules; and

program instructions to resolve the one or more context rules and the one or more applicable regulations based on a location and a context of the user.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 058213/0912 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 12, 2020
From: CHILDRESS, RHONDA L.; BENDER, MICHAEL; BROOKS POWELL, NATALIE; ANDERSON, EVELYN R
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 053469/0455 →