Active data loss prevention (DLP) engine
A unified platform may comprise a combination of independent frameworks that have been integrated and configured to collaboratively operate seamlessly. In some aspects, the unified platform may comprise one or more of an authentication and authorization framework, a dynamic user interface framework, a workflow state management framework, a notification and active data loss and prevention (DLP) engine framework, and an orchestration engine framework. Each of the frameworks included in the unified platform may comprise one or more of the plurality of computing devices executing computer-readable program instructions.
1. A notification and active data loss and prevention (DLP) engine framework comprising:
one or more computing devices executing computer-readable program instructions that cause the notification and active DLP engine framework to:
capture a flow of data associated with one or more workflow journeys;
extract data objects from the captured flow of data;
determine whether the data objects comprise sensitive data;
classify the data objects based on the determination as to whether the data objects comprise sensitive data; and
initiate at least one of an action and control when the data objects are classified as comprising the sensitive data,
wherein the one or more computing devices comprise a plurality of modules that include at least an event subscriber module and a streaming service module,
wherein the event subscriber module is configured to subscribe to the streaming service module to receive the data objects, and
wherein the data objects further comprise event data associated with the one or more workflow journeys.
2. The notification and active DLP engine framework claim 1 , wherein the sensitive data comprises personal identifying information (PII) data, and wherein the notification and active DLP engine framework is further configured to:
apply one or more rules to the data objects to determine that at least a portion of the data objects comprises PII data; and
classify the portion of the data objects as comprising the PII data.
3. The notification and active DLP engine framework claim 1 , wherein the one or more computing devices are further configured to apply one or more machine learning processes to the data objects and the classifications to adjust the one or more rules.
4. The notification and active DLP engine framework claim 1 , wherein the one or more computing devices comprise an event sourcing framework that includes the plurality of modules, said plurality of modules configured to capture the flow of data associated with the one or more workflow journeys in real-time, in batch, on-demand, periodically, continuously or a combination thereof.
5. The notification and active DLP engine framework claim 1 , further comprising a data conversion module configured to convert data included in the flow of data into text-based data objects.
6. The notification and active DLP engine framework claim 1 , wherein the flow of data associated with the one or more workflow journeys is captured from at least one of a system in communication with the notification and active DLP engine framework, user device in communication with the system and one or more electronic communications received or generated by the system, the one or more electronic communications comprising one or more of a text message, an e-mail and an electronic document.
7. The notification and active DLP engine framework claim 6 , further comprising a communication monitor configured to monitor and interrogate the one or more electronic communications and interrogate content of the one or more electronic communications to identify the sensitive data.
8. The notification and active DLP engine framework claim 6 , wherein the flow of data associated with the one or more workflow journeys comprises at least one of network data, user-generated data, template manager data, data generated or stored by the system in communication with the notification and active DLP engine framework and data included within the electronic communication.
9. The notification and active DLP engine framework claim 6 , wherein the one or more workflow journeys comprises at least two workflow journeys, and wherein the flow of data includes two or more user types, two or more personas or a combination thereof.
10. The notification and active DLP engine framework claim 4 , wherein the plurality of modules further comprises a publisher module.
11. The notification and active DLP engine framework claim 10 , wherein the publisher module is configured to:
interrogate and analyze metadata associated with the data objects to identify at least one source of the flow of data; and
provide the data objects to the streaming service module.
12. The notification and active DLP engine framework claim 11 , wherein the streaming service module is configured to monitor and receive the data objects from the publisher module.
13. The notification and active DLP engine framework claim 12 , further comprising a Command Query Responsibility Segregation (CQRS) framework configured to classify the data objects as comprising the sensitive data and initiate the at least one of the action and control.
14. The notification and active DLP engine framework claim 13 , wherein the CQRS framework comprises one or more of a query module, a rules engine and a knowledge graph module comprising one or more pattern read databases.
15. The notification and active DLP engine framework claim 14 , wherein the query module is configured to:
receive the data objects from the event subscriber module; and
read and apply patterns, rules and scores to the data objects to classify the data objects as comprising at least one of sensitive data and non-sensitive data,
wherein the patterns, rules and scores are accessed from the one or more pattern read databases.
16. The notification and active DLP engine framework claim 15 , wherein the rules engine comprises a command module, a compute module, one or more pattern write databases, the command module configured to:
determine, based on the classification of the data objects, to initiate the at least one of the action and control; and
write, to the one or more pattern write databases, the determination to initiate the at least one of the action and control and details of the at least one action and control.
17. The notification and active DLP engine framework claim 16 , wherein the at least one of the action and control comprises generating a notification, generating an alert and stopping or pausing transmission of a communication.
18. The notification and active DLP engine framework claim 16 , wherein the at least one of the action and control is initiated in real-time, in batch or in a combination thereof.
19. The notification and active DLP engine framework claim 16 , wherein the compute module is configured to:
execute one or more machine learning models to test and update the patterns, rules and scores; and
write the updated patterns, rules and scores to the one or more pattern write databases, wherein the patterns, rules and scores stored in the one or more pattern read databases of the knowledge graph are revised according to the updated patterns, rules and scores.
20. The notification and active DLP engine framework claim 16 , wherein the command module is further configured to initiate the at least one of the action and control responsive to one or more of:
receipt, by the notification and active DLP engine framework, of predetermined user input data;
receipt, by the notification and active DLP engine framework, of inconsistent or erroneous user data; and
completion of one or more workflow steps of the one or more workflow journeys.