Method and system for processing data - Patents.com

Abstract

Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified within the query request. Personally identifying information associated with the query request may then be de-pseudonymized. A second request may then be generated using the de-pseudonymized personally identifying information, and a response to the second request may be received. The personally identifying information in the response may be pseudonymized to provide the client with the pseudonymized personally identifying information and data contained within the response.

Description

[Background technology]

[0001] Edge computing technologies such as data centers and content distribution networks (CDNs) are widely used to improve service quality by running services and caching content closer to end users. Many businesses have globally distributed and distributed content across different geographies. Region By utilizing data centers located in the US, companies are able to reduce costs and further improve the quality of service. Some of the data centers used by companies are home-built and utilize private software stacks and protocols that are not supported by commercial vendors but are otherwise made available by the home-built data center. However, using private software or accessing such private software that resides in the home-built data center is a violation of the user's privacy. Information Security For example, the user's Internet Protocol address, user name, etc. User information, including but not limited to, may be identified, tracked, and / or otherwise compromised. Yu -Zadeh Ta This is the most concerning issue and therefore a potential security issue. data The problem is especially with users and data Safety features This could jeopardize the adoption of enterprise-provided services and / or self-built data centers in jurisdictions with different regulations. Summary of the Invention [Problem to be solved by the invention]

[0002] According to examples of the present disclosure, a general-purpose infrastructure, solution, and framework is described that provides a reliable, secure, compatible, centralized data checkpoint to restrict and / or verify data access to data residing in a data center located in a first jurisdiction. For example, an employee of a company located in a first jurisdiction may request access to a user and data center in the first jurisdiction. Safety features The company may be bound by regulations, and employees of the company who are in the second jurisdiction may be subject to the same restrictions as users and data in the first jurisdiction. Safety features Regulation of data security in second jurisdiction Regulations and users and data that may exist between the first and second jurisdictions. Safety features The general-purpose infrastructure, solutions, and frameworks described herein ensure that access to data in a first data center located in a first jurisdiction by employees residing in or otherwise associated with a second jurisdiction is restricted. That is, employees residing in or otherwise associated with a second jurisdiction are restricted as to what data they can access in a data center located in a first jurisdiction. In other words, the general-purpose infrastructure, solutions, and frameworks described herein ensure that only authorized data in a data center located in a first jurisdiction is accessible by employees of an enterprise residing in or otherwise associated with a second jurisdiction, for example, via internal access applications and processes implemented within an internal web application. The solutions disclosed herein will be implemented only if they comply with and are permitted by the regulations of the relevant jurisdictions. If the regulations of the relevant jurisdictions change, the solutions disclosed herein will also be replaced with new solutions that meet the requirements.

[0003] According to examples of the present disclosure, a generic infrastructure, solution, and framework provides a centralized data access point that restricts all traffic from a particular type of user or employee and directs that particular traffic to a corresponding gateway. This corresponding gateway then understands what data the user or employee is requesting by scanning the data and checking the applied data schema, and determines the applicable policy from the policy repository based on the type of data or category of data associated with the request. Thus, users or employees from different jurisdictions with different types of data processing can access data stored and protected for compliance and regulatory requirements from a data center in a first jurisdiction. Rude In this manner, each gateway is guaranteed to obtain a different set of data subsets that may contain different pieces of data, i.e., the same gateway may be used, but different policies may be applied to the request or requested data depending on the origin of the data access or the information being requested.

[0004] The general infrastructure, solutions, and frameworks described herein: For Data Security A data access gateway; For Data Security Includes details of the operation of one or more applications running within the data access gateway. For Data Security Examples of applications that may run within the data access gateway may include, but are not limited to, a log retrieval service. For Data Security The Data Access Gateway provides a single point of entry, centralized data processing and policy enforcement that is verifiable and auditable by a third party and adaptable to changing policy or compliance requirements. For Data Security The Data Access Gateway may act as a proxy for all authorized / registered internal applications within the data center. Additionally, For Data SecurityThe data access gateway can block any access to the protected data and ensure that only authorized data, such as engineering data, is accessible by company employees located in or otherwise associated with a second jurisdiction different from the first jurisdiction. For Data Security All data accessed through the data access gateway can be audited and verified. [Means for solving the problem]

[0005] According to an example of the present disclosure, a method for processing data is described that includes receiving a query request, identifying a data pattern in the query request, de-pseudonymizing personally identifying information associated with the query request, generating a second request using the de-pseudonymized personally identifying information, receiving a response to the second request, pseudonymizing the personally identifying information in the response, and providing the pseudonymized personally identifying information and data included in the response to a client.

[0006] According to an example of the present disclosure, a system for processing data is described. The system includes a storage area and For Data Security and a data access gateway, For Data Security The data access gateway is configured to receive a query request, identify a data pattern in the query request, de-pseudonymize personally identifying information associated with the query request, generate a second request using the de-pseudonymized personally identifying information, receive a response to the second request, pseudonymize the personally identifying information in the response, and provide the pseudonymized personally identifying information and data included in the response to a client.

[0007] According to an example of the present disclosure, an electronic device is described that may include a memory and a processor, the memory being adapted to store one or more computer instructions that, when executed by the processor, cause the processor to receive a query request, identify a data pattern in the query request, de-pseudonymize personally identifiable information associated with the query request, generate a second request using the de-pseudonymized personally identifiable information, receive a response to the second request, pseudonymize the personally identifiable information in the response, and provide the pseudonymized personally identifiable information and data included in the response to a client.

[0008] Any of the one or more aspects may be combined with any other aspect of the one or more aspects. Any of the one or more aspects described herein.

[0009] This Summary is provided to introduce in a simplified form a selection of concepts that are further described below in the Detailed Description. This Summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to limit the scope of the claimed subject matter. Additional aspects, features, and / or advantages of the examples will be set forth in part in the description that follows, and in part will be obvious from the description, or may be learned by practice of the disclosure. [Brief description of the drawings]

[0010] To easily identify the discussion of any particular element or operation, the most significant digit or digits in a designator refer to the Figure in which that element is first introduced.

[0011] [Figure 1] FIG. 1 illustrates an example architecture of a generalized infrastructure, solution, and framework according to an example of the present disclosure. [Diagram 2]FIG. 13 illustrates an example of a registration request process according to examples of the present disclosure. [Diagram 3] FIG. 3 illustrates an example operational process 300 for implementing a query to an information store, such as a target object information store, according to an example of the present disclosure. [Figure 4] FIG. 2 illustrates an example of a data platform for a data access gateway according to an example of the present disclosure. [Diagram 5] FIG. 1 illustrates a simplified method of routing an incoming request from a requesting entity to an appropriate gateway, determining a policy associated with the incoming request, and applying the policy to the request, for example, but not limited to, applying the policy to data received in the request and / or data destined for the requesting entity, shown in accordance with an example of the present disclosure. [Figure 6] FIG. 2 illustrates a simplified method for processing data according to an example of the present disclosure. [Figure 7] FIG. 1 is a block diagram illustrating the physical components (e.g., hardware) of a computing device that can be used to implement aspects of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] In the following detailed description, reference is made to the accompanying drawings, which form a part hereof, and in which specific aspects or examples are shown by way of illustration. These aspects may be combined, other aspects may be utilized, and structural changes may be made without departing from the disclosure. These aspects may be embodied as methods, systems, or devices. As such, these aspects may take the form of a hardware implementation, an entirely software implementation, or an implementation combining software and hardware aspects. Therefore, the following detailed description should not be taken as limiting, and the scope of the disclosure is limited by the appended claims and their equivalents.

[0013] In the examples provided herein, the generic infrastructure, solutions, and frameworks include an operational assurance model that provides an opportunity for employees located at an operations center in a first jurisdiction to review and approve data schema proposals made by enterprise employees in a second jurisdiction, and such schema proposals may be immediately put into effect once reviewed. Additionally, another entity may audit the entire schema review process and open a support ticket if something appears to be incorrect or is otherwise not appropriate. Thus, employees located at the operations center in the first jurisdiction may respond to the ticket under a service level agreement (SLA). Additionally, the generic infrastructure, solutions, and frameworks provide an operational assurance model that provides an opportunity for enterprise employees located in a second jurisdiction to review and approve data schema proposals made by enterprise employees in a second jurisdiction, and such schema proposals may be immediately put into effect. Additionally, another entity may audit the entire schema review process and open a support ticket if something appears to be incorrect or is otherwise not appropriate. Thus, employees located at the operations center in the first jurisdiction may respond to the ticket under a service level agreement (SLA). Additionally, the generic infrastructure, solutions, and frameworks provide an operational assurance model that provides an opportunity for enterprise employees located in a second jurisdiction to review and approve data schema proposals made by enterprise employees in a second jurisdiction. Ico The data access gateway for the data repository provides a path for entities and businesses located in the second jurisdiction to determine a process for submitting patches to the data access gateway for the data repository and allowing the option to perform updates. According to examples of the present disclosure, trusted access protocols may be configured to apply to existing roles, new roles, and existing trusted roles. Such protocols may be configured based on operations center, employee, location, etc.

[0014] 1 illustrates an example architecture of a generic infrastructure, solution, and framework 100 according to an example of the present disclosure. The example architecture of the generic infrastructure, solution, and framework 100 may provide a centralized data access point that restricts all traffic from a particular type of user or employee and directs the particular traffic to a corresponding gateway. For example, a public network user 104 making a data request may first submit the data request to a For Data SecurityThe public network user 104 may be located within a first jurisdiction 112 and such requests may be provided to a load balancer / gateway agent 116, which may validate and audit the data access schema before submitting the request to a production data center 120, and such requested data may be returned. As another example, a corporate network user 124 located within the first jurisdiction 112 may: For data securityThe requests may be routed to the data access gateway 108 of the corporate network user 124, and since the corporate network user 124 may reside in the first jurisdiction 112, which is the same jurisdiction in which the production data center 120 resides, such requests may be provided to a gateway (e.g., 128) specific to the first jurisdiction 112. Thus, one or more app / data registration centers 126 in the internal data center platform 132 may be used to service the requests routed by the corporate network user 124. In another example, a corporate network user 136 residing in a second jurisdiction 140 (e.g., a corporate network user residing in a jurisdiction different from the jurisdiction (e.g., 112) of the production data center 120 and / or a corporate network user 124 residing in the first jurisdiction 112) may send a data request to the production data center 120, and such data request may be specifically routed to a second jurisdiction corporate network user gateway 144 specific to a jurisdiction other than the second jurisdiction 140 and / or the first jurisdiction 112. The second jurisdiction corporate network user gateway 144 may then address this particular request and service it using an app / data registration center. An internal corporate network user 124 residing in the first jurisdiction 112 may be identified as an internal corporate network user 124 residing in the first jurisdiction 112 based on one or more of (but not limited to) location information associated with the user 124, location information associated with an outgoing request from a computing device associated with the user 124, a security policy associated with the user 124, a username identifier associated with the user 1234, etc.A corporate network user 136 residing in the second jurisdiction 140 may be identified as a corporate network user 136 residing in the second jurisdiction 140 based on one or more of, but not limited to, location information associated with the user 136, location information associated with an outgoing request from a computing device associated with the user 136, a security policy associated with the user 136, a username identifier associated with the user 136, and the like. A gateway agent 116 that is responsive to the data request or is otherwise selected to process the data request then scans the received data, understands what data the user or employee is requesting by checking the applied data schema, and determines the applicable policy from the security policy repository 122 based on the type of data or category of data associated with the request. Thus, different types of data processing allow users or employees from different jurisdictions to access and store data from the production data center 120 located in the first jurisdiction 112, for compliance and regulatory requirements. Rude In this manner, the gateway 108 is guaranteed to obtain a different set of data subsets that may include different pieces of data. That is, the same gateway 108 may be used, but depending on the origin of the data access or the information being requested, different policies may be applied to the requested or requested data, where the policies may be retrieved from a data repository and based on the context surrounding the user. For example, a user identifier, a request origination identifier (e.g., IP address) associated with the user's mobile computing device, and / or other information utilized to identify the policy may be utilized. In some examples, the gateway 128 for corporate network users and the gateway 144 for corporate network users in the second jurisdiction may reside on the same device 146.

[0015] The general infrastructure, solution, and framework 100 described herein: For Data Security A data access gateway 108; For Data Security It includes details regarding the operation of one or more applications running within the data access gateway 108, including, but not limited to, a log retrieval service. For Data Security The data access gateway 108 provides a single point of entry, centralized data processing and policy enforcement that is verifiable and auditable by a third party and adaptable to changing policy or compliance requirements. For Data Security The data access gateway 108 may act as a proxy for all authorized / registered internal applications within the production data center 120. Additionally, For Data Security The data access gateway 108 can block any access to the protected data and ensure that only authorized data, such as engineering data, is accessible by company employees located in or otherwise associated with a second jurisdiction different from the first jurisdiction 112. Further, For Data Security All data accessed through the data access gateway 108 can be audited and verified. In some examples, For Data Security The data access gateway 108 may additionally include an internal data platform 132 and a production data center 120. In some examples, For Data Security The data access gateway 108 may be separate from the data center 106 , which includes the internal data center platform 132 and the production data center 120 .

[0016] The control plane may provide a mechanism to register approved data (catalogs, labels, and schemas) and applications. Such a control plane may be shared by the gateway 128 for corporate network users. The control plane may be given the task of registering / deregistering approved applications and channels through the control center, and of registering and labeling structured data carried by registered applications / channels. Unlabeled data is Protected It may be considered as data and APIs that carry that data are blocked. The control plane may further be given the task of defining and / or updating data processing policies.

[0017] FIG. 2 is a diagram illustrating an example of a registration request process according to an example of the present disclosure. As shown in FIG. 2, an employee or corporate user 202 of an enterprise located in a second jurisdiction (e.g., 140) may send a registration request to an app / data registration center 204. A trusted entity 206 may review and approve the request via the app / data registration center 204. By default, the approved app / channel / data schema is pushed or pulled to the data plane (data registration service 148) and may be immediately effective or otherwise implemented. A trusted entity reviewer 208 may audit and / or review the review decision made by the trusted entity 206. In some examples, if necessary, the trusted entity reviewer 208 may override the decision made by the trusted entity 206.

[0018] A newly registered application may include a new data catalog, new data labels, and new data schemas, also referred to as data definitions. The data catalog contains information about approved data, protected data, and / or ProtectedThe cataloging may define or otherwise include a classification of all data, including but not limited to data. The classification of approved data may be indicated by a category identifier and may depend on the type of data and the detailed category assigned to the data. For example, some data may be defined as data residing at an enterprise in a first jurisdiction (e.g., 112) or an enterprise in a second jurisdiction (e.g., 140). Depending on such cataloging, data types may be assigned one or more details, labels, etc.

[0019] A data label may represent a data category, including a data type and a semantic type. 。

[0020] D A data schema may define or otherwise contain a complete data object used as a payload in a request or response. A data schema may contain a set of single data fields or nested data objects. 。

[0021] Attributes may indicate attributes of a data label that relate to different security requirements or contexts. A particular attribute may be defined by or otherwise include a namespace and a value, where the namespace defines or otherwise includes the security requirement or context. 。

[0022] A policy may include policy rules, which may include subject, object, and action triplets. The policy as a whole indicates a given subject and the action to be performed on the object. For example, a policy may anonymize all data whose attributes are protected under a project if the data is accessed by an employee of a company located in a second jurisdiction (e.g., 136).

[0023] Realizing the above general-purpose infrastructure, solutions, and frameworks: (a) providing full control of data traffic in a production environment for a data center located in a first jurisdiction; (b) providing complete control over the metadata because the trusted entity has exclusive control over the metadata; and (c) permitting trusted entities to be the final approvers of registered applications, data catalogs / labels / schemas, and policies in the control plane; (d) performing built-in schema validation at the data plane so that data is structured and therefore restricts or disallows dynamic data construction; and (e) annotating each data field with business use information and labeling it as a data type, e.g., project “Data_Compliance”; This enhances security.

[0024] According to an example of the present disclosure, a trusted entity, e.g., a trusted entity data center 106 / 110, may include capabilities and configurations to set up isolated areas, such as (but not limited to) zones, within the trusted entity data center 106 / 110, including an internal platform service 134 and a production data center 120. That is, the trusted entity may provide capabilities and configurations to route traffic from an enterprise's network users (e.g., employees 136) located in a second jurisdiction (e.g., 140) to an internal platform service 134 and / or a production data center (e.g., 120) located in a first jurisdiction (e.g., 112) through a gateway (e.g., 144) for the enterprise's network users in the second jurisdiction. Thus, the trusted entity may provide capabilities to allow traffic from an enterprise's employees (e.g., 136) located in the second jurisdiction (e.g., 140) through a service zone to an operations center located in the first jurisdiction (e.g., 112). For example, the trusted entity may provide capabilities to allow traffic from the service zone to enter the trust zone for metadata synchronization. In some examples, the trusted entity may provide the ability to deny / disallow traffic from employees (e.g., 136) of an enterprise located in a second jurisdiction (e.g., 140) to the trusted area and traffic from an operations center located in a first jurisdiction to the trusted area, where the trusted area may include access to internal platform services 134 and / or internal data center platform 132. The trusted entity may build and manage an operations gateway 144 for corporate network users in the second jurisdiction, which may be an isolated zone hosting a dedicated load balancer and data plane for routing employees of the enterprise located in the second jurisdiction, while the operations gateway 144 for users of the corporate network in the second jurisdiction may be owned and / or operated by a trusted entity owned and / or operated by an enterprise different from the enterprise located in the second jurisdiction.

[0025] FIG. 3 is an example of a network according to the present disclosure. Target Object FIG. 3 illustrates an exemplary operational process 300 for implementing a query to an information store, such as an information store. Process 300 may begin at 301, where a user using a network browser selects a va- targetobject -Like test.domain.net / page / accountInfo Target Object You may access the service page. 302 uses the service, Target Object If the employee accessing the service page is not yet logged in, the request may be directed to an authentication single sign-on (SSO) service to complete the authentication and obtain an SSO token. Thus, the employee_id, name, email, and location may be known or provided from a sign-on process, etc. For example, in 303, the name, email, employee_id, and location may be entered or received, for example, via javascript. For example, the JavaScript may be as follows:

number

[0026] At 304, the http request may request usage information based on the UserID that is the subject of the request. At 305, the registered applications and their functions may include the parameters employee location ssoUser.location and application deployment environment process.env.ZONE. The data access gateway client may extract the pseudonymized UserID and request the real UserID for the data access gateway validation service request. At 306, the request processing service may call the data pseudonymization engine to request recovery of the real UserID. At 307, the data pseudonymization engine may search the hierarchical data pattern database to determine policies and settings to perform pseudonymization recovery. At 308, the request processing service sends the real UserID back to the data access gateway client so that the data access gateway client can reconstruct the HTTP with the real UserID and forward it to the application service front end at 309.

[0027] At 310, the data access gateway client may initiate and / or maintain a session. For example, an application service front-end may request and / or receive data from downstream services and databases (e.g., application back-ends PSM A and DB1, and / or application back-ends PSM B and DB2) according to a business definition. Target Object The information may be used to request and obtain results. At 311, the application services front end may send the results back to the web client target object in the form of an http reply.

[0028] At 312, the data access gateway client may intercept the http reply and rewrite the message content according to the previous session information and the definition of the data pattern / grading database. Such information may be forwarded to the data access gateway reply processing service. At 313, the data access gateway response processing service, e.g., response dispatch, may send the content to the corresponding engine (e.g., data transformation / pseudonymization engine, data filtering anonymization engine, and / or data loss (DLP) engine) for processing according to the context and the definition of the data pattern / hierarchy database. In some examples, at 313, the UserID may be pseudonymized again, where for registered structured data, the access associated with the user does not have a certain level of data access rights to read, is defined according to another data classification category. In some examples, the anonymization may include DLP processing for unstructured / semi-structured and unregistered data. At 314, the data access gateway reply processing service may send the desensitized reply message back to the data access gateway client. As such, the data access gateway client may return the desensitized data to the user at 315. As shown in Figure 3, a request from a web browser may originate from a user or employee of an enterprise associated with or located within a second jurisdiction, such that such a request may be directed to a zone or data that resides in a different jurisdiction.

[0029] According to the above example, there is very little impact on the business logic of existing applications, no additional changes are required in the database data storage for the entire service call chain, and the system can efficiently realize data collection and processing, which can be used for subsequent audits. Also, user / employee authentication information can be more easily obtained and used for employee identification and desensitization strategies. Adding a layer of data processing may result in an additional 1-2 round trip data transfer, which may increase certain query latency.

[0030] 4 is a diagram illustrating an example of a data platform of a data access gateway according to an example of the present disclosure. In some implementations, a data platform (DP) that provides data products accepts a variety of flexible and complex SQL queries and calculations. Such queries may be difficult to determine, and the data Degree of protection may be determined based on the underlying data source (library, table, row, column), etc., and the described DP platform may include multiple query engines or multiple types of query middleware that can analyze queries such as SQL queries submitted by users and combine contexts to control authorization and read data. By placing these two types of middleware at intermediate nodes of all upper application services, the lowest level different data sources may be desensitized to data. As another example, if the data access gateway directly intercepts the http request, it will automatically interpret the SQL query and add additional data for the data access gateway, which increases the difficulty of parsing. Also, the lack of context information about the data source may lead to the difficulty of parsing. In addition to the return of the http page and the data output of the DP, there is a path that provides additional downloads via a third-party storage service. The above scheme cannot fully control all data channels.

[0031] In view of the above considerations, the data access gateway client 402 may be integrated with one or more query engines 404 and implemented within a query middleware. Thus, the query engine / query middleware may be used to: Protected It is possible to collect and manage data.

[0032] An exemplary workflow is as follows:

[0033] After the user completes authentication, a SQL query is entered on the data product client (browser) 406. One or more query engines may receive the SQL query and analyze the SQL query. If the SQL query contains parameters that have already been pseudonymized, such as UserID, the one or more query engines 404 may pass the data to a data access gateway 408 to recover the actual parameters at the end of the process.

[0034] Based on the final analysis result, the one or more query engines 404 can use the data engine to query the data from the data source 410. After the one or more query engines 404 obtain the returned data, the one or more query engines 404 can query the data pattern library and the desensitization strategy, as well as the attributes used, and desensitize the associated result fields or calculation results. In some examples, the DP labeling tool can label the data according to the data labeling policy. In some examples, the desensitization operation itself may be performed locally within the query middleware 404, while the associated data processing decisions may be performed by the data access gateway 408. The one or more query engines 404 can return the desensitization results to the user, for example, in the web browser 406, or provide such information to the third storage space 412 for download.

[0035] Based on the above, there is little, if any, impact on the business logic of existing applications. Although the DP query middleware 404 may utilize multiple data sources, it can still efficiently achieve data collection and processing that can then be used for auditing. Additionally, the web browser 406 and the query engine / query middleware 404 may be separated. As mentioned above, the data access gateway client 402 does not need to perform SQL analysis, which increases the efficiency of the above-mentioned process. Adding an additional layer of data processing and one or two round trip data transfers can increase the latency associated with a query, especially when there is a large amount of data and the large amount of data is queried.

[0036] 5, a simplified method is shown in accordance with an example of the present disclosure for routing an incoming request from a requesting entity to an appropriate gateway, determining a policy associated with the incoming request, and applying the policy to the request, for example, but not limited to, applying the policy to data received in the request and / or data destined for the requesting entity. A general sequence of steps of method 500 is shown in FIG. 5. In general, method 500 begins at 502 and ends at 512. Method 500 may include more or fewer steps, or the order of steps may be configured differently than those shown in FIG. 5. Method 500 may be implemented as a set of computer-executable instructions executed by a computer system, or encoded or stored on a computer-readable medium. In an exemplary aspect, method 500 is implemented by a computing device, e.g., For Data SecurityThe method 500 is performed by the data access gateway 108, the gateway 128 for the corporate network users, and / or the gateway 144 for the users of the corporate network of the second jurisdiction. However, it should be understood that aspects of the method 500 may be performed by one or more processing devices, such as a computer, a server, or other hardware elements. Furthermore, the method 500 may be performed by gates or circuits associated with a processor, an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a system on a chip (SOC), a neural processing unit, or other hardware device. In the following, the method 500 should be described with reference to the systems, components, modules, software, data structures, etc. described in connection with FIGS. 1-4.

[0037] Method 500 may begin at 502 and flow may proceed to process 504. At 504, a request may be received from an originating device associated with a user. For example, a request for information may be received from a user device. According to examples of the present disclosure, at 506, a policy associated with the originating device and / or a user associated with the originating device may be determined. For example, a user identifier, a request originating identifier (e.g., IP address) associated with the user's computing device, and / or other information used to identify the policy may be utilized and used to identify the policy. At 508, the received request may be routed to an appropriate gateway specific to or otherwise based on the identified policy. Then, at 510, the policy may be applied to the data. Method 500 may end at 512.

[0038] Referring now to FIG. 6, a simplified method for processing data is shown in accordance with an example of the present disclosure. A general sequence of steps of method 600 is shown in FIG. 6. In general, method 600 begins at 602 and ends at 614. Method 600 may include more or fewer steps, or the order of steps may be configured differently than that shown in FIG. 6. Method 600 may be implemented as a set of computer-executable instructions executed by a computer system, and may be encoded or stored on a computer-readable medium. In an exemplary aspect, method 600 may be implemented by a computing device, e.g., For Data Security The method 600 is performed by the data access gateway 108, the gateway 128 for the corporate network users, and / or the gateway 144 for the users of the corporate network of the second jurisdiction. However, it should be understood that aspects of the method 600 may be performed by one or more processing devices, such as a computer, a server, or other hardware elements. Furthermore, the method 600 may be performed by gates or circuits associated with a processor, an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a system on a chip (SOC), a neural processing unit, or other hardware device. In the following, the method 500 should be described with reference to the systems, components, modules, software, data structures, etc. described in connection with FIGS. 1-5.

[0039] Method 600 may begin at 602 and flow may proceed to process 604. At 604, a data request may be received from an originating device associated with a user. For example, a request for information may be received from a user device. According to examples of the present disclosure, a policy associated with the originating device and / or a user associated with the originating device may be determined and the personally identifiable information may be de-pseudonymized (606). At 608, the de-pseudonymized information may be utilized to generate a second request based on or otherwise utilizing the de-pseudonymized information. As an example, a response including information responsive to the originating request may be requested in the second request. The method then proceeds to 610, where the response may be pseudonymized based on the returned personally identifiable information. Then, at 612, the pseudonymized personally identifiable information responsive to the original request may be provided to the requesting user or a device associated with the requesting user. At 614, method 600 may end.

[0040] 7 is a block diagram illustrating the physical components (e.g., hardware) of a processing device 700 that can be used to implement aspects of the present disclosure. For example, the processing device 700 may represent one or more of the components illustrated in FIGS. 1-6. In a basic configuration, the processing device 700 may include at least one processing unit 702 and a system memory 704. Depending on the configuration and type of computing device, the system memory 704 may include, but is not limited to, volatile storage (e.g., random access memory), non-volatile storage (e.g., read-only memory), flash memory, or any combination of such memory.

[0041] The system memory 704 may include an operating system 705 and one or more program modules 706 suitable for carrying out various aspects disclosed herein. For example, the operating system 705 may be suitable for controlling the operation of the processing device 700. Additionally, aspects of the present disclosure may be carried out in conjunction with other operating systems, or any other application programs, but are not limited to any particular application or system. This basic configuration is illustrated in FIG. 7 by those components within dashed line 708. The processing device 700 may have additional features or functionality. For example, the processing device 700 may further include additional data storage devices (removable and / or non-removable), such as magnetic disks, optical disks, or tape. Such additional storage is illustrated in FIG. 7 by removable storage 709 and non-removable storage 710.

[0042] As mentioned above, a number of program modules and data files may be stored in the system memory 704. The application 720 or program module 706, when executed on at least one processing unit 702, may perform a process including, but not limited to, one or more aspects as described herein. The application 720 may include an application interface 721 that may be the same as or similar to the application interface 721 described in more detail above with respect to FIGS. 1-6. The application 720 may include, but is not limited to, the application interface 721 described above. For Data Security May be the same as or similar to a Data Access Gateway For Data SecurityThe applications 720 may include a data access gateway 723. The applications 720 may include a gateway 727 for users of the corporate network in the second jurisdiction, and a gateway 725 for corporate network users, as described in more detail above with respect to Figures 1-6. Additionally, the applications 720 may include policies 729. Other program modules that may be used in accordance with aspects of the present disclosure may include email and contact applications, word processing applications, spreadsheet applications, database applications, slide presentation applications, drawing programs, or computer aided application programs, etc., and / or one or more components supported by the system described herein.

[0043] Additionally, aspects of the present disclosure may be implemented in electrical circuits including discrete electronic components, packaged or integrated electronic chips including logic gates, circuits utilizing a microprocessor, or a single chip including electronic components or a microprocessor. For example, aspects of the present disclosure may be implemented via a system-on-a-chip (SOC) in which each or multiple components shown in FIG. 7 may be integrated onto a single integrated circuit. Such an SOC device may include one or more processing units, graphics units, communication units, system virtualization units, and various application functions, all integrated (or "baked") onto a chip substrate as a single integrated circuit. When operating via a SOC, the functionality described herein regarding the ability of a client to switch protocols may operate via application specific logic integrated with other components of the processing device 700 on a single integrated circuit (chip). Aspects of the present disclosure may also be implemented using other technologies, including but not limited to mechanical, optical, fluidic, and quantum technologies, capable of performing logical operations such as AND, OR, and NOT. Additionally, aspects of the present disclosure may be implemented within a general purpose computer or within any other circuit or system.

[0044] The processing unit 700 may also have one or more input devices 712, such as a keyboard, mouse, pen, audio or voice input device, touch or swipe input device, etc. Output devices 714, such as a display, speakers, printer, etc. may also be included. The above devices are examples and other devices may be used. The processing unit 700 may include one or more communication connections 716 that enable communication with other computing devices or the processing unit 750. Examples of suitable communication connections 716 include, but are not limited to, radio frequency (RF) transmitter, receiver and / or transceiver circuitry, a universal serial bus (USB), a parallel port, and / or a serial port.

[0045] The term computer readable media as used herein may include computer storage media. Computer storage media may include volatile and non-volatile removable and non-removable media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, or program modules. System memory 704, removable storage device 709, and non-removable storage device 710 are all examples of computer storage media (e.g., memory storage). Computer storage media may include RAM, ROM, Electrically Erasable Read Only Memory (EEPROM), Flash memory or other memory technology, CD-ROM, Digital Versatile Disk (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other article used to store information and accessible by processing device 700. Any such computer storage media may be part of processing device 700. Computer storage media does not include carrier waves or other propagated or modulated data signals.

[0046] Communication media may be embodied by computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and includes any information delivery media. The term "modulated data signal" may refer to a signal that has one or more characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media may include wired media, such as a wired network or direct-wired connection, and wireless media, such as acoustic, radio frequency (RF), infrared and other wireless media.

[0047] Additionally, aspects and functions described herein may operate on a distributed system (e.g., a cloud-based computing system) where application functions, memory, data storage and retrieval, and various processing functions may operate remotely from one another over a distributed computing network (e.g., the Internet or an intranet). Various types of user interfaces and information may be displayed via on-board computing device displays or via remote display units associated with one or more computing devices. For example, user interfaces and various types of information may be displayed and interacted with. Interactions with multiple computing systems that may be utilized to implement embodiments of the present invention include keystroke input, touch screen input, voice or other audio input, gesture input, etc., where the associated computing device is equipped with detection (e.g., camera) capabilities to capture and interpret user gestures to control functions of the computing device.

[0048] The terms "at least one," "one or more," "or," and "and / or" are open-ended expressions that are conjunctive and disjunctive in operation. For example, each of the expressions "at least one of A, B, and C," "at least one of A, B, or C," "one or more of A, B, and C," "one or more of A, B, or C," "A, B, and / or C," and "A, B, or C" means A only, B only, C only, A and B, A and C, B and C, or A, B and C.

[0049] The term "an" or "an" entity means one or more of that entity. Thus, the terms "one," "one or more," and "at least one" may be used interchangeably herein. It should also be noted that the terms "comprising," "including," and "having" may be used interchangeably.

[0050] As used herein, the term "automatic" and variations thereof refer to any process or operation, usually continuous or semi-continuous, that is performed without significant manual input as the process or operation is performed. However, performance of a process or operation can be performed automatically with significant or insignificant manual input, provided that the input is accepted prior to the performance of the process or operation. A manual input is considered significant input if it affects how the process or operation is performed. A manual input to consent to the performance of a process or operation is not considered "substantial."

[0051] Any of the steps, functions, and operations discussed herein may be performed continuously and automatically.

[0052] The exemplary systems and methods of the present disclosure have been described in conjunction with a computing device. However, in order to avoid unnecessarily obscuring the present disclosure, the foregoing description has omitted some known structures and devices. This omission should not be construed as limiting. Specific details are described to provide an understanding of the present disclosure. However, it should be understood that the present disclosure may be implemented in a variety of ways in addition to the specific details set forth herein.

[0053] Furthermore, although in the exemplary embodiments illustrated herein, various components of the system are shown to be co-located, some components of the system may be located remotely in a distal portion of a distributed network, such as a LAN and / or the Internet, or may be located in a dedicated system. Thus, it should be understood that the components of the system may be coupled to one or more devices, e.g., a server, a communication device, or may be co-located on a particular node of a distributed network, such as an analog and / or digital telecommunications network, a packet-switched network, or a circuit-switched network. As will be appreciated from the foregoing description, for reasons of computing efficiency, the components of the system may be located anywhere within the distributed network of components without affecting the operation of the system.

[0054] It should further be understood that the various links connecting the elements may be wired or wireless links, or any combination thereof, or any other known or future developed elements capable of providing data to and / or communicating data from the connected elements. These wired or wireless links may also be secure links and may be capable of communicating encrypted information. For example, the transmission medium used as the link may be any suitable carrier of electrical signals, including coaxial cable, copper wire, and optical fiber, or may take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications.

[0055] Although the flowcharts have been discussed and illustrated with reference to particular sequences of events, it should be understood that modifications, additions, and omissions may be made to the sequences without substantially affecting the operation of the disclosed configurations and aspects.

[0056] Several variations and modifications of the disclosure may be used, and it is possible to provide some features of the disclosure and not other features.

[0057] In yet another setting, the systems and methods of the present disclosure can be implemented in combination with special purpose computers, programmed microprocessors or microcontrollers and peripheral integrated circuit elements, ASICs or other integrated circuits, digital signal processors, hardwired electronic or logic circuits (e.g., discrete element circuits), programmable logic devices or gate arrays (e.g., PLDs, PLAs, FPGAs, PALs), special purpose computers, any similar devices, and the like. Overall, any device or means capable of implementing the methods shown herein can be used to implement various aspects of the present disclosure. Exemplary hardware that can be used in the present disclosure includes computers, handheld devices, phones (e.g., cellular phones, Internet-enabled phones, digital phones, analog phones, hybrid phones, etc.), and other hardware known in the art. Some of these devices include a processor (e.g., single or multiple microprocessors), memory, non-volatile storage, input devices, and output devices. Alternative software implementations may also be constructed to implement the methods described herein, including, but not limited to, distributed processing or component / object distributed processing, parallel processing, or virtual machine processing.

[0058] In yet another setting, the disclosed methods can be readily implemented in combination with software using object or object-oriented software development environments that provide portable source code that can be used on a variety of computer or workstation platforms. Alternatively, the disclosed systems may be implemented partially or fully in hardware using standard logic circuits or VLSI designs. Whether software or hardware is used to implement a system according to the present disclosure depends on the speed and / or efficiency requirements of the system, the particular functionality, and the particular software or hardware system or microprocessor or microcomputer system being used.

[0059] In yet another configuration, the disclosed methods may be implemented in part in software that may be stored on a storage medium and executed on a programmed general purpose computer, special purpose computer, microprocessor, etc. in cooperation with a controller and memory. In these instances, the disclosed systems and methods may be implemented as programs, e.g., applets, JAVA, or CGI scripts, installed on a personal computer, as resources resident on a server or computer workstation, as routines installed in dedicated measurement systems, system components, etc. The systems and / or methods may also be realized by physically incorporating them into software and / or hardware systems.

[0060] This disclosure is not limited to the standards and protocols described. Other similar standards and protocols not described herein already exist and are included in this disclosure. Furthermore, the standards and protocols described herein, and other similar standards and protocols not described herein, are periodically replaced by faster or more efficient equivalents having substantially the same functionality. Such replacement standards and protocols having the same functionality are considered to be equivalents included in this disclosure.

[0061] In various configurations and aspects, the present disclosure includes the components, methods, processes, systems, and / or devices as illustrated and described herein, including various combinations, subcombinations, and subsets thereof. Those skilled in the art, upon understanding the present disclosure, will understand how to make and use the systems and methods of the present disclosure. The present disclosure, in various configurations and aspects, includes providing devices and processes in the absence of items that may have been used in previous devices or processes to, for example, improve performance, provide ease of use, and / or reduce implementation costs, and in the absence of items not illustrated and / or described herein or in its various configurations or aspects.

[0062] The present disclosure relates to systems and methods for processing data, at least according to the examples provided in the following sections.

[0063] (A1) In one aspect, some examples include a method for processing data. The method may include receiving a query request, identifying a data pattern in the query request, de-pseudonymizing personally identifiable information associated with the query request, generating a second request using the de-pseudonymized personally identifiable information, receiving a response to the second request, pseudonymizing the personally identifiable information in the response, and providing the pseudonymized personally identifiable information and data included in the response to a client.

[0064] (A2) In some examples of A1 above, the method further includes receiving the query request from a computing device associated with a first user, determining a policy to be applied to data in the query request based on information associated with at least one of the computing device or the first user, and applying the policy to the data in the query request.

[0065] (A3) In some examples of A1 to A2 above, the policy is set to apply a data label to the data in the query request, and the data label depends on the determined policy.

[0066] (A4) In some examples of A1-A3 above, the method further includes routing the query request to a particular gateway based on the information associated with at least one of the query request or a first user, and routing the request from the particular gateway to an internal data center platform.

[0067] (A5) In some examples of A1-A4 above, the method further includes receiving a second query request from a second computing device associated with a second user, determining a second policy to be applied to data in the second query request based on information associated with at least one of the second user or the second computing device, and routing the second query request to a second particular gateway.

[0068] (A6) In some examples of A1 to A5 above, the inquiry request is associated with a first jurisdiction entity, and the second inquiry request is associated with a second jurisdiction entity different from the first jurisdiction entity.

[0069] (A7) In some examples of A1 to A6 above, a specific gateway is associated with a jurisdiction entity, and a second specific gateway is associated with a second jurisdiction entity.

[0070] In yet another aspect, some examples include a computing system comprising one or more processors and a memory coupled to the one or more processors, the memory storing one or more instructions that, when executed by the one or more processors, cause the one or more processors to perform any of the methods described herein (e.g., A1-A7 above).

[0071] In yet another aspect, some examples include a non-transitory computer-readable storage medium storing one or more programs for execution by one or more processors of a storage device, the one or more programs including instructions for performing any of the methods described herein (e.g., A1-A7 above).

[0072] For example, aspects of the disclosure are described above with reference to block diagrams and / or operational descriptions of methods, systems, and computer program products according to aspects of the disclosure. The functions / acts noted in the blocks may occur out of the order shown in any flowchart or process. For example, two blocks shown in succession may in fact be executed substantially simultaneously, or the blocks may sometimes be executed in the reverse order, depending on the functions / acts involved.

[0073] The description and illustration of one or more aspects provided in this application are not intended to restrict or limit the scope of the claimed disclosure in any manner. The aspects, examples, and details described herein are deemed sufficient to convey ownership and to enable others to make and use the best mode of the claimed disclosure. The claimed disclosure should not be construed as being limited to the aspects, examples, or details described herein. Various features (structural features and method features), whether illustrated or described in combination or individually, are intended to be selectively included or omitted to form an embodiment having a particular set of features. The description and illustrations provided in this application may enable those skilled in the art to envision changes, modifications, and alternative embodiments that fall within the spirit of the broader aspects of the general inventive concept embodied in this application without departing from the broader scope of the claimed disclosure.

[0074] [CROSS REFERENCE TO RELATED APPLICATIONS] This application is a continuation of U.S. application Ser. No. 17 / 694,540, filed on March 14, 2022. Reference and U.S. Provisional Application No. 63 / 297,469, filed January 7, 2022. No. Priority is claimed, and the contents of these applications are incorporated herein by reference in their entireties.

Claims

1. 1. A method for processing data, comprising: receiving a query request and identifying a data pattern within the query request; de-pseudonymizing personally identifiable information associated with the query request; and generating a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request; pseudonymizing the personally identifiable information in the response; and providing said pseudonymized personally identifiable information and data included in said response to the client; The method includes:

2. receiving the query request from a computing device associated with a first user; determining a policy to be applied to data in the query request based on information associated with at least one of the computing device or a first user; applying the policy to the data in the query request; The method of claim 1 further comprising:

3. The policy is configured to apply a data label to the data in the query request, the data label being dependent on the determined policy. The method of claim 2.

4. routing the query request to a particular gateway based on the information associated with at least one of the query request or a first user; Routing the request from the particular gateway to an internal data center platform; The method of claim 2 further comprising:

5. receiving a second query request from a second computing device associated with a second user; determining a second policy to be applied to data in the second query request based on information associated with at least one of the second user or the second computing device; routing the second query request to a second specific gateway; The method of claim 2 further comprising:

6. The inquiry request is associated with a first jurisdiction entity, and the second inquiry request is associated with a second jurisdiction entity different from the first jurisdiction entity. The method according to claim 5.

7. The particular gateway is associated with the jurisdiction entity, and the second particular gateway is associated with the second jurisdiction entity. The method according to claim 6.

8. A system for processing data, the system comprising: a storage area; and a data access gateway for security privacy, the data access gateway for security privacy comprising: receiving a query request and identifying a data pattern within the query request; de-pseudonymizing personally identifiable information associated with the query request; and generating a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request; pseudonymizing the personally identifiable information in the response; and providing said pseudonymized personally identifiable information and data included in said response to the client; The system is configured to run

9. Data Access Gateway for Security Privacy receiving the query request from a computing device associated with a first user; determining a policy to be applied to data in the query request based on information associated with at least one of the computing device or a first user; applying the policy to the data in the query request; 9. The system of claim 8, configured to execute:

10. The policy is configured to apply a data label to the data in the query request, the data label being dependent on the determined policy. The system of claim 9.

11. Data Access Gateway for Security Privacy routing the query request to a particular gateway based on the information associated with at least one of the query request or a first user; Routing the request from the particular gateway to an internal data center platform; 10. The system of claim 9, configured to execute:

12. Data Access Gateway for Security Privacy receiving a second query request from a second computing device associated with a second user; determining a second policy to be applied to data in the second query request based on information associated with at least one of the second user or the second computing device; routing the second query request to a second specific gateway; 10. The system of claim 9, configured to execute:

13. The inquiry request is associated with a first jurisdiction entity, and the second inquiry request is associated with a second jurisdiction entity different from the first jurisdiction entity. The system of claim 12.

14. The particular gateway is associated with the jurisdiction entity, and the second particular gateway is associated with the second jurisdiction entity. The system of claim 13.

15. 1. An electronic device comprising a memory and a processor, the memory being adapted to store one or more computer instructions that, when executed by the processor, cause the processor to: receiving a query request and identifying a data pattern within the query request; de-pseudonymizing personally identifiable information associated with the query request; and generating a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request; pseudonymizing the personally identifiable information in the response; and providing said pseudonymized personally identifiable information and data included in said response to the client; An electronic device that performs the following:

16. The processor, receiving the query request from a computing device associated with a first user; determining a policy to be applied to data in the query request based on information associated with at least one of the computing device or a first user; applying the policy to the data in the query request; 16. The electronic device of claim 15, configured to execute:

17. The policy is configured to apply a data label to the data in the query request, the data label being dependent on the determined policy.

17. The electronic device of claim 16.

18. The processor, routing the query request to a particular gateway based on the information associated with at least one of the query request or a first user; Routing the request from the particular gateway to an internal data center platform; 20. The electronic device of claim 16, configured to execute:

19. The processor, receiving a second query request from a second computing device associated with a second user; determining a second policy to be applied to data in the second query request based on information associated with at least one of the second user or the second computing device; routing the second query request to a second specific gateway; 20. The electronic device of claim 16, configured to execute:

20. The inquiry request is associated with a first jurisdiction entity, and the second inquiry request is associated with a second jurisdiction entity different from the first jurisdiction entity.

20. The electronic device of claim 19.

Images