IP Library › Granted Patent US 11,636,078
Granted Patent B2
US 11,636,078 · App. 16/858,288 · Granted Apr 25, 2023

Personally identifiable information storage detection by searching a metadata source

Inventors: Alexander North (Santa Clara, CA); Nicholas Farrenkopf (Santa Clara, CA); Kyle Del Castillo (Santa Clara, CA)
Assignee: ServiceNow, Inc.
G06F16/2228G06F16/248G06F16/2445G06F16/284G06F21/6254
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,636,078
App. No.
16/858,288
Granted
Apr 25, 2023
Kind
B2
Abstract

A configuration associated with locating personally identifiable information stored in a database is received. An alternate metadata source separate from the database is identified. The separate alternate metadata source is searched using the configuration to identify locations in the database that store personally identifiable information.

Claims (60)

1. A method, comprising:

storing a first item of personally identifiable information in a database;

dynamically causing a second item of personally identifiable information to be stored in a metadata source concomitantly with the storing of the first item of personally identifiable information in the database, wherein:

the metadata source is separate from the database; and

the second item of personally identifiable information includes metadata that describes:

a database record location of the first item of personally identifiable information, and

a type of the first item of personally identifiable information;

receiving a configuration associated with locating personally identifiable information stored in a database;

searching the metadata source using the configuration;

identifying a location of the second item of personally identifiable information in the metadata source; and

based on the identified location of the second item of personally identifiable information in the metadata source, providing the database record location of the first item of personally identifiable information without searching the database for the first item of personally identifiable information.

2. The method of claim 1 , further comprising at least one of:

storing a result from searching the metadata source; or

transmitting the result to a user for validation of the result.

3. The method of claim 1 , wherein at least a portion of the configuration is received via a network.

4. The method of claim 1 , wherein the configuration includes at least one of:

a start time indicating when to automatically commence searching the metadata source; or

a list of keywords to search in the metadata source for which finding a keyword in the list of keywords indicates a presence of personally identifiable information in a corresponding database location.

5. The method of claim 1 , wherein the database includes data stored in one or more table data structures.

6. The method of claim 1 , wherein the database record location of the first item of personally identifiable information is a location of the first item of personally identifiable information within in one or more table data structures stored in the database.

7. The method of claim 1 , wherein searching the metadata source includes searching for a combination of a base term and an additional term selected from a plurality of additional terms.

8. The method of claim 1 , further comprising automatically determining an indication associated with a confidence that an identified location in the database stores personally identifiable information.

9. The method of claim 8 , wherein:

automatically determining the indication associated with the confidence includes determining a total number of additional locations within a specified proximity to the identified location that store personally identifiable information; and

the additional locations include fields in a table.

10. The method of claim 1 , further comprising requesting a reviewer to provide an indication associated with a confidence that an identified location in the database stores personally identifiable information in response to a determination that the confidence has not been determined automatically.

11. The method of claim 1 , further comprising storing a list of locations in the database identified as storing personally identifiable information.

12. The method of claim 1 , further comprising updating the received configuration based at least in part on results of searching the metadata source.

13. The method of claim 1 , further comprising providing results of searching the metadata source to a user interface for display of the results.

14. The method of claim 1 , wherein the database is provided by a third-party entity different from an entity managing the metadata source.

15. The method of claim 1 , wherein the database stores at least one of the following types of personally identifiable information: a human name, an address, a social security number, a date of birth of a human, a place of birth of a human, a human mother's maiden name, a driver's license number, a bank account number, a passport number, or an email address.

16. The method of claim 1 , wherein:

storing the first item of personally identifiable information in the database includes creating a database table in the database; and

dynamically causing the second item of personally identifiable information to be stored in the metadata source concomitantly with the storing of the first item of personally identifiable information in the database includes concomitantly with the creation of the database table, creating a corresponding metadata table in the metadata source, wherein the metadata table is also updated when the database table is updated to reflect updates to the database table.

17. The method of claim 1 , wherein the location of the first item of personally identifiable information in the database is determined based at least in part to a correspondence to the second item of personally identifiable information in the metadata source.

18. The method of claim 1 , wherein the metadata source is configured to store one or more table data structures, the one or more table data structures including one or more reference links to one or more other table data structures.

19. A system, comprising:

one or more processors configured to:

store a first item of personally identifiable information in a database;

dynamically cause a second item of personally identifiable information to be stored in a metadata source concomitantly with the storing of the first item of personally identifiable information in the database, wherein:

the metadata source is separate from the database; and

the second item of personally identifiable information includes metadata that describes:

a database record location of the first item of personally identifiable information, and

a type of the first item of personally identifiable information;

receive a configuration associated with locating personally identifiable information stored in a database;

search the metadata source using the configuration;

identify a location of the second item of personally identifiable information in the metadata source; and

based on the identified location of the second item of personally identifiable information in the metadata source, provide the database record location of the first item of personally identifiable information without searching the database for the first item of personally identifiable information; and

a memory coupled with the processor and configured to provide the processor with instructions.

20. A computer program product comprising a non-transitory computer readable storage medium having instructions having instructions stored thereon, when executed by a processor performing:

storing a first item of personally identifiable information in a database;

dynamically causing a second item of personally identifiable information to be stored in a metadata source concomitantly with the storing of the first item of personally identifiable information in the database, wherein:

the metadata source is separate from the database; and

the second item of personally identifiable information includes metadata that describes:

a database record location of the first item of personally identifiable information, and

a type of the first item of personally identifiable information;

receiving a configuration associated with locating personally identifiable information stored in a database;

searching the metadata source using the configuration;

identifying a location of the second item of personally identifiable information in the metadata source; and

based on the identified location of the second item of personally identifiable information in the metadata source, providing the database record location of the first item of personally identifiable information without searching the database for the first item of personally identifiable information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 8, 2020
From: NORTH, ALEXANDER; FARRENKOPF, NICHOLAS; DEL CASTILLO, KYLE
To: SERVICENOW, INC.
Reel/Frame 053151/0577 →
Continuity (1)
Related Publication 20210334407A1 · Oct 28, 2021