Image storage across distributed computing systems

Patent metadata

Field	Value
Publication number	US-11687668-B2
Application number	US-202117193025-A
Country	US
Kind code	B2
Filing date	Mar 5, 2021
Priority date	Mar 5, 2021
Publication date	Jun 27, 2023
Grant date	Jun 27, 2023

Abstract

Provided is a method, system, and computer program product for storing images across multiple distributed computing systems according to image sensitivity. The method comprises identifying an image and analyzing the image to identify sensitive information in the image. The method further comprises splitting the image into a sensitive portion and a non-sensitive portion. The method further comprises storing the sensitive portion of the image in a first distributed computing system and storing the non-sensitive portion of the image in a second distributed computing system.

First claim

What is claimed is:

1. A method comprising:
identifying an image;
analyzing the image to identify sensitive information in the image;
splitting the image into a sensitive portion of the image and a non-sensitive portion of the image;
storing the sensitive portion of the image in a first distributed computing system and the non-sensitive portion of the image in a second distributed computing system;
identifying a first location data and a first boundary data for the sensitive portion, wherein the first location data identifies a storage location in the first distributed computing environment for the sensitive portion, and wherein the first boundary data identifies where the sensitive portion belongs in the image;
identifying a second location data and a second boundary data for the non-sensitive portion, wherein the second location data identifies a storage location in the second distributed computing environment for the non-sensitive portion, and wherein the second boundary data identifies where the non-sensitive portion belongs in the image; and
storing the first location data, the second location data, the first boundary data, and the second boundary data in a database.

2. The method of claim 1 , wherein analyzing the image to identify the sensitive information in the image comprises:
extracting one or more features from the image using image processing; and
comparing the one or more features to a set of data compliance rules.

3. The method of claim 2 , wherein the set of data compliance rules includes one or more rules that define what types of data are considered sensitive.

4. The method of claim 1 , wherein the first distributed computing system has a higher security level than the second distributed computing system.

5. The method of claim 1 , the method further comprising:
receiving a request for the image from a requestor;
authenticating that the requestor is permitted to receive the image;
determining, from metadata associated with the image, a first location of the sensitive portion in the first distributed computing environment and a second location of the non-sensitive portion in the second distributed computing environment;
retrieving the sensitive portion from the first distributed computing environment;
retrieving the non-sensitive portion from the second distributed computing environment;
combining, using the metadata associated with the image, the sensitive and non-sensitive portions into a combined image; and
returning the combined image to the requestor.

6. The method of claim 1 , wherein the first distributed computing system is a private cloud and the second distributed computing system is a public cloud, the public and private clouds being capable of communicating with each other as part of a hybrid cloud environment.

7. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to perform a method comprising:
identifying an image;
analyzing the image to identify sensitive information in the image;
splitting the image into a sensitive portion of the image and a non-sensitive portion of the image;
storing the sensitive portion of the image in a first distributed computing system and the non-sensitive portion of the image in a second distributed computing system;
receiving a request for the image from a requestor;
authenticating that the requestor is permitted to receive the image;
determining, from metadata associated with the image, a first location of the sensitive portion in the first distributed computing environment and a second location of the non-sensitive portion in the second distributed computing environment;
retrieving the sensitive portion from the first distributed computing environment;
retrieving the non-sensitive portion from the second distributed computing environment;
combining, using the metadata associated with the image, the sensitive and non-sensitive portions into a combined image; and
returning the combined image to the requestor.

8. The computer program product of claim 7 , wherein analyzing the image to identify the sensitive information in the image comprises:
extracting one or more features from the image using image processing; and
comparing the one or more features to a set of data compliance rules.

9. The computer program product of claim 8 , wherein the set of data compliance rules includes one or more rules that define what types of data are considered sensitive.

10. The computer program product of claim 7 , wherein the method further comprises:
identifying a first location data and a first boundary data for the sensitive portion, wherein the first location data identifies a storage location in the first distributed computing environment for the sensitive portion, and wherein the first boundary data identifies where the sensitive portion belongs in the image;
identifying a second location data and a second boundary data for the non-sensitive portion, wherein the second location data identifies a storage location in the second distributed computing environment for the non-sensitive portion, and wherein the second boundary data identifies where the non-sensitive portion belongs in the image; and
storing the first location data, the second location data, the first boundary data, and the second boundary data in a database.

11. The computer program product of claim 7 , wherein the first distributed computing system utilizes has a higher security level than the second distributed computing system.

Assignees

• IBM

Inventors

• Kaul Abhishek
• Gupta Sachin
• Vadayadiyil Raveendran Pramod
• Nagar Seema
• Dey Kuntal

Classifications

• G06V10/25

  Determination of region of interest [ROI] or a volume of interest [VOI] · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06V10/40

  Extraction of image or video features · CPC title

• G06T7/73

  using feature-based methods · CPC title