User action collection for sensitive customer data

Patent metadata

Field	Value
Publication number	US-11210423-B2
Application number	US-202117185526-A
Country	US
Kind code	B2
Filing date	Feb 25, 2021
Priority date	Jun 13, 2018
Publication date	Dec 28, 2021
Grant date	Dec 28, 2021

Abstract

A secure tenant activity data system for a deployment service includes processor that is configured to decrypt a set of encrypted stream processed monitoring data to recover a set of stream processed monitoring data; determine a transaction identifier associated with the set of stream processed monitoring data; determine whether the transaction identifier has been seen associated with a set of previous data; in response to determining that the transaction identifier has been seen associated with the set of previous data, retrieve the set of previous data; decrypt the set of previous data to recover a set of decrypted previous data; aggregate the set of stream processed monitoring data with the set of decrypted previous data to generate a set of aggregated data; encrypt the set of aggregated data to create a set of encrypted aggregated data; and provide the set of encrypted aggregated data to a safe storage area.

First claim

What is claimed is:

1. A secure tenant activity data system for a deployment service, comprising:
an interface configured to:
receive a set of encrypted stream processed monitoring data; and a hardware processor configured to:
decrypt the set of encrypted stream processed monitoring data to recover a set of stream processed monitoring data, wherein the set of encrypted stream processed monitoring data is generated by encrypting a set of stream processed monitoring data using a key associated with a tenant system, wherein the set of stream processed monitoring data is generated by stream processing a set of monitoring data, wherein a tenant identifier is associated with a source of the set of monitoring data, and wherein the tenant identifier is stored as metadata linked to the set of monitoring data;
determine a transaction identifier associated with the set of stream processed monitoring data, wherein the transaction identifier is injected by a monitoring instrument for tracing or correlating a sequence of monitoring data of the set of monitoring data;
determine that the transaction identifier is seen associated with a set of previous data;
retrieve the set of previous data in response to determining that the transaction identifier is seen associated with the set of previous data;
decrypt the set of previous data to recover a set of decrypted previous data;
aggregate the set of stream processed monitoring data with the set of decrypted previous data to generate a set of aggregated data;
encrypt the set of aggregated data to create a set of encrypted aggregated data; and
provide the set of encrypted aggregated data to a safe storage area.

2. The secure tenant activity data system of claim 1 , wherein a monitoring data of the set of monitoring data comprises stream data, log data, usage data, user input data, user response data, user interaction data, or system response data.

3. The secure tenant activity data system of claim 1 , wherein the stream processing comprises one or more of data cleaning, data rounding, data filtering, data smoothing, algorithmic processing, or computation of features for a machine learning system.

4. The secure tenant activity data system of claim 1 , wherein decrypting the set of encrypted stream processed monitoring data uses a key associated with the tenant system.

5. A secure tenant activity data method for a deployment service, comprising:
receiving, using an interface, a set of encrypted stream processed monitoring data;
decrypting, using a hardware processor, the set of encrypted stream processed monitoring data to recover a set of stream processed monitoring data, wherein the set of encrypted stream processed monitoring data is generated by encrypting a set of stream processed monitoring data using a key associated with a tenant system, wherein the set of stream processed monitoring data is generated by stream processing a set of monitoring data, wherein a tenant identifier is associated with a source of the set of monitoring data, and wherein the tenant identifier is stored as metadata linked to the set of monitoring data;
determining, using the hardware processor, a transaction identifier associated with the set of stream processed monitoring data, wherein the transaction identifier is injected by a monitoring instrument for tracing or correlating a sequence of monitoring data of the set of monitoring data;
determining, using the hardware processor, that the transaction identifier is seen associated with a set of previous data;
retrieving, using the hardware processor, the set of previous data in response to determining that the transaction identifier is seen associated with the set of previous data;
decrypting, using the hardware processor, the set of previous data to recover a set of decrypted previous data;
aggregating, using the hardware processor, the set of stream processed monitoring data with the set of decrypted previous data to generate a set of aggregated data;
encrypting, using the hardware processor, the set of aggregated data to create a set of encrypted aggregated data; and
providing, using the hardware processor, the set of encrypted aggregated data to a safe storage area.

6. The secure tenant activity data method of claim 5 , wherein a monitoring data of the set of monitoring data comprises stream data, log data, usage data, user input data, user response data, user interaction data, or system response data.

7. The secure tenant activity data method of claim 5 , wherein the stream processing comprises one or more of data cleaning, data rounding, data filtering, data smoothing, algorithmic processing, or computation of features for a machine learning system.

8. The secure tenant activity data method of claim 5 , wherein decrypting the set of encrypted stream processed monitoring data uses a key associated with the tenant system.

9. A computer program product for a secure tenant activity data system for a data service, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving, using an interface, a set of encrypted stream processed monitoring data;
decrypting, using a hardware processor, the set of encrypted stream processed monitoring data to recover a set of stream processed monitoring data, wherein the set of encrypted stream processed monitoring data is generated by encrypting a set of stream processed monitoring data using a key associated with a tenant system, wherein the set of stream processed monitoring data is generated by stream processing a set of monitoring data, wherein a tenant identifier is associated with a source of the set of monitoring data, and wherein the tenant identifier is stored as metadata linked to the set of monitoring data;
determining, using the hardware processor, a transaction identifier associated with the set of stream processed monitoring data, wherein the transaction identifier is injected by a monitoring instrument for tracing or correlating a sequence of monitoring data of the set of monitoring data;
determining, using the hardware processor, that the transaction identifier is seen associated with a set of previous data;
retrieving, using the hardware processor, the set of previous data in response to determining that the transaction identifier is seen associated with the set of previous data;
decrypting, using the hardware processor, the set of previous data to recover a set of decrypted previous data;
aggregating, using the hardware processor, the set of stream processed monitoring data with the set of decrypted previous data to generate a set of aggregated data;
encrypting, using the hardware processor, the set of aggregated data to create a set of encrypted aggregated data; and
providing, using the hardware processor, the set of encrypted aggregated data to a safe storage area.

Assignees

• Workday Inc

Inventors

• Namjoshi Parag Avinash
• Narayanan Harikrishna
• Winitzki Sergei
• Markovsky Yury
• Renganarayana Lakshminarayanan

Classifications

• G06F18/2113

  by ranking or filtering the set of features, e.g. using a measure of variance or of feature cross-correlation · CPC title

• G06F18/2413

  based on distances to training or reference patterns · CPC title

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• G06F16/90335

  Query processing · CPC title

• G06N20/00

  Machine learning · CPC title