System for implementing multi-dimensional data obfuscation

Patent metadata

Field	Value
Publication number	US-11580249-B2
Application number	US-202117173027-A
Country	US
Kind code	B2
Filing date	Feb 10, 2021
Priority date	Feb 10, 2021
Publication date	Feb 14, 2023
Grant date	Feb 14, 2023

Abstract

Systems, computer program products, and methods are described herein for implementing multi-dimensional data obfuscation. The present invention is configured to electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database; initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises: determining one or more data types associated with the one or more data artifacts; determining one or more exposure levels of the one or more data artifacts; retrieving, from a data obfuscation repository, one or more data obfuscation algorithms; and implementing the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types; and generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

First claim

What is claimed is:

1. A system for implementing multi-dimensional data obfuscation, the system comprising:
at least one non-transitory storage device; and
at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to:
electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database, wherein the first database comprises one or more data artifacts stored therein;
initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises:
determining one or more data types associated with the one or more data artifacts;
determining one or more exposure levels associated with the one or more data artifacts based on at least the one or more data types, wherein the one or more exposure levels is associated with one or more computational complexity requirements;
retrieving, from a data obfuscation repository, one or more data obfuscation algorithms based on at least the one or more exposure levels, wherein the one or more obfuscation algorithms is associated with one or more computational complexity;
determining that the one or more computational complexity of the one or more obfuscation algorithms does not meet the one or more computational complexity requirements of the one or more exposure levels;
determining a number of iterations of implementation required for the one or more computational complexity of the one or more data obfuscation algorithms to meet the one or more computational complexity requirements of the one or more exposure levels; and
iteratively implementing the one or more data obfuscation algorithms on the one or more data artifacts according to the number of iterations of implementation to obfuscate the one or more data artifacts and generate one or more masked data artifacts; and

generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

2. The system of claim 1 , wherein the at least one processing device is further configured to:
receive, from the computing device of the user, a request to access the obfuscated first database;
transmit control signals configured to cause the computing device associated with the user, an authentication request in response to receiving the request to access the obfuscated first database;
receive, from the computing device of the user, an authentication response in response to the authentication request;
validate the authentication response received from the user; and
authorize the user to access the obfuscated first database based on at least validating the authentication response.

3. The system of claim 2 , wherein the at least one processing device is further configured to:
receive, from the computing device of the user, the authentication response in response to the authentication request, wherein the authentication response comprises one or more authentication credentials associated with the user.

4. The system of claim 3 , wherein the at least one processing device is further configured to:
determine one or more authorization requirements associated with the one or more masked data artifacts based on at least the one or more exposure levels;
determine an authentication level of the user based on at least the one or more authentication credentials; and
determine the authentication level of the user meets the one or more authorization requirements associated with at least a portion of the one or more masked data artifacts.

5. The system of claim 4 , wherein the at least one processing device is further configured to:
initiate a data deobfuscation engine on at least the portion of the one or more masked data artifacts;
unmask, using the data deobfuscation engine, at least the portion of the one or more masked data artifacts;
generate at least a portion of the one or more data artifacts based on at least unmasking at least the portion of the one or more masked data artifacts; and
transmit control signals configured to cause the computing device of the user to display at least the portion of the one or more data artifacts.

6. The system of claim 5 , wherein the at least one processing device is further configured to:
unmask, using the data deobfuscation engine, at least the portion of the one or more masked data artifacts, wherein unmasking further comprises implementing one or more data deobfuscation algorithms on at least the portion of the one or more masked data artifacts.

7. The system of claim 6 , wherein the at least one processing device is further configured to:
determine the one or more authorization requirements associated with the one or more masked data artifacts based on at least the one or more exposure levels, wherein the one or more authorization requirements comprises at least the number of iterations of implementation; and
iteratively implement the one or more data deobfuscation algorithms on the one or more data artifacts based on at least the number of iterations of implementation.

8. A computer program product for implementing multi-dimensional data obfuscation, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:
electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database, wherein the first database comprises one or more data artifacts stored therein;
initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises:
determining one or more data types associated with the one or more data artifacts;
determining one or more exposure levels associated with the one or more data artifacts based on at least the one or more data types, wherein the one or more exposure levels is associated with one or more computational complexity requirements;
retrieving, from a data obfuscation repository, one or more data obfuscation algorithms based on at least the one or more exposure levels, wherein the one or more obfuscation algorithms is associated with one or more computational complexity;
determining that the one or more computational complexity of the one or more obfuscation algorithms does not meet the one or more computational complexity requirements of the one or more exposure levels;
determining a number of iterations of implementation required for the one or more computational complexity of the one or more data obfuscation algorithms to meet the one or more computational complexity requirements of the one or more exposure levels; and
iteratively implementing the one or more data obfuscation algorithms on the one or more data artifacts according to the number of iterations of implementation to obfuscate the one or more data artifacts and generate one or more masked data artifacts; and

generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

9. The computer program product of claim 8 , wherein the first apparatus is further configured to:
receive, from the computing device of the user, a request to access the obfuscated first database;
transmit control signals configured to cause the computing device associated with the user, an authentication request in response to receiving the request to access the obfuscated first database;
receive, from the computing device of the user, an authentication response in response to the authentication request;
validate the authentication response received from the user; and
authorize the user to access the obfuscated first database

Assignees

• Bank Of America

Inventors

• Sloane Brandon
• Kim Jinyoung Nathan
• Tache Adriana
• Dudley Charles Edward

Classifications

• G06F21/6227 Primary

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/6254

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title