Graphical representation of an information management system

Patent metadata

Field	Value
Publication number	US-11880487-B2
Application number	US-202017000269-A
Country	US
Kind code	B2
Filing date	Aug 21, 2020
Priority date	Mar 13, 2018
Publication date	Jan 23, 2024
Grant date	Jan 23, 2024

Abstract

Systems and methods are described herein for graphically representing an information management system based on the characteristics of within the system. The systems and methods interface with various components of the system (e.g., administrative components, index components, and so on) to identify data having certain characteristics (e.g., personal data), and generate or render information (e.g., a heat map or other visual display) that represents areas or locations within the system storing the data. Thus, the systems and methods, in some embodiments, generate or create a data-specific view into the information management system.

First claim

What is claimed is:

1. A computer-implemented method performed by an information management system, the computer-implemented method comprising:
performing a data backup method of customer data stored on multiple primary storage devices, wherein a first primary storage device of the multiple primary storage devices is located at a first geographical location, and wherein a second primary storage device of the multiple primary storage devices is located at a second geographical location,
wherein the customer data stored at the first and second primary storage devices is hosted by different entities,
wherein the customer data comprises personal data requiring authorization for access,
wherein the data backup method is initiated according to a schedule that is indicated in an information management policy assigned to the customer data,
wherein the information management policy comprises a set of parameters for performing data management operations on data assigned to the information management policy,
wherein the set of parameters for performing data management operations comprises logical or virtual location information associated with the customer data and authorization access information needed to access the customer data;

acquiring the customer data by using the authorization access information indicated in the information management policy assigned to the customer data;
creating secondary copies of the customer data;
storing the secondary copies in secondary storage devices, wherein the multiple primary storage devices are separate and distinct from the secondary storage devices;
for each secondary copy of the secondary copies;
updating one or more indices mapping a storage location of the each secondary copy to a corresponding location of the customer data on one of the multiple primary storage devices, and
determining if the each secondary copy includes a specific type of the personal data;

wherein at least some of the secondary copies are stored in a backup format different from a primary format of the personal data that is stored at the multiple primary storage devices;
generating or updating a common index with information included in each created one or more indices corresponding to each secondary copy that included the specific type;
accessing the information within the common index;
using the accessed information, determining one or more of the multiple primary storage devices that store the customer data that includes the specific type;
determining a level of risk for each of the determined one or more of the multiple primary storage devices; and
in response to determining the level of risk for each of the determined one or more of the multiple primary storage devices:
identifying a predetermined response from an information management security policy specific to the specific type and the level of risk,
initiating the predetermined response with the corresponding each of the determined one or more of the multiple primary storage devices,
wherein the predetermined response is a computer-implemented operation for risk mitigation of the customer data appropriate for the determined level of risk.

2. The computer-implemented method of claim 1 , the computer-implemented method further comprising:
identifying secondary storage devices that store name entity information and regular expression entity information that satisfies pre-determined user identification criteria, and
wherein the multiple primary storage devices are in differing geographic locations.

3. The computer-implemented method of claim 1 , the computer-implemented method further comprising:
performing an action associated with the personal data stored within the information management system,
wherein the action comprises:
deleting the personal data from the secondary storage devices,
moving or transferring the personal data from the secondary storage devices,
encrypting the personal data,
generating secondary copies of the personal data,
restoring the personal data from the secondary storage devices, or
redacting at least portions of the personal data.

4. The computer-implemented method of claim 1 , the computer-implemented method further comprising:
receiving input from a user associated with the personal data; and
performing a task requested by the user to facilitate access by the user of the personal data, wherein the task includes, upon request by the user, deleting or transferring the personal data.

5. The computer-implemented method of claim 1 , wherein the personal data comprises data that qualifies as identifying data for an individual under the European General Data Protection Regulation.

6. The computer-implemented method of claim 1 , wherein the personal data comprises personally identifiable information (PII) or sensitive personal information (SPI).

7. The computer-implemented method of claim 1 , wherein the personal data comprises data that qualifies as identifying data for an individual under the United States Health Insurance Portability and Accountability Act (HIPAA) or the United States Children's Online Privacy Protection Act (COPPA).

8. The computer-implemented method of claim 1 , wherein the personal data comprises one or more identifiers of an individual.

9. The computer-implemented method of claim 1 , wherein the personal data comprises name entity information or regular expression entity information associated with individuals.

10. The computer-implemented method of claim 1 , the computer-implemented method further comprising:
scanning indices associated with the secondary storage devices of the information management system to identify name entity information stored by the multiple primary storage devices.

11. The computer-implemented method of claim 1 , the computer-implemented method further comprising:
scanning indices associated with the secondary storage devices of the information management system to identify regular expression entity information stored by the multiple primary storage devices.

12. The computer-implemented method of claim 1 , wherein the multiple primary storage devices comprise cloud storage locations associated with the information management system.

13. An information management system, wherein the information management system is configured to:
perform a data backup method of customer data stored on multiple primary storage devices wherein a first primary storage device of the multiple primary storage devices is located at a first geographical location, and wherein a second primary storage device of the multiple primary storage devices is located at a second geographical location,
wherein the customer data stored the first and second primary storage devices is hosted by different entities,
wherein the customer data comprises personal data requiring authorization for access,
wherein the data backup method is initiated according to a schedule that is indicated in an information management policy assigned to the customer data,
wherein the information management policy comprises a set of parameters for performing data management operations on data assigned to the information management policy,
wherein the set of parameters for performing data management operations comprises logical or virtual location information associated with the customer data and authorization access information needed to access the customer data;

acquire the customer data by using the authorization access information indicated in the information management policy assigned to the customer data;
create secondary copies of the customer data;
store the secondary copies in secondary storage devices, wherein the mu

Assignees

• Commvault Systems Inc

Inventors

• Mutha Manas Bhikchand
• Sinha Prosenjit

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F16/2228

  Indexing structures · CPC title

• G06F16/29

  Geographical information databases · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title