Dynamic access control for sensitive information

Patent metadata

Field	Value
Publication number	US-11989322-B2
Application number	US-202117466759-A
Country	US
Kind code	B2
Filing date	Sep 3, 2021
Priority date	Jan 30, 2021
Publication date	May 21, 2024
Grant date	May 21, 2024

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media for containment of sensitive data within a communication platform. The system displays a communication interface including a first input section for receiving an input message associated with a sending user account, and a display section for displaying message information received by the sending user account from other user accounts. The system determines a requirement to input sensitive information. The system then displays a sensitive data user interface including second input section for receiving a sensitive message, and an interface control for setting an expiration time value for the sensitive message.

First claim

What is claimed is:

1. A computer-implemented method for controlling access to sensitive information, comprising:
receiving an input message;
evaluating the input message to determine that at least a portion of the input message includes sensitive information;
responsive to determining that at least the portion of the input message includes sensitive information:
causing display of the sensitive information on a sensitive data user interface; and
associating a title with the sensitive information;

starting an expiry timer;
providing, for display at a receiving client device, access to the title and the sensitive information until the expiry timer is completed; and
permanently modifying the input message to remove the at least the portion of the input message including the sensitive information once the expiry timer is completed.

2. The method of claim 1 , further comprising:
transmitting, to the receiving client device, a notification that access to the input message has been provided.

3. The method of claim 1 , wherein the expiry timer represents one of: a duration which is initiated upon the receiving client device accessing the sensitive information, a duration which is initiated upon the receiving client device receiving a notification about access to the input message being provided, or a duration which is initiated upon a notification being transmitted to the receiving client device regarding the access to the input message being provided.

4. The method of claim 1 , further comprising:
encrypting the sensitive information based on a hash-value associated with the receiving client device; and
upon the receiving client device attempting to access the sensitive information, decrypting the sensitive information.

5. The method of claim 4 , further comprising:
prior to decrypting the sensitive information, authenticating the receiving client device.

6. The method of claim 1 , further comprising:
providing, within a chat interface, a link to the sensitive information; and
upon the receiving client device attempting to access the sensitive information via the link, authenticating the receiving client device.

7. The method of claim 1 , further comprising:
generating a time stamp upon access to the sensitive information being provided for display on the receiving client device.

8. The method of claim 6 , further comprising:
providing a message to one or more additional client devices that the access to the sensitive information will expire upon the expiry timer being completed.

9. The method of claim 1 , further comprising:
receiving a selection of a starting condition for the expiry timer.

10. The method of claim 1 , further comprising:
receiving a selection of a subset of the sensitive information to be provided for display on the receiving client device.

11. The method of claim 1 , further comprising:
receiving a selection of a detection threshold for the sensitive information.

12. The method of claim 1 , further comprising:
in response to evaluating the input message to determine that at least the portion of the input message includes sensitive information, providing a notification to a sending client device that the input message includes sensitive information.

13. The method of claim 1 , wherein the sensitive information may include one or more of: textual content, audio content, image content, video content, audiovisual content, icons, emojis, voice-to-text transcription, and/or text-to-voice audio.

14. The method of claim 1 , further comprising:
storing the sensitive information within a remote repository; and
retrieving the sensitive information from the remote repository in order to provide the access to the sensitive information for the receiving client device.

15. The method of claim 14 , wherein the remote repository is maintained and/or specified by a sending client device.

16. The method of claim 1 , further comprising:
restricting the access to the sensitive information by third-party recipients.

17. The method of claim 1 , wherein the input message comprises one or more files or documents.

18. The method of claim 1 , wherein evaluating the input message to determine that at least the portion of the input message includes sensitive information comprises:
processing the input message using a machine learning (ML) model; and
receiving, from the ML model, a probability that one or more portions of the input message include sensitive information; and
responsive the probability exceeding a predetermined degree of confidence, designate the one or more portions of the input message as including sensitive information.

19. A communication system comprising one or more processors configured to perform the operations of:
receiving an input message;
evaluating the input message to determine that at least a portion of the input message includes sensitive information;
responsive to determining that at least the portion of the input message includes sensitive information:
causing display of the sensitive information on a sensitive data user interface; and
associating a title with the sensitive information;

starting an expiry timer;
providing, for display at a receiving client device, access to the title and the sensitive information until the expiry timer is completed; and
permanently modifying the input message to remove the at least the portion of the input message including the sensitive information once the expiry timer is completed.

20. A non-transitory computer-readable medium containing instructions for controlling access to sensitive information, comprising:
instructions for receiving an input message;
instructions for evaluating the input message to determine that at least a portion of the input message includes sensitive information;
instructions for, in response to determining that at least the portion of the input message includes sensitive information:
causing display of the sensitive information on a sensitive data user interface; and
associating a title with the sensitive information;

instructions for starting an expiry timer;
instructions for providing, for display at a receiving client device, access to the title and the sensitive information until the expiry timer is completed; and
instructions for permanently modifying the input message to remove the at least the portion of the input message including the sensitive information once the expiry timer is completed.

Assignees

• Zoom Video Communications Inc

Inventors

• Springer Shane
• Noble Thomas

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F3/0482

  Interaction with lists of selectable items, e.g. menus · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L12/1813 Primary

  for computer conferences, e.g. chat rooms (instant messaging H04L51/04; protocols for multimedia communication H04L65/1101; arrangements for multi-party communication H04L65/403; telephonic conference arrangements H04M3/56; television conference systems H04N7/15) · CPC title

• H04L51/18

  Commands or executable codes · CPC title