Granted Patent B2

US 12,242,633 · App. 17/658,797 · Granted Mar 4, 2025

Inventors: Pierpaolo Tommasi (Dublin, IE); Marco Simioni (Dublin, IE); Stephane Deparis (Dublin, IE)

Assignee: International Business Machines Corporation

G06F21/6227

Abstract

Claims (57)

1. A method, by a processor, for providing enhanced data protection for storage systems in a computing environment, comprising:

identifying one or more queries received by a storage system;

fetching metadata comprising a geographical position of a user issuing the one or more queries;

defining each of the plurality of rules and administrative policies, wherein the plurality of rules or administrative policies apply operations which comprise legal, ethical, moral, or jurisdictional rules or policies, and wherein the defining further comprises:

defining the plurality of rules and administrative policies to one or more operations to perform for preserving data security; and

applying the plurality of rules and administrative policies to a write operation or a read operation using a machine learning operation;

parsing, concurrently to fetching the metadata, the one or more queries;

regulating approval or denial of transmission of data responsive to the one or more queries from the storage system a plurality of rules and administrative policies; and

in response to approval of the transmission, transmitting the data.

2. The method of claim 1 , wherein the metadata is further selected from a group consisting of a query history, geographical positions of one or more servers, and privacy data.

3. The method of claim 1 , further including suggesting one or more additional rules and administrative policies to update or replace one or more of the plurality of rules and administrative policies.

4. The method of claim 1 , further including allowing the transmission of the data based on feedback data.

5. The method of claim 1 , further including:

identifying one or more data patterns, user behavior patterns, or a combination thereof; and

providing one or more alerts suggesting one or more additional rules and administrative policies based on the one or more data patterns, the user behavior patterns, or a combination thereof.

6. The method of claim 1 , further including:

monitoring and tracking the data associated with the storage system; and

learning one or more data patterns, user behavior patterns, rules and administrative policies, and metadata a machine learning operation.

7. A system providing enhanced data protection for storage systems in a computing environment, comprising:

one or more computers with executable instructions that when executed cause the system to:

identify one or more queries received by a storage system; and

fetch metadata comprising a geographical position of a user issuing the one or more queries;

define each of the plurality of rules and administrative policies, wherein the plurality of rules or administrative policies apply operations which comprise legal, ethical, moral, or jurisdictional rules or policies, and wherein the defining further comprises:

define the plurality of rules and administrative policies to one or more operations to perform for preserving data security; and

apply the plurality of rules and administrative policies to a write operation or a read operation using a machine learning operation;

parse, concurrently to fetching the metadata, the one or more queries;

regulate approval or denial of transmission of data responsive to the one or more queries from the storage system a plurality of rules and administrative policies; and

in response to approval of the transmission, transmit the data.

8. The system of claim 7 , wherein the metadata is further selected from a group consisting of a query history, geographical positions of one or more servers, and privacy data.

9. The system of claim 7 , wherein the executable instructions when executed cause the system to suggest one or more additional rules and administrative policies to update or replace one or more of the plurality of rules and administrative policies.

10. The system of claim 7 , wherein the executable instructions when executed cause the system to allow the transmission of the data based on feedback data.

11. The system of claim 7 , wherein the executable instructions when executed cause the system to:

identify one or more data patterns, user behavior patterns, or a combination thereof; and

provide one or more alerts suggesting one or more additional rules and administrative policies based on the one or more data patterns, the user behavior patterns, or a combination thereof.

12. The system of claim 7 , wherein the executable instructions when executed cause the system to:

monitor and tracking the data associated with the storage system; and

learn one or more data patterns, user behavior patterns, rules and administrative policies, and metadata a machine learning operation.

13. A computer program product for providing enhanced data protection for storage systems in a computing environment, the computer program product comprising:

one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instruction comprising:

program instructions to identify one or more queries received by a storage system; and

program instructions to fetch metadata comprising a geographical position of a user issuing the one or more queries;

program instructions to define each of the plurality of rules and administrative policies, wherein the plurality of rules or administrative policies apply operations which comprise legal, ethical, moral, or jurisdictional rules or policies, and wherein the defining further comprises:

program instructions to define the plurality of rules and administrative policies to one or more operations to perform for preserving data security; and

program instructions to apply the plurality of rules and administrative policies to a write operation or a read operation using a machine learning operation;

program instructions to parse, concurrently to fetching the metadata, the one or more queries;

program instructions to regulate approval or denial of transmission of data responsive to the one or more queries from the storage system a plurality of rules and administrative policies; and

in response to approval of the transmission, program instructions to transmit the data.

14. The computer program product of claim 13 , wherein the metadata is further selected from a group consisting of a query history, geographical positions of one or more servers, and privacy data.

15. The computer program product of claim 13 , further including program instructions to:

suggest one or more additional rules and administrative policies to update or replace one or more of the plurality of rules and administrative policies.

16. The computer program product of claim 13 , further including program instructions to allow the transmission of the data based on feedback data.

17. The computer program product of claim 13 , further including program instructions to:

identify one or more data patterns, user behavior patterns, or a combination thereof; and

provide one or more alerts suggesting one or more additional rules and administrative policies based on the one or more data patterns, the user behavior patterns, or a combination thereof.

18. The computer program product of claim 13 , further including program instructions to:

monitor and tracking the data associated with the storage system; and

learn one or more data patterns, user behavior patterns, rules and administrative policies, and metadata a machine learning operation.

Assignments (1)

Continuity (1)

References Cited (22)