Data processing systems for generating and populating a data inventory

Patent metadata

Field	Value
Publication number	US-12045266-B2
Application number	US-202117346586-A
Country	US
Kind code	B2
Filing date	Jun 14, 2021
Priority date	Jun 10, 2016
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.

First claim

What is claimed is:

1. A method comprising:
generating, by computing hardware, a graphical user interface by:
accessing a data model, wherein the data model comprises a plurality of data assets, and each data asset of the plurality of data assets represents at least one of software or hardware used for at least one of collecting, storing, processing, or transferring data;
generating a visual representation of the data model representing relationships among the plurality of data assets by configuring, within the visual representation, navigational elements for navigating within the visual representation of the data model and viewing data associated with a plurality of data inventories of the plurality of data assets;
determining, from the plurality of data inventories defining a plurality of inventory attributes for the plurality of data assets, a first data inventory associated with a first data asset, wherein the first data inventory comprises a plurality of fields that define inventory attributes of the first data inventory;
navigating, in response to a selection of a first navigational element associated with navigating to data associated with the first data inventory, from the visual representation of the data model to an additional visual representation of the first data inventory comprising:
an identifier of the first data asset;
indications of the plurality of fields associated with the first data inventory; and
an indication that one or more fields of the plurality of fields are unpopulated in response to determining that one or more inventory attributes corresponding to the one or more fields are not available;

determining, for the one or more fields that are unpopulated for the first data inventory, one or more attribute values for populating the one or more fields by:
generating and executing a data assessment based at least in part on one or more questions that map to the one or more inventory attributes corresponding to the one or more fields; or
scanning, via a software application installed on a computing device that is networked with one or more data repositories associated with the first data inventory, the one or more data repositories for the one or more attribute values from data stored in the one or more data repositories;

in response to determining the one or more attribute values corresponding to the one or more fields, modifying the first data inventory to include the one or more attribute values by populating the one or more fields with one or more respective attribute values; and
updating, in response to modifying the first data inventory, the additional visual representation of the first data inventory by updating the one or more fields with the one or more attribute values from the first data inventory.

2. The method of claim 1 , wherein scanning the one or more data repositories comprises:
determining, using one or more machine learning techniques, a category for an inventory attribute value from data stored in the one or more data repositories; and
generating, based at least in part on the category, a confidence score for the inventory attribute value from data stored in the one or more data repositories in connection with the one or more inventory attributes corresponding to the one or more fields.

3. The method of claim 1 , wherein the one or more attribute values comprise one or more of a processing activity associated with the first data asset involved in processing the data, an indication of at least one of how or where the data is being transferred to by the first data asset or received from by the first data asset, a type for the data, or an indication of whether the data is being at least one of encrypted or deleted.

4. The method of claim 1 , wherein generating the visual representation of the data model comprises generating the visual representation to represent a direction of data transfers among the plurality of data assets.

5. The method of claim 1 , wherein the first data asset is a primary data asset associated with a processing activity involving the data around which the data model is configured to represent.

6. The method of claim 1 , wherein determining the one or more attribute values comprises:
using an application programming interface to access a third-party information technology system; and
determining the one or more attribute values by retrieving the one or more attribute values from the third-party information technology system.

7. A system comprising:
processing hardware;
computer memory communicatively coupled to the processing hardware; and
a non-transitory computer-readable medium communicatively coupled to the processing hardware, and storing computer-executable instructions, wherein the processing hardware is configured for executing the computer-executable instructions and thereby performing operations comprising:
generating a graphical user interface by:
accessing a data model, wherein the data model comprises a plurality of data assets, and each data asset of the plurality of data assets represents at least one of software or hardware used for at least one of collecting, storing, processing, or transferring data;
generating a visual representation of the data model representing relationships among the plurality of data assets by configuring, within the visual representation, navigational elements for navigating within the visual representation of the data model and viewing data associated with a plurality of data inventories of the plurality of data assets;
determining, from the plurality of data inventories defining a plurality of inventory attributes for the plurality of data assets, a first data inventory associated with a first data asset, wherein the first data inventory comprises a plurality of fields that define inventory attributes of the first data inventory;
navigating, in response to a selection of a first navigational element associated with navigating to data associated with the first data inventory, from the visual representation of the data model to an additional visual representation of the first data inventory comprising:
an identifier of the first data asset;
indications of the plurality of fields associated with the first data inventory; and
an indication that one or more fields of the plurality of fields are unpopulated in response to determining that one or more inventory attributes corresponding to the one or more fields are not available;

determining, for the one or more fields that are unpopulated for the first data inventory, one or more attribute values for populating the one or more fields by:
generating and executing a data assessment based at least in part on one or more questions that map to the one or more inventory attributes corresponding to the one or more fields; or
scanning, via a software application installed on a computing device that is networked with one or more data repositories associated with the first data inventory, the one or more data repositories for the one or more attribute values from data stored in the one or more data repositories;

in response to determining the one or more attribute values corresponding to the one or more fields, modifying the first data inventory to include the one or more attribute values by populating the one or more fields with one or more respective attribute values; and
updating, in response to modifying the first data inventory, the additional visual representation of the first data inventory by updating the one or more fields with the one or more attribute values from the first data inventory.

8. The system of claim 7 , wherein scanning the one or more data repositories comprises:
determining, using one or more machine learning techniques, a category for an inventory attrib

Assignees

• Onetrust Llc

Inventors

• Barday Kabir A
• Karanjkar Mihir S
• Finch Steven W
• Browne Ken A
• Heard Nathan W
• Patel Aakash H
• Sabourin Jason L
• Daniel Richard L
• Patton-Kuhl Dylan D
• Brannon Jonathan Blake

Classifications

• G06F40/186

  Templates · CPC title

• G06F21/552

  involving long-term monitoring or reporting · CPC title

• H04L67/306

  User profiles · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title