Graphical representation of an information management system

Patent metadata

Field	Value
Publication number	US-12488143-B2
Application number	US-202318527429-A
Country	US
Kind code	B2
Filing date	Dec 4, 2023
Priority date	Mar 13, 2018
Publication date	Dec 2, 2025
Grant date	Dec 2, 2025

Abstract

Systems and methods are described herein for graphically representing an information management system based on the characteristics of within the system. The systems and methods interface with various components of the system (e.g., administrative components, index components, and so on) to identify data having certain characteristics (e.g., personal data), and generate or render information (e.g., a heat map or other visual display) that represents areas or locations within the system storing the data. Thus, the systems and methods, in some embodiments, generate or create a data-specific view into the information management system.

First claim

What is claimed is:

1 . A system comprising:
at least one computer hardware processor; at least one non-transitory data storage medium, coupled to the at least one computer hardware processor and storing computer-executable instructions, which, when executed by the at least one computer hardware processor, cause the system to: in regard to primary data that is generated by one or more client computing devices, wherein the primary data is stored in primary storage devices that are geographically dispersed, perform data storage operations that generate secondary copies of the primary data and store the secondary copies at secondary storage devices that are geographically dispersed; scan the primary storage devices and the secondary storage devices to identify personal data among one or more of: the primary data and the secondary copies; based on the scan, identify, at the primary storage devices and at the secondary storage devices, one or more geographic locations that comprise at least some of the personal data identified in the scan; generate an index that relates the personal data identified in the scan with the one or more geographic locations; based on the index, render, at a user interface, one or more graphical representations that relate the personal data to the one or more geographic locations, wherein the one or more graphical representations include a risk analysis of first data, wherein the first data is stored at a first storage device among the primary storage devices and the secondary storage devices; receive, via the user interface, a first request to ameliorate a risk to the first data that was presented in the risk analysis, wherein the first request comprises a first data storage operation applicable to the first data; and perform the first data storage operation according to the first request.

2 . The system of claim 1 , wherein the risk analysis of the first data is based on one or more compliance requirements that are in effect at a geographical location of the first data.

3 . The system of claim 1 , wherein the risk analysis of the first data indicates that at least some of the first data is non-compliant with one or more of: a data protection law and a data protection regulation that is in effect at a geographical location of the first data.

4 . The system of claim 1 , wherein the risk analysis indicates a plurality of risk levels associated with corresponding parts of the first data, and wherein the first data storage operation ameliorates a highest risk level, among the plurality of risk levels, of one or more parts of the first data that carry the highest risk level.

5 . The system of claim 1 , wherein the risk analysis indicates a deficiency of backup operations of the first data, and wherein the first data storage operation comprises generating one or more secondary copies of the first data.

6 . The system of claim 1 , wherein the first data storage operation performs one or more of: deletes the first data from the first storage device, moves the first data from the first storage device to a second storage device, and encrypts the first data.

7 . The system of claim 1 , wherein the first data storage operation redacts the first data to remove, from the first data, one or more of: personally identifiable information (PII) and sensitive personal information (SPI).

8 . The system of claim 1 , wherein the one or more graphical representations that relate the personal data to the one or more geographic locations also indicate an amount of personal data stored at each of the one or more geographic locations.

9 . The system of claim 1 , wherein the index is stored at a storage manager, which is a component of the system, and wherein the storage manager generates information for the risk analysis that is presented at the user interface, and wherein the storage manager manages the first data storage operation.

10 . The system of claim 1 , wherein the index is stored at a secondary storage computing device that hosts a media agent, which is a component of the system, and wherein the media agent generates information for the risk analysis that is presented at the user interface, and wherein the media agent performs the first data storage operation.

11 . A system comprising:
one or more computer hardware processors coupled to one or more non-transitory computer-readable media that store computer-executable instructions, which, when executed by the one or more computer hardware processors, cause the system to: perform data storage operations that generate secondary copies of primary data in that is stored in primary storage devices that are geographically dispersed, and store the secondary copies at secondary storage devices that are geographically dispersed; based on scans of the primary storage devices and of the secondary storage devices, identify, among one or more of: the primary data and the secondary copies, sensitive data that corresponds to one or more regulatory criteria; based on the scans, identify, among the primary storage devices and the secondary storage devices, one or more geographic locations, each of which comprises at least some of the sensitive data identified in the scans; generate indexing information that relates the sensitive data identified in the scans with the one or more geographic locations; based on the indexing information, cause a user interface to render one or more graphical representations that relate the sensitive data to the one or more geographic locations, wherein the one or more graphical representations include a risk analysis of first data, wherein the risk analysis indicates a plurality of risk levels associated with corresponding parts of the first data, and wherein the first data is stored at a first storage device among the primary storage devices and the secondary storage devices; receive, via the user interface, a first request to ameliorate a risk to the first data that was presented in the risk analysis, wherein the first request comprises a first data storage operation applicable to at least one part of the first data; and perform the first data storage operation according to the first request.

12 . The system of claim 11 , wherein the first data storage operation ameliorates a highest risk level, among the plurality of risk levels, of at least one part of the first data that carries the highest risk level.

13 . The system of claim 11 , wherein the risk analysis of the first data is based on one or more compliance requirements that are in effect in a geographical location of the first data.

14 . The system of claim 11 , wherein the risk analysis of the first data indicates that at least one part of the first data is non-compliant with one or more of: a data protection law and a data protection regulation, that is in effect at a geographical location of the first data.

15 . The system of claim 11 , wherein the risk analysis indicates a deficiency of backup operations of the first data, and wherein the first data storage operation comprises generating one or more secondary copies of the first data.

16 . The system of claim 11 , wherein the first data storage operation performs one or more of: deletes the first data from the first storage device, moves the first data from the first storage device to a second storage device, and encrypts the first data.

17 . The system of claim 11 , wherein the first data storage operation redacts the first data to remove, from the first data, one or more of: personally identifiable information (PII) and sensitive personal information (SPI).

Assignees

• Commvault Systems Inc

Inventors

• Mutha Manas Bhikchand
• Sinha Prosenjit

Classifications

• G06F16/2228

  Indexing structures · CPC title

• G06F16/29

  Geographical information databases · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title