IP Library › Granted Patent US 11,556,670
Granted Patent B2
US 11,556,670 · App. 17/203,856 · Granted Jan 17, 2023

System and method of granting access to data of a user

Inventors: Andrey A. Efremov (Moscow, RU); Dmitry V. Shmoylov (Moscow, RU); Pavel V. Filonov (Moscow, RU); Dmitry G. Ivanov (Moscow, RU)
Assignee: AO Kaspersky Lab
G06F21/6254
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,556,670
App. No.
17/203,856
Granted
Jan 17, 2023
Kind
B2
Abstract

Disclosed herein are systems and methods for granting access to data of a user. In one aspect, an exemplary method comprises, blocking the processing of data of a user, transferring the data of the user to a storage device, receiving a request for data processing from a collected data processor of a device, redirecting the received request to the storage device, determining, by the storage device, data access rights for the collected data processor of the device from which the request for data processing is received in accordance with data access rights established by a data access rights manager, and providing access to the data in accordance with the determined data access rights.

Claims (63)

1. A method for granting access to data of a user, the method comprising:

blocking the processing of data of a user;

transferring the data of the user to a storage device;

receiving a request for data processing from a collected data processor of a device;

redirecting the received request to the storage device;

managing, by the storage device, data access rights for the collected data processor of the device from which the request for data processing is received in accordance with data access rights established by a data access rights manager, wherein the management of the data access rights comprises formulating rights of the collected data processors to access data, withdrawing data access rights from the collected data processors, and creating lists of collected data processors that are permitted to access the data; and

providing access to the data in accordance with the data access rights.

2. The method of claim 1 , further comprising:

detecting an absence of the requested data; and

transferring information about the absent data to the storage device.

3. The method of claim 1 , wherein the transferring of the data of the user to the storage device is performed through at least one of a route modifier and an anonymizer,

wherein the route modifier analyzes the data in fields of data structure received from a data collector, divide the data structure into substructures in order to determine the state of the data, and select the route for sending data to the storage device for the resulting substructure, and

wherein the anonymizer anonymizes user identifiers.

4. The method of claim 1 , wherein the request is processed without redirecting to the storage device when the collected data processor is on the list of trusted devices or when the request is related to a basic functionality accepted by a user device.

5. The method of claim 1 , wherein the blocking of the processing includes blocking at least one of:

mobile and web tracking;

collecting geolocation information;

collecting search queries; and

collecting registration data.

6. The method of claim 1 , wherein the blocking of the processing of the data blocks the processing by the collected data processor of an external device.

7. The method of claim 1 , wherein the request for data processing is received from the collected data processor implicitly by a blocker or directly by the data access rights manager, and wherein when the request is received by the blocker, the request is forwarded to the data access rights manager.

8. A system for granting access to data of a user, comprising:

at least one hardware processor configured to:

block the processing of data of a user;

transfer the data of the user to a storage device;

receive a request for data processing from a collected data processor of a device;

redirect the received request to the storage device;

manage, by the storage device, data access rights for the collected data processor of the device from which the request for data processing is received in accordance with data access rights established by a data access rights manager, wherein the management of the data access rights comprises formulating rights of the collected data processors to access data, withdrawing data access rights from the collected data processors, and creating lists of collected data processors that are permitted to access the data; and

provide access to the data in accordance with the data access rights.

9. The system of claim 8 , wherein the hardware processor is further configured to:

detect an absence of the requested data; and

transfer information about the absent data to the storage device.

10. The system of claim 8 , wherein the transferring of the data of the user to the storage device is performed through at least one of a route modifier and an anonymizer,

wherein the route modifier analyzes the data in fields of data structure received from a data collector, divide the data structure into substructures in order to determine the state of the data, and select the route for sending data to the storage device for the resulting substructure, and

wherein the anonymizer anonymizes user identifiers.

11. The system of claim 8 , wherein the request is processed without redirecting to the storage device when the collected data processor is on the list of trusted devices or when the request is related to a basic functionality accepted by a user device.

12. The system of claim 8 , wherein the blocking of the processing includes blocking at least one of:

mobile and web tracking;

collecting geolocation information;

collecting search queries; and

collecting registration data.

13. The system of claim 8 , wherein the blocking of the processing of the data blocks the processing by the collected data processor of an external device.

14. The system of claim 8 , wherein the request for data processing is received from the collected data processor implicitly by a blocker or directly by the data access rights manager, and wherein when the request is received by the blocker, the request is forwarded to the data access rights manager.

15. A non-transitory computer readable medium storing thereon computer executable instructions for granting access to data of a user, including instructions for:

blocking the processing of data of a user;

transferring the data of the user to a storage device;

receiving a request for data processing from a collected data processor of a device;

redirecting the received request to the storage device;

managing, by the storage device, data access rights for the collected data processor of the device from which the request for data processing is received in accordance with data access rights established by a data access rights manager, wherein the management of the data access rights comprises formulating rights of the collected data processors to access data, withdrawing data access rights from the collected data processors, and creating lists of collected data processors that are permitted to access the data; and

providing access to the data in accordance with the data access rights.

16. The non-transitory computer readable medium of claim 15 , the instructions further comprising instructions for:

detecting an absence of the requested data; and

transferring information about the absent data to the storage device.

17. The non-transitory computer readable medium of claim 15 , wherein the transferring of the data of the user to the storage device is performed through at least one of a route modifier and an anonymizer,

wherein the route modifier analyzes the data in fields of data structure received from a data collector, divide the data structure into substructures in order to determine the state of the data, and select the route for sending data to the storage device for the resulting substructure, and

wherein the anonymizer anonymizes user identifiers.

18. The non-transitory computer readable medium of claim 15 , wherein the request is processed without redirecting to the storage device when the collected data processor is on the list of trusted devices or when the request is related to a basic functionality accepted by a user device.

19. The non-transitory computer readable medium of claim 15 , wherein the blocking of the processing includes blocking at least one of: mobile and web tracking;

collecting geolocation information;

collecting search queries; and

collecting registration data.

20. The non-transitory computer readable medium of claim 15 , wherein the blocking of the processing of the data blocks the processing by the collected data processor of an external device.

21. The non-transitory computer readable medium of claim 15 , wherein the request for data processing is received from the collected data processor implicitly by a blocker or directly by the data access rights manager, and wherein when the request is received by the blocker, the request is forwarded to the data access rights manager.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 17, 2021
From: EFREMOV, ANDREY A; SHMOYLOV, DMITRY V; FILONOV, PAVEL V
To: AO KASPERSKY LAB
Reel/Frame 055616/0430 →
Priority Claims (1)
RU RU2020131454 · Sep 24, 2020 · national
Continuity (1)
Related Publication 20220092218A1 · Mar 24, 2022