IP Library › Granted Patent US 11,463,416
Granted Patent B1
US 11,463,416 · App. 16/713,804 · Granted Oct 4, 2022

Automatic detection of personal information in cloud-based infrastructure configurations

Inventors: Kevin Ashman (Renton, WA); Charles Andrew Schuetz (Piedmont, CA)
Assignee: Amazon Technologies, Inc.
H04L63/0421G06F21/6245H04L67/133H04L67/306H04L67/34H04L67/565
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,463,416
App. No.
16/713,804
Granted
Oct 4, 2022
Kind
B1
Abstract

Devices, systems, and methods are provided detecting personal information in cloud-based infrastructure configuration. A method may include sending, by a computer-based system, a first request to a first service associated with the computer-based system, the first request associated with first application programming interface (API) call data. The method may include receiving the first API call data from the first service. The method may include determining, based on the first API call data, first data associated with the first service, and determining that the first data includes personal information. The method may include sending a message to a device, the message indicative of the personal information. The method may include receiving a second request to modify the first data, and modifying the first data based on the second request.

Claims (59)

1. A method comprising:

sending, by a computer-based system, a first request to a first service associated with the computer-based system, the first request associated with first application programming interface (API) call data;

sending a second request to a second service associated with the computer-based system, the second request associated with second API call data;

receiving the first API call data from the first service;

receiving the second API call data from the second service;

determining, based on a first payload of the first API call data, first data associated with a first configuration of the first service;

determining, based on a second payload of the second API call data, second data associated with a second configuration of the second service;

determining that the first data includes personal information;

determining an absence of personal information in the second data;

sending a message to a device, the message indicative of the personal information;

receiving a third request to delete the first data; and

replacing the first data with third data based on the third request.

2. The method of claim 1 , further comprising receiving a computer function from the device, the computer function including a deletion of the first data, wherein replacing the first data comprises executing the computer function.

3. The method of claim 1 , further comprising determining that the first data includes a modification to the third data, the third data associated with third API call data received from the first service prior to receiving the first API call data, wherein determining that the first data include the personal information is based on the modification.

4. The method of claim 1 , further comprising receiving a look-up table associated with the first data and the third data, wherein replacing the first data is based on the look-up table.

5. A method comprising:

receiving, by a computer-based system, first application programming interface (API) call data from a first service associated with the computer-based system;

receiving second API call data from a second service associated with the computer-based system;

determining, based on the first API call data, first data associated with the first service, wherein the first API call data are associated with the first data being included in configuration data of the first service;

determining that the first data includes personal information;

determining second data, wherein the personal information is absent from the second data;

determining, based on the second API call data, third data associated with the second service, wherein the second API call data are associated with the third data being included in configuration data of the second service;

determining an absence of personal information in the third data; and

replacing the first data with the second data.

6. The method of claim 5 , further comprising determining a payload of the first API call data, wherein determining the first data is based on the payload.

7. The method of claim 5 , further comprising receiving a computer function from a device, the computer function including a deletion of the first data, wherein deleting the first data comprises executing the computer function.

8. The method of claim 5 , further comprising:

executing a daemon having access to the first service; and

sending, based on execution of the daemon, a first request to the first service, the first request associated with the first API call data.

9. The method of claim 5 , wherein the first data is associated with routing logic.

10. The method of claim 5 , further comprising:

sending a message to a device, the message indicative of the personal information; and

receiving a request to replace the first data with the second data, wherein replacing the first data with the second data is based on the request.

11. The method of claim 10 , wherein replacing the first data with the second data is further based on a look-up table associated with the first data and the second data.

12. The method of claim 10 , wherein the message is further indicative of the first service and wherein the first data is associated with a file name of the first service.

13. The method of claim 5 , further comprising determining a modification associated with the first data, wherein determining that the first data includes personal information is based on the modification.

14. The method of claim 5 , further comprising:

determining, based on machine learning data, a user preference associated with the personal information; and

sending a message to a device, the message indicative of the personal information, wherein sending the message is based on the user preference.

15. The method of claim 14 , further comprising:

determining, based on payloads of the first API call data, a post endpoint associated with the first API call data; and

determining, based on a policy, that the post endpoint is forbidden, wherein the message is further indicative of the post endpoint.

16. A computer-based system comprising memory coupled to at least one processor, the at least one processor configured to:

receive first application programming interface (API) call data from a first service associated with the computer-based system;

receive second API call data from a second service associated with the computer-based system;

determine, based on the first API call data, first data associated with the first service, wherein the API call is associated with the first data being included in configuration data of the first service;

determine that the first data includes personal information;

determine second data, wherein the personal information is absent from the second data;

determine, based on the second API call data, third data associated with the second service, wherein the second API call data are associated with the third data being included in configuration data of the second service;

determine an absence of personal information in the third data; and

replace the first data with the second data.

17. The system of claim 16 , wherein the at least one processor is further configured to:

determine a first payload of the first API call data and a second payload of the first API call data; and

concatenate the first payload and the second payload, wherein to determine the first data is based on the first payload concatenated with the second payload.

18. The system of claim 16 , wherein the at least one processor is further configured to receive a computer function from a device, the computer function including a deletion of the first data, wherein to replace the first data comprises to execute the computer function.

19. The system of claim 16 , wherein to replace the first data with the second data is further based on a look-up table associated with the first data and the second data.

20. The system of claim 16 , wherein the at least one processor is further configured to:

send a message to a device, the message indicative of the personal information; and

receive a request to replace the first data with the second data, wherein to replace the first data with the second data is based on the request.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 11, 2021
From: ASHMAN, KEVIN; SCHUETZ, CHARLES ANDREW
To: AMAZON TECHNOLOGIES, INC.
Reel/Frame 057749/0620 →
Cited By (3)
US 12,321,791 US 12,705,380 US 12,748,876