Managing obfuscation of regulated sensitive data

Patent metadata

Field	Value
Publication number	US-11308236-B2
Application number	US-202016991221-A
Country	US
Kind code	B2
Filing date	Aug 12, 2020
Priority date	Aug 12, 2020
Publication date	Apr 19, 2022
Grant date	Apr 19, 2022

Abstract

In an approach to managing obfuscation of regulated sensitive data, one or more computer processors detect content for display on a computing device. One or more computer processors analyze the content for sensitive data. One or more computer processors retrieve one or more applicable regulations, where the regulations are associated with displaying sensitive data. One or more computer processors determine a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations. One or more computer processors identify one or more context rules applicable to the sensitive data in the content. One or more computer processors determine the one or more context rules override the one or more applicable regulations. One or more computer processors display the sensitive data in the content.

First claim

What is claimed is:

1. A method comprising:
detecting, by one or more computer processors, content for displaying on a display of a computing device;
analyzing, by one or more computer processors, the content for sensitive data based on obfuscation identifiers that include data that is used to identify a user of the computing device;
retrieving, by one or more computer processors, one or more applicable regulations, wherein the regulations are associated with data sharing and data privacy regulations associated with displaying the sensitive data;
determining, by one or more computer processors, a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations;
identifying, by one or more computer processor, one or more context rules associated with sensitive data of the user of the computing device, wherein the sensitive data of the user of the computing device is applicable to the sensitive data in the content;
determining, by one or more computer processors, whether the one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data; and
displaying, by one or more computer processors, the content in accordance with the determination of whether one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data.

2. The method of claim 1 , further comprising:
determining, by one or more computer processors, the one or more context rules do not override the one or more applicable regulations; and
obfuscating, by one or more computer processors, the sensitive data in the content.

3. The method of claim 1 , further comprising:
determining, by one or more computer processors, the one or more context rules override the one or more applicable regulations; and
displaying, by one or more computer processors, the sensitive data in the content.

4. The method of claim 1 , wherein retrieving the one or more applicable regulations further comprises:
retrieving, by one or more computer processors, one or more data privacy regulations;
based on the retrieved one or more data privacy regulations, generating, by one or more computer processors, a corpus of data privacy rules; and
storing, by one or more computer processors, the corpus of data privacy rules.

5. The method of claim 4 , wherein retrieving the one or more data privacy regulations further comprises:
determining, by the one or more computer processors, a geo-location of the computing device;
retrieving, by one or more computer processors, one or more data privacy regulations associated with the geo-location from one or more publicly available and trusted sources; and
retrieving, by one or more computer processors, one or more data privacy regulations from one or more corporate databases.

6. The method of claim 4 , further comprising, retrieving, by one or more computer processors, an origin of each of the one or more data privacy regulations.

7. The method of claim 1 , further comprising, monitoring, by one or more computer processors, a geo-location of the computing device to change applied data privacy regulations based on a change in the geo-location of the computing device.

8. The method of claim 1 , further comprising:
receiving, by one or more computer processors, the one or more obfuscation identifiers;
receiving, by one or more computer processors, the one or more context rules, wherein each of the one or more context rules is associated with at least one of the one or more obfuscation identifiers;
receiving, by one or more computer processors, priorities of the one or more context rules;
storing, by one or more computer processors, the received one or more obfuscation identifiers, the received one or more context rules, and the received priorities of the one or more context rules; and
resolving, by one or more computer processors, the one or more context rules and the one or more applicable regulations based on a location and a context of the user.

9. A computer program product comprising:
one or more computer readable storage media and program instructions collectively stored on the one or more computer readable storage media, the stored program instructions comprising:
program instructions to detect content for displaying on a display of a computing device;
program instructions to analyze the content for sensitive data based on obfuscation identifiers that include data that is used to identify a user of the computing device;
program instructions to determine a geo-location of the computing device;
program instructions to retrieve one or more applicable regulations associated with the geo-location, wherein the regulations are associated with data sharing and data privacy regulations associated with displaying the sensitive data;
program instructions to determine a location on the display for obfuscating the sensitive data in the content, based on the retrieved one or more applicable regulations;
program instructions to identify one or more context rules associated with sensitive data of the user of the computing device applicable to the sensitive data in the content, wherein the sensitive data of the user of the computing device is applicable to the sensitive data in the content;
program instructions to determine whether the one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data; and
program instructions to display the content in accordance with the determination of whether one or more context rules override the one or more applicable regulations with respect to displaying the sensitive data.

10. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to determine the one or more context rules do not override the one or more applicable regulations; and
program instructions to obfuscate the sensitive data in the content.

11. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to determine the one or more context rules override the one or more applicable regulations; and
program instructions to display the sensitive data in the content.

12. The computer program product of claim 9 , wherein program instructions to retrieve the one or more applicable regulations comprise:
program instructions to retrieve one or more data privacy regulations;
based on the retrieved one or more data privacy regulations, program instructions to generate a corpus of data privacy rules; and
program instructions to store the corpus of data privacy rules.

13. The computer program product of claim 12 , wherein program instructions to retrieve the one or more data privacy regulations comprise:
program instructions to retrieve one or more data privacy regulations from one or more publicly available sources; and
program instructions to retrieve one or more data privacy regulations from one or more corporate databases.

14. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to receive the one or more obfuscation identifiers;
program instructions to receive the one or more context rules, wherein each of the one or more context rules is associated with at least one of the one or more obfuscation identifiers;
program instructions to receive priorities of the one or more context rules;
program instructions to store the received one or more obfuscation identifiers, the received one or more context rules, and the received priorities of

Assignees

• Kyndryl Inc

Inventors

• Childress Rhonda L
• Bender Michael
• Brooks Powell Natalie
• Anderson Evelyn R

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/60

  Context-dependent security · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title