Data processing systems for generating and populating a data inventory

Patent metadata

Field	Value
Publication number	US-11544667-B2
Application number	US-202217571871-A
Country	US
Kind code	B2
Filing date	Jan 10, 2022
Priority date	Jun 10, 2016
Publication date	Jan 3, 2023
Grant date	Jan 3, 2023

Abstract

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.

First claim

What is claimed is:

1. A method comprising:
identifying a first data asset found in a data network involved in handling a certain data;
generating a first data inventory for the first data asset, the first data inventory comprising a first plurality of attributes;
identifying a second data asset found in the data network involved in handling the certain data;
generating a second data inventory for the second data asset, the second data inventory comprising a second plurality of attributes;
modifying a data model for the data network to include the first data inventory and the second data inventory;
analyzing, by computing hardware, at least a portion of the first plurality of attributes to identify a data processing activity that utilizes the first data asset for the certain data;
analyzing, by the computing hardware, at least a portion of the second plurality of attributes to identify that the data processing activity also utilizes the second data asset for the certain data;
populating, by the computing hardware and based on analyzing the portion of the first plurality of attributes, the data model to include a first link to represent a first relationship between the first data asset and the data processing activity, wherein the first link associates the first data inventory with a third data inventory for the data processing activity, the third data inventory comprising a third plurality of attributes;
populating, by the computing hardware and based on analyzing the portion of the second plurality of attributes, the data model to include a second link to represent a second relationship between the second data asset and the data processing activity, wherein the second link associates the second data inventory with the third data inventory;
generating, by the computing hardware, a graphical user interface that comprises a visual representation of a flow of the certain data based on a data structure of the data model by:
configuring a first visual indication of the first data asset,
configuring a second visual indication of the second data asset,
configuring a third visual indication of an exchange of at least a piece of the certain data between the first data asset and the second data asset based on the first link and the second link; and

providing, by the computing hardware, the graphical user interface for displaying on a computing device the visual representation of the flow of the certain data.

2. The method of claim 1 , wherein the first relationship comprises the first data asset acting as a storage location for the data processing activity.

3. The method of claim 1 , wherein the second relationship comprises the second data asset acting as a data source for the data processing activity.

4. The method of claim 1 further comprising:
analyzing, by the computing hardware, at least a portion of the second plurality of attributes to identify a second data processing activity that also utilizes the second data asset for the certain data;
analyzing, by the computing hardware, at least a portion of a fourth plurality of attributes for a third data asset to identify that the second data processing activity also utilizes the third data asset for the certain data;
populating, by the computing hardware and based on analyzing the portion of the second plurality of attributes to identify the second data processing activity, the data model to include a third link to represent a third relationship between the second data asset and the second data processing activity, wherein the third link associates the second data inventory with a fifth data inventory for the second data processing activity, the fifth data inventory comprising a fifth plurality of attributes; and
populating, by the computing hardware and based on analyzing the portion of the fourth plurality of attributes, the data model to include a fourth link to represent a fourth relationship between the third data asset and the second data processing activity, wherein:
the fourth link associates a fourth data inventory for the third data asset with the fifth data inventory,
the fourth data inventory comprises the fourth plurality of attributes, and
generating the graphical user interface that comprises the visual representation of the flow of the certain data based on the data structure of the data model further comprises:
configuring a fourth visual indication of the third data asset, and
configuring a fifth visual indication of an exchange of at least a piece of the certain data between the second data asset and the third data asset based on the third link and the fourth link.

5. The method of claim 1 , wherein the first visual indication is configured on the graphical user interface as selectable, and the method further comprises providing, based on a selection of the first visual indication, a second graphical user interface for display on the computing device, the second graphical user interface comprising at least one attribute of the first plurality of attributes.

6. The method of claim 5 , wherein the at least one attribute comprises a data control implemented for the first data asset.

7. The method of claim 1 , wherein the third visual indication is configured on the graphical user interface as selectable, and the method further comprises providing, based on a selection of the third visual indication, a second graphical user interface for display on the computing device, the second graphical user interface comprising at least one attribute of the third plurality of attributes.

8. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
analyzing at least a portion of a first plurality of attributes to identify a data processing activity that utilizes a first data asset for a certain data handled in a data network;
analyzing at least a portion of a second plurality of attributes to identify that the data processing activity also utilizes a second data asset for the certain data;
populating, based on analyzing the portion of the first plurality of attributes, a data model for the data network to include a first link to represent a first relationship between the first data asset and the data processing activity, wherein:
the data model comprises:
a first data inventory for the first data asset, the first data inventory comprising the first plurality of attributes,
a second data inventory for the second data asset, the second data inventory comprising the second plurality of attributes, and
a third data inventory for the data processing activity, the third data inventory comprising a third plurality of attributes, and

the first link associates the first data inventory with the third data inventory;

populating, based on analyzing the portion of the second plurality of attributes, the data model to include a second link to represent a second relationship between the second data asset and the data processing activity, wherein the second link associates the second data inventory with the third data inventory; and
generating a graphical user interface that comprises a visual representation of a flow of the certain data based on a data structure of the data model by:
configuring a first visual indication of the first data asset,
configuring a second visual indication of the second data asset,
configuring a third visual indication of an exchange of at least a piece of the certain data between the first data asset and the second data asset based on the first link and the second link, wherein the graphical user interface is provide

Assignees

• Onetrust Llc

Inventors

• Barday Kabir A
• Karanjkar Mihir S
• Finch Steven W
• Browne Ken A
• Heard Nathan W
• Patel Aakash H
• Sabourin Jason L
• Daniel Richard L
• Patton-Kuhl Dylan D
• Brannon Jonathan Blake

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06Q10/06

  Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling · CPC title

• H04L67/306

  User profiles · CPC title

• G06F21/84

  output devices, e.g. displays or monitors · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title