IP Library Granted Patent US 11,816,068
Granted Patent B2
US 11,816,068 · App. 17/318,866 · Granted Nov 14, 2023

Compliance monitoring for datasets stored at rest

Inventors: Luis Pablo Pabón (Sturbridge, MA); Taher Vohra (Sunnyvale, CA); Naveen Neelakantam (Mountain View, CA)
Assignee: Pure Storage, Inc.
G06F16/1734G06N20/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,816,068
App. No.
17/318,866
Granted
Nov 14, 2023
Kind
B2
Abstract

An illustrative method includes a monitoring system obtaining an attribute model for a dataset stored at rest within a storage system, the attribute model indicating one or more attributes of the dataset, determining, based on the attribute model, a compliance level of the dataset with a compliance ruleset associated with a compliance policy, and performing, based on the compliance level of the dataset with the compliance ruleset, an operation with respect to the dataset.

Claims (47)

1. A method comprising:

obtaining, by a monitoring system, an attribute model for a dataset stored at rest within a storage system, the attribute model indicating one or more attributes of the dataset, wherein one or more data attributes of a data item in the dataset includes one or more of a data type of the data item, an encryption information of the data item, an accessibility of the data item, a retention policy of the data item, or an operation log configuration associated with the data item;

determining, by the monitoring system based on the attribute model of the dataset without rescanning the dataset, that one or more data items in the dataset are noncompliant with a compliance ruleset;

determining, by the monitoring system based on the one or more data items being noncompliant with the compliance ruleset, a compliance level of the dataset with the compliance ruleset; and

performing, by the monitoring system based on the compliance level of the dataset with the compliance ruleset, an operation with respect to the dataset, wherein the performing of the operation includes:

determining that the compliance level of the dataset with the compliance ruleset satisfies a compliance level threshold; and

performing, based on the determining that the compliance level of the dataset satisfies the compliance level threshold, the operation with respect to the dataset.

2. The method of claim 1 , wherein:

the attribute model is generated by scanning the dataset.

3. The method of claim 1 , wherein:

the determining of the compliance level of the dataset is performed in response to detecting that a previous compliance ruleset is modified into the compliance ruleset.

4. The method of claim 1 , further comprising:

generating, by the monitoring system, the attribute model.

5. The method of claim 4 , wherein:

the generating of the attribute model is performed by scanning the dataset when the dataset is ingested into the storage system.

6. The method of claim 4 , wherein the generating of the attribute model includes:

determining, using a machine learning model, one or more data attributes of the one or more data items in the dataset.

7. The method of claim 1 , wherein the performing of the operation further includes one or more of:

presenting a noncompliance notification associated with the dataset;

presenting a recommendation including one or more remedial actions to conform the dataset with the compliance ruleset; or

automatically performing the one or more remedial actions for the dataset.

8. The method of claim 1 , further comprising:

determining, by the monitoring system based on the attribute model, an additional compliance level of the dataset with an additional compliance ruleset.

9. The method of claim 8 , wherein:

the performing of the operation with respect to the dataset is further based on the additional compliance level of the dataset with the additional compliance ruleset.

10. A system comprising:

a memory storing instructions; and

a processor communicatively coupled to the memory and configured to execute the instructions to:

obtain an attribute model for a dataset stored at rest within a storage system, the attribute model indicating one or more attributes of the dataset, wherein one or more data attributes of a data item in the dataset includes one or more of a data type of the data item, an encryption information of the data item, an accessibility of the data item, a retention policy of the data item, or an operation log configuration associated with the data item;

determine, based on the attribute model of the dataset without rescanning the dataset, that one or more data items in the dataset are noncompliant with a compliance ruleset;

determine, based on the one or more data items being noncompliant with the compliance ruleset, a compliance level of the dataset with the compliance ruleset; and

perform, based on the compliance level of the dataset with the compliance ruleset, an operation with respect to the dataset, wherein the performing of the operation includes:

determining that the compliance level of the dataset with the compliance ruleset satisfies a compliance level threshold; and

performing, based on the determining that the compliance level of the dataset satisfies the compliance level threshold, the operation with respect to the dataset.

11. The system of claim 10 , wherein:

the attribute model is generated by scanning the dataset.

12. The system of claim 10 , wherein the processor is further configured to execute the instructions to:

generate the attribute model.

13. The system of claim 12 , wherein the generating of the attribute model includes:

determining, using a machine learning model, one or more data attributes of one or more data items in the dataset.

14. A non-transitory computer-readable medium storing instructions that, when executed, direct a processor of a computing device to:

obtain an attribute model for a dataset stored at rest within a storage system, the attribute model indicating one or more attributes of the dataset, wherein one or more data attributes of a data item in the dataset includes one or more of a data type of the data item, an encryption information of the data item, an accessibility of the data item, a retention policy of the data item, or an operation log configuration associated with the data item;

determine, based on the attribute model of the dataset without rescanning the dataset, that one or more data items in the dataset are noncompliant with a compliance ruleset;

determine, based on the one or more data items being noncompliant with the compliance ruleset, a compliance level of the dataset with the compliance ruleset; and

perform, based on the compliance level of the dataset with the compliance ruleset, an operation with respect to the dataset, wherein the performing of the operation includes:

determining that the compliance level of the dataset with the compliance ruleset satisfies a compliance level threshold; and

performing, based on the determining that the compliance level of the dataset satisfies the compliance level threshold, the operation with respect to the dataset.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 12, 2021
From: PABÓN, LUIS PABLO; VOHRA, TAHER; NEELAKANTAM, NAVEEN
To: PURE STORAGE, INC., A DELAWARE CORPORATION
Reel/Frame 056220/0886 →
Continuity (1)
Related Publication 20220365908A1 · Nov 17, 2022