System for implementing multi-dimensional data obfuscation

Patent metadata

Field	Value
Publication number	US-2022253545-A1
Application number	US-202117173027-A
Country	US
Kind code	A1
Filing date	Feb 10, 2021
Priority date	Feb 10, 2021
Publication date	Aug 11, 2022
Grant date	—

Abstract

Systems, computer program products, and methods are described herein for implementing multi-dimensional data obfuscation. The present invention is configured to electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database; initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises: determining one or more data types associated with the one or more data artifacts; determining one or more exposure levels of the one or more data artifacts; retrieving, from a data obfuscation repository, one or more data obfuscation algorithms; and implementing the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types; and generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

First claim

What is claimed is:

1 . A system for implementing multi-dimensional data obfuscation, the system comprising:
at least one non-transitory storage device; and at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to:
electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database, wherein the first database comprises one or more data artifacts stored therein;
initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises:
determining one or more data types associated with the one or more data artifacts;
determining one or more exposure levels associated with the one or more data artifacts based on at least the one or more data types;
retrieving, from a data obfuscation repository, one or more data obfuscation algorithms based on at least the one or more exposure levels; and
implementing the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types; and

generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

2 . The system of claim 1 , wherein the at least one processing device is further configured to:
determine a number of obfuscation iterations for the one or more data artifacts based on at least the one or more exposure levels; retrieve, from the data obfuscation repository, the one or more data obfuscation algorithms; and iteratively implement the one or more data obfuscation algorithms on the one or more data artifacts based on at least the number of obfuscation iterations.

3 . The system of claim 2 , wherein the at least one processing device is further configured to:
implement the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types, wherein implementing further comprises obfuscating the one or more data artifacts to generate one or more masked data artifacts.

4 . The system of claim 3 , wherein the at least one processing device is further configured to:
receive, from the computing device of the user, a request to access the obfuscated first database; transmit control signals configured to cause the computing device associated with the user, an authentication request in response to receiving the request to access the obfuscated first database; receive, from the computing device of the user, an authentication response in response to the authentication request; validate the authentication response received from the user; and authorize the user to access the obfuscated first database based on at least validating the authentication response.

5 . The system of claim 4 , wherein the at least one processing device is further configured to:
receive, from the computing device of the user, the authentication response in response to the authentication request, wherein the authentication response comprises one or more authentication credentials associated with the user.

6 . The system of claim 5 , wherein the at least one processing device is further configured to:
determine one or more authorization requirements associated with the one or more masked data artifacts based on at least the one or more exposure levels; determine an authentication level of the user based on at least the one or more authentication credentials; and determine that the authentication level of the user meets the one or more authorization requirements associated with at least a portion of the one or more masked data artifacts.

7 . The system of claim 6 , wherein the at least one processing device is further configured to:
initiate a data deobfuscation engine on at least the portion of the one or more masked data artifacts; unmask, using the data deobfuscation engine, at least the portion of the one or more masked data artifacts; generate at least a portion of the one or more data artifacts based on at least unmasking at least the portion of the one or more masked data artifacts; and transmit control signals configured to cause the computing device of the user to display at least the portion of the one or more data artifacts.

8 . The system of claim 7 , wherein the at least one processing device is further configured to:
unmask, using the data deobfuscation engine, at least the portion of the one or more masked data artifacts, wherein unmasking further comprises implementing one or more data deobfuscation algorithms on at least the portion of the one or more masked data artifacts.

9 . The system of claim 8 , wherein the at least one processing device is further configured to:
determine the one or more authorization requirements associated with the one or more masked data artifacts based on at least the one or more exposure levels, wherein the one or more authorization requirements comprises at least the number of obfuscation iterations; and iteratively implement the one or more data deobfuscation algorithms on the one or more data artifacts based on at least the number of obfuscation iterations.

10 . A computer program product for implementing multi-dimensional data obfuscation, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:
electronically receive, from a computing device of a user, a request to implement a multi-dimensional data obfuscation on a first database, wherein the first database comprises one or more data artifacts stored therein; initiate a data obfuscation engine on the first database based on at least receiving the request, wherein initiating further comprises:
determining one or more data types associated with the one or more data artifacts;
determining one or more exposure levels associated with the one or more data artifacts based on at least the one or more data types;
retrieving, from a data obfuscation repository, one or more data obfuscation algorithms based on at least the one or more exposure levels; and
implementing the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types; and
generate an obfuscated first database based on at least initiating the data obfuscation engine on the first database.

11 . The computer program product of claim 10 , wherein the first apparatus is further configured to:
determine a number of obfuscation iterations for the one or more data artifacts based on at least the one or more exposure levels; retrieve, from the data obfuscation repository, the one or more data obfuscation algorithms; and iteratively implement the one or more data obfuscation algorithms on the one or more data artifacts based on at least the number of obfuscation iterations.

12 . The computer program product of claim 11 , wherein the first apparatus is further configured to:
implement the one or more data obfuscation algorithms on the one or more data artifacts based on at least the one or more data types, wherein implementing further comprises obfuscating the one or more data artifacts to generate one or more masked data artifacts.

13 . The computer program product of claim 12 , wherein the first apparatus is further configured to:
receive, from the computing device of the user, a request to access the obfuscated first database; transmit control signals configured to cause the computing device associated with the user, an authentication request in response to receiving the request to access the obfuscated first databa

Assignees

• Bank Of America

Inventors

• Sloane Brandon
• Kim Jinyoung Nathan
• Tache Adriana
• Dudley Charles Edward

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/6254

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• G06F21/6227 Primary

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F21/31

  User authentication · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title