Peer-based policy definitions

Patent metadata

Field	Value
Publication number	US-11522914-B1
Application number	US-201916597288-A
Country	US
Kind code	B1
Filing date	Oct 9, 2019
Priority date	Oct 9, 2019
Publication date	Dec 6, 2022
Grant date	Dec 6, 2022

Abstract

Described is a system for a Policy Derivation Engine (PDE) that, when accessed by one or more organizations, assists such organizations in updating and managing data protection policies based on external policy updates from one or more other organizations that share the same organizational peer group. The system receives a policy request from a first computing system associated with a first organization. The system computes a list of peer organizations of the first organization. The system builds policy update data based on respective policy data received from one or more peer organizations and transmits at least a portion of policy update data to the first computing system associated with the first organization.

First claim

What is claimed is:

1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
receive policy data from a plurality of organizations;
receive a policy request from a first computing system associated with a first organization, the policy request including an industry classification code selected by the first organization;
compute a list of peer organizations of the first organization from the plurality of organizations, one or more of the peer organizations having provided updated policy data after the receiving the policy data, wherein the list of peer organizations of the first organization includes an identification of one or more organizations associated with an industry classification code that is similar to the received industry classification code selected by the first organization;
build policy update data based on the updated policy data in response to receiving the policy request; and
transmit at least a portion of policy update data to the first computing system associated with the first organization.

2. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
transmit, to the first computing system associated with the first organization, an update to at least an anonymized portion of a data protection policy deployed at least one of the peer organizations, wherein each peer organization is associated with an industry code similar to an industry code received in the policy request, wherein the industry code received in the policy request maps to an industry sector that is different than an actual industry sector of the first organization.

3. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
anonymize and aggregate the respective policy data received from the peer organizations.

4. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
truncate the received industry classification code selected by the first organization; and
identify one or more organizations that are associated with the truncated industry classification code.

5. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
verify that a number of peer organizations meets a required threshold minimum number of organizations.

6. A method comprising:
receiving policy data from a plurality of organizations;
receiving a policy request from a first computing system associated with a first organization, the policy request including an industry classification code selected by the first organization;
computing a list of peer organizations of the first organization from the plurality of organizations, one or more of the peer organizations having provided updated policy data after the receiving the policy data, wherein the list of peer organizations of the first organization includes an identification of one or more organizations associated with an industry classification code that is similar to the received industry classification code selected by the first organization;
building policy update data based on the updated policy data in response to receiving the policy request; and
transmitting at least a portion of policy update data to the first computing system associated with the first organization.

7. The method as in claim 6 , wherein transmitting at least a portion of policy update data to the first computing system associated with the first organization includes:
transmitting, to the first computing system associated with the first organization, an update to at least an anonymized portion of a data protection policy deployed at least one of the peer organizations, wherein each peer organization is associated with an industry code similar to an industry code received in the policy request, wherein the industry code received in the policy request maps to an industry sector that is different than an actual industry sector of the first organization.

8. The method as in claim 6 , wherein building policy update data based on respective policy data received from one or more peer organizations comprises:
anonymizing and aggregating the respective policy data received from the peer organizations.

9. The method as in claim 6 , wherein identifying one or more organizations that are associated with an industry classification code that is similar to the received industry classification code selected by the first organization:
truncating the received industry classification code selected by the first organization; and
identifying one or more organizations that are associated with the truncated industry classification code.

10. The method as in claim 6 , wherein computing a list of peer organizations of the first organization:
verifying that a number of peer organizations meets a required threshold minimum number of organizations.

11. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
receive policy data from a plurality of organizations;
receive a policy request from a first computing system associated with a first organization, the policy request including an industry classification code selected by the first organization;
compute a list of peer organizations of the first organization from the plurality of organizations, one or more of the peer organizations having provided updated policy data after the receiving the policy data, wherein the list of peer organizations of the first organization includes an identification of one or more organizations associated with an industry classification code that is similar to the received industry classification code selected by the first organization;
build policy update data based on the updated policy data in response to receiving the policy request; and
transmit at least a portion of policy update data to the first computing system associated with the first organization.

12. The computer program product as in claim 11 , wherein the program code to transmit at least a portion of policy update data to the first computing system associated with the first organization further includes program code to:
transmit, to the first computing system associated with the first organization, an update to at least an anonymized portion of a data protection policy deployed at least one of the peer organizations, wherein each peer organization is associated with an industry code similar to an industry code received in the policy request, wherein the industry code received in the policy request maps to an industry sector that is different than an actual industry sector of the first organization.

13. The computer program product as in claim 11 , wherein the program code includes further instructions to:
anonymize and aggregate the respective policy data received from the peer organizations.

14. The computer program product as in claim 11 , wherein the program code to identify one or more organizations that are associated with an industry classification code that is similar to the received industry classification code selected by the first organization further includes program code to:
truncate the received industry classification code selected by the first organization;
identify one or more organizations that are associated with the truncated industry clas

Assignees

• Emc Ip Holding Co Llc

Inventors

• Malamut Mark D
• Brenner Adam
• Murti Arun

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title