IP Library › Granted Patent US 11,610,002

Granted Patent B2

US 11,610,002 · App. 17/172,958 · Granted Mar 21, 2023

Data privacy awareness in workload provisioning

Inventors: Sergio Varga (Campinas, BR); Jørgen E. Borup (Rungsted Kyst, DK); Thiago Cesar Rotta (Campinas, BR); Marco Aurelio Stelmar Netto (São Paulo, BR); Kris Blöndal (Fornebu, NO)

G06F21/60 G06F9/505 G06F9/542 G06F21/30 H04W4/02 H04W4/50

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,610,002
App. No.: 17/172,958
Granted: Mar 21, 2023
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Data privacy information pertaining to particular data hosted by a first workload provisioned to a first location can be received. The first workload can be monitored to determine whether the first workload is accessed by a second workload, determine whether the second workload is indicated as being authorized, in the data privacy information, to access the particular data hosted by first workload, and determine whether the second workload has access to the particular data hosted by the first workload. If so, the first workload can be automatically provisioned to a second location to which provisioning of the first workload is allowed based on the data privacy information.

Claims (54)

1. A method, comprising:

receiving data privacy information pertaining to particular data hosted by a first set of operations provisioned to a first location;

monitoring the first set of operations, the monitoring the first set of operations comprising:

determining whether the first set of operations is accessed by a second set of operations;

responsive to determining that the first set of operations is accessed by the second set of operations, determining whether there is an issue with the second set of operations regarding data privacy accessing the particular data hosted by the first set of operations; and

responsive to determining that there is an issue with the second set of operations regarding data privacy accessing the particular data hosted by the first set of operations, automatically provisioning the first set of operations to a new location.

2. The method of claim 1 , further comprising:

responsive to determining that there is an issue with the second set of operations regarding data privacy accessing the particular data hosted by the first set of operations storing information about the first set of operations including information about the second set of operations that has access to the first set of operations and a manner in which the second set of operations accessed the particular data hosted by the first set of operations.

3. The method of claim 1 , further comprising:

responsive to determining that the second set of operations has access to the data hosted by the first set of operations, automatically communicating a notification to a system or compliance administrator indicating that the first set of operations has been accessed by an unauthorized set of operations, the notification comprising the information identifying the second set of operations and the manner in which the second set of operations accessed the particular data hosted by the first set of operations.

4. The method of claim 1 , further comprising:

selecting, using a location selector, the new location to where the first set of operations is allowed to be provisioned.

5. The method of claim 1 , wherein monitoring the first set of operations further comprises:

determining whether the first set of operations continues to be provisioned in an allowed location.

6. The method of claim 5 , wherein:

determining whether the first set of operations continues to be provisioned in the allowed location comprises determining whether the first set of operations has been moved from an original location or determining whether monitoring started after the first set of operations was already deployed.

7. The method of claim 5 , further comprising:

responsive to determining that the first set of operations has not continued to be provisioned to the allowed location, automatically provision the first set of operations to an other allowed location.

8. A system, comprising:

a processor programmed to initiate executable operations comprising:

receiving data privacy information pertaining to particular data hosted by a first set of operations provisioned to a first location;

monitoring the first set of operations, the monitoring the first set of operations comprising:

determining whether the first set of operations is accessed by a second set of operations;

9. The system of claim 8 , the executable operations further comprising:

responsive to determining that there is an issue with the second set of operations regarding data privacy accessing the particular data hosted by the first set of operations, storing information about the first set of operations including information about the second set of operations that has access to the first set of operations and a manner in which the second set of operations accessed the particular data hosted by the first set of operations.

10. The system of claim 8 , the executable operations further comprising:

11. The system of claim 8 , further comprising:

selecting, using a location selector, the new location to where the first set of operations is allowed to be provisioned.

12. The system of claim 8 , wherein monitoring the first set of operations further comprises:

determining whether the first set of operations continues to be provisioned in an allowed location.

13. The system of claim 12 , wherein:

14. The system of claim 12 , further comprising:

15. A computer program product, comprising:

a computer readable storage medium having program code stored thereon, the program code executable by a data processing system to initiate operations including:

receiving data privacy information pertaining to particular data hosted by a first set of operations provisioned to a first location;

monitoring the first set of operations, the monitoring the first set of operations comprising:

determining whether the first set of operations is accessed by a second set of operations;

responsive to determining that there is an issue with the second set of operations regarding data privacy accessing the particular data hosted by the first set of operations automatically provisioning the first set of operations to a new location.

16. The computer program product of claim 15 , wherein the program code is executable by the data processing system to initiate operations further comprising:

17. The computer program product of claim 15 , wherein the program code is executable by the data processing system to initiate operations further comprising:

18. The computer program product of claim 15 , further comprising:

selecting, using a location selector, the new location to where the first set of operations is allowed to be provisioned.

19. The computer program product of claim 18 , wherein

20. The computer program product of claim 18 , wherein:

Assignments (2)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 21, 2024

From: GREEN MARKET SQUARE LIMITED

To: WORKDAY, INC.

Reel/Frame 067801/0892 →

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 29, 2024

From: GREEN MARKET SQUARE LIMITED

To: WORKDAY, INC.

Reel/Frame 067556/0783 →

Continuity (3)

Continuation 16805859 · Mar 2, 2020

Continuation 16032893 · Jul 11, 2018

Related Publication 20210173942A1 · Jun 10, 2021

Cited By (1)

US 12,627,640