Maintaining data protection compliance and data inference from data degradation in cross-boundary data transmission using containers

Patent metadata

Field	Value
Publication number	US-11093636-B2
Application number	US-201816152860-A
Country	US
Kind code	B2
Filing date	Oct 5, 2018
Priority date	Oct 5, 2018
Publication date	Aug 17, 2021
Grant date	Aug 17, 2021

Abstract

A computer-implemented method includes: receiving, by a computing device, a container from a data requester server for processing data as part of an inference analysis; attaching, by the computing device, an input data volume and an output data volume associated with the container; processing, by the computing device, input data stored in the input data volume to produce output data; attaching, by the computing device, the output data in the output data volume; detaching, by the computing device, the input data volume based on attaching the output data to the output data volume; determining, by the computing device, whether sensitive data exists in the output data volume; and providing, by the computing device, the output data volume to the data requester server based on the determining that sensitive data does not exist in the output data volume.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving, by a computing device, a script identifying data requested for inference analysis;
profiling, by the computing device, the requested data based on instructions within the script which include determining a profile level of the requested data;
receiving, by the computing device, a container based on the profile level from a data requester server for processing the requested data as part of the inference analysis;
attaching, by the computing device, an input data volume and an output data volume associated with the container;
processing, by the computing device, input data stored in the input data volume to produce output data;
attaching, by the computing device, the output data in the output data volume;
detaching, by the computing device, the input data volume based on attaching the output data to the output data volume;
determining, by the computing device, whether sensitive data exists in the output data volume based on a location and a boundary of the data requester server; and
providing, by the computing device, the output data volume to the data requester server based on the determining that the sensitive data does not exist in the output data volume.

2. The computer-implemented method of claim 1 , further comprising re-processing, by the computing device, the output data based on determining that the output data volume includes the sensitive data.

3. The computer-implemented method of claim 2 , wherein the re-processing the output data comprises:
re-attaching the input data volume;
attaching the output data to the input data volume;
re-processing the input data volume containing the output data to produced re-processed output data;
attaching the re-processed output data to output data volume;
detaching the input data volume;
determining, after attaching the re-processed output data, whether the output data volume includes sensitive information;
reprocessing the data again based on determining that the output data volume includes sensitive information; and
providing the output data volume to the data requester server based on determining that the sensitive data does not exist in the output data volume.

4. The computer-implemented method of claim 1 , wherein the determining whether the output data volume includes the sensitive data is based on geo-specific rules indicating data that is considered to be the sensitive data.

5. The computer-implemented method of claim 1 , further comprising:
determining, by the computing device, whether the data crosses the boundary when processing the input data; and
destroying, by the computing device, the input data volume and the output data volume and refraining from attaching the output data to the output data volume and refraining from providing the output data volume to the data requester server based on determining that the data crosses the boundary when processing the input data.

6. The computer-implemented method of claim 5 , further comprising:
generating and sending, by the computing device, a profile level object that identifies the profile level to the data requester server based on profiling the requested data,
wherein the receiving the container is based on sending the profile level object to the data requester server,
the container includes applications for processing the input data as part of the inference analysis of the data, and
a type of the applications to include in the container is based on a type of the inference analysis to perform based on the profile level.

7. The computer-implemented method of claim 6 , wherein the data requester server generates the container based on receiving the profile level object and provides the container.

8. The computer-implemented method of claim 1 , wherein the sensitive data is personally identifiable information (PII).

9. The computer-implemented method of claim 1 , wherein the output data meets data restrictions of a boundary within which the data requester server resides.

10. The computer-implemented method of claim 1 , wherein a service provider at least one of creates, maintains, deploys and supports the computing device.

11. The computer-implemented method of claim 1 , wherein the receiving the container, the attaching the input data volume and the output data volume, the processing the input data, the detaching the input data volume, the determining whether the sensitive data exists, and the providing the output data volume are provided by a service provider on a subscription, advertising, and/or fee basis.

12. The computer-implemented method of claim 1 , wherein the computing device includes software provided as a service in a cloud environment.

13. The computer-implemented method of claim 1 , further comprising deploying a system, comprising providing a computer infrastructure operable to perform the receiving the container, the attaching the input data volume and the output data volume, the processing the input data, the detaching the input data volume, the determining whether the sensitive data exists, and the providing the output data volume.

14. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computing device to cause the computing device to:
receive a script identifying data requested for inference analysis;
profile the requested data based on instructions within the script which include determining a sensitivity level of the requested data;
receive a container based on the sensitivity level from a data requester server for processing data as part of an inference analysis;
attach an input data volume and an output data volume associated with the container;
process input data stored in the input data volume to produce output data;
attach the output data in the output data volume;
detach the input data volume based on attaching the output data to the output data volume;
determine whether sensitive data exists in the output data volume;
based on determining that the sensitive data exists in the output data volume, recursively re-process the output data volume until the sensitive data no longer exists in the output data volume; and
provide the output data volume to the data requester server based on determining that the sensitive data does not exist in the output data volume.

15. The computer program product of claim 14 , wherein the re-processing the output data comprises:
re-attaching the input data volume;
attaching the output data to the input data volume;
re-processing the input data volume containing the output data to produced re-processed output data;
attaching the re-processed output data to output data volume;
detaching the input data volume;
determining, after attaching the re-processed output data, whether the output data volume includes sensitive information;
reprocessing the data again based on determining that the output data volume includes sensitive information; and
providing the output data volume to the data requester server based on determining that the sensitive data does not exist in the output data volume.

16. The computer program product of claim 14 , wherein the determining whether the output data volume includes the sensitive data is based on geo-specific rules indicating data that is considered to be the sensitive data.

17. The computer program product of claim 14 , wherein the sensitive data is personally identifiable information (PII).

18. The computer program product of claim 14

Assignees

• IBM

Inventors

• Rudden Mary E
• Lam Thanh
• Riley Daniel S
• Trim Craig M
• Childress Rhonda L

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title