Automatic data protection in a computer system

Patent metadata

Field	Value
Publication number	US-9129129-B2
Application number	US-201313925090-A
Country	US
Kind code	B2
Filing date	Jun 24, 2013
Priority date	Jun 24, 2013
Publication date	Sep 8, 2015
Grant date	Sep 8, 2015

Abstract

Techniques are provided for a data security system that includes two mappings: a first mapping that maps a security policy to sensitive type and a second mapping that maps the sensitive type to one or more data sets. The sensitive type indicates a class of sensitive data. Example data sets include columns, tables, tablespaces, files, and directories in a file system. Because a security policy is not tightly coupled to a target data set, the security policy becomes data-agnostic, portable, and reusable. Also, a security policy may be objectless in that, at some point in time, the security policy is not associated with any data set. A security policy may also be multifunctional in that the security policy may include multiple security features or requirements. A security policy may also be exhaustive in that all necessary security requirements prescribed for a data set can be included in the security policy.

First claim

What is claimed is:

1. A method comprising:
storing, in a computer system, a first mapping that maps a data security policy to a sensitive type, wherein the data security policy includes a particular security feature;
storing, in the computer system, a second mapping that maps the sensitive type to one or more data sets;
based on the first mapping and the second mapping, causing the particular security feature to be applied to each data set of the one or more data sets;
wher…

Assignees

• Oracle Int Corp

Inventors

• Raj Dilip
• Mir Rahil
• Rotondo Scott

Classifications

• G06F21/6218 Primary

  Physics · mapped topic