Partial masking, deleting, and watermarking of resources based on confidentiality and clearance levels
Based on a user request to access a resource, confidentiality scores for data of various data types associated with the resource are determined. Using these confidentiality scores and clearance scores for a corresponding user, for each of the data types, first and second criteria are applied for each data type and corresponding clearance score and confidentiality level. The first criteria is whether a difference between a figure of merit for the clearance score and a figure of merit for the confidentiality score is above a threshold and the second criteria is whether a difference between the clearance score and the confidentiality score is above a separate threshold. If any of the first criteria are satisfied for a data type, the request is blocked, whereas if any of the second criteria are satisfied for a data type, corresponding data for the resource is masked, watermarked, or deleted.
1 . A method comprising:
determining one or more clearance levels for a user, wherein the one or more clearance levels correspond to one or more data types; and
based on a request by the user at a browser to access a resource,
determining one or more confidentiality levels for the resource corresponding to the one or more data types;
for each confidentiality level in the one or more confidentiality levels and each clearance level in the one or more clearance levels corresponding to a data type in the one or more data types,
based on the confidentiality level and the clearance level satisfying a first criterion, blocking the request, wherein the first criterion comprises a criterion that a difference of a first figure of merit for confidentiality of the data type for the resource and a second figure of merit for clearance of the user for the data type is above a first threshold; and
based on the confidentiality level and the clearance level satisfying a second criterion, at least one of masking, deleting, and watermarking data for the data type associated with the resource, wherein the second criterion comprises a criterion that a difference of the confidentiality level and the clearance level is above a second threshold; and
based on the first criterion not being satisfied for each of the one or more data types, allowing the request.
2 . The method of claim 1 , further comprising adjusting the one or more clearance levels based on one or more anomalies observed for the user in an operating environment.
3 . The method of claim 2 , wherein the one or more anomalies comprise changes in values for key performance indicators of the user.
4 . The method of claim 3 , wherein the values for key performance indicators of the user comprise at least one of user typing patterns, patterns for use of data by the user, and user response time.
5 . The method of claim 1 , wherein the one or more data types comprise image data, text data, and audio data.
6 . The method of claim 1 , wherein determining the one or more confidentiality levels for the resource comprises determining one or more data classes for data associated with the resource.
7 . The method of claim 6 , wherein the one or more data classes comprise at least one of marketing data, financial data, technical data, and research and development data.
8 . A non-transitory machine-readable medium having program code stored thereon, the program code comprising instructions to:
determine one or more clearance levels for a user, wherein the one or more clearance levels correspond to one or more data types; and
based on a request by the user at a browser to access a resource,
determine one or more confidentiality levels for the resource corresponding to the one or more data types;
for each confidentiality level in the one or more confidentiality levels and each clearance level in the one or more clearance levels corresponding to a data type in the one or more data types,
based on the confidentiality level and the clearance level satisfying a first criterion, block the request, wherein the first criterion comprises a criterion that a difference of a first figure of merit for confidentiality of the data type for the resource and a second figure of merit for clearance of the user for the data type is above a first threshold; and
based on the confidentiality level and the clearance level satisfying a second criterion, at least one of mask, delete, and watermark data for the data type associated with the resource, wherein the second criterion comprises a criterion that a difference of the confidentiality level and the clearance level is above a second threshold; and
based on the first criterion not being satisfied for each of the one or more data types, allow the request.
9 . The non-transitory machine-readable medium of claim 8 , wherein the program code further comprises instructions to adjust the one or more clearance levels based on one or more anomalies observed for the user in an operating environment.
10 . The non-transitory machine-readable medium of claim 9 , wherein the one or more anomalies comprise changes in values for key performance indicators of the user.
11 . The non-transitory machine-readable medium of claim 10 , wherein the values for key performance indicators of the user comprise at least one of user typing patterns, patterns for use of data by the user, and user response time.
12 . The non-transitory machine-readable medium of claim 8 , wherein the one or more data types comprise image data, text data, and audio data.
13 . The non-transitory machine-readable medium of claim 8 , wherein the instructions to determine the one or more confidentiality levels for the resource comprise instructions to determine one or more data classes for data associated with the resource.
14 . The non-transitory machine-readable medium of claim 13 , wherein the one or more data classes comprise at least one of marketing data, financial data, technical data, and research and development data.
15 . An apparatus comprising:
a processor; and
a machine-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
maintain a profile for a user, wherein the profile comprises one or more clearance levels for the user, wherein the one or more clearance levels correspond to one or more data types; and
based on a request by the user at a browser to access a resource,
determine one or more confidentiality levels for the resource corresponding to the one or more data types;
for each confidentiality level in the one or more confidentiality levels and each clearance level in the one or more clearance levels corresponding to a data type in the one or more data types,
based on the confidential level and the clearance level satisfying a first criterion, block the request, wherein the first criterion comprises a criterion that a difference of a first figure of merit for confidentiality of the data type for the resource and a second figure of merit for clearance of the user for the data type is above a first threshold; and
based on the confidentiality level and the clearance level satisfying a second criterion, at least one of mask, delete, and watermark data for the data type associated with the resource, wherein the second criterion comprises a criterion that a difference of the confidentiality level and the clearance level is above a second threshold; and
based on the first criterion not being satisfied for each of the one or more data types, allow the request.
16 . The apparatus of claim 15 , wherein the machine-readable medium further has stored thereon instructions executable by the processor to cause the apparatus to adjust the one or more clearance levels based on one or more anomalies observed for the user in an operating environment.
17 . The apparatus of claim 16 , wherein the one or more anomalies comprise changes in values for key performance indicators of the user.
18 . The apparatus of claim 17 , wherein the values for key performance indicators of the user comprise at least one of user typing patterns, patterns for use of data by the user, and user response time.
19 . The apparatus of claim 15 , wherein the one or more data types comprise image data, text data, and audio data.
20 . The apparatus of claim 15 , wherein the instructions to determine the one or more confidentiality levels for the resource comprise instructions executable by the processor to cause the apparatus to determine one or more data classes for data associated with the resource, wherein the one or more data classes comprise at least one of marketing data, financial data, technical data, and research and development data.