Cloud DLP Mediation for Third-Party Data Stream Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing DLP technologies struggle to uniformly manage and implement data loss prevention policies across multiple third-party platforms, as data is often controlled by third-parties beyond the immediate control of the owning party.

Innovation Solution

A system and method utilizing a cloud infrastructure to consolidate data streams from various sources, apply filtering logic and reference tables to identify sensitive data, and implement DLP policies through serverless functions, enabling centralized management across third-party applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data is stored on third-party platforms, then data storage capacity and accessibility are improved, but control over the data and ability to implement DLP policies deteriorates

Engineering Contradiction:
Improvedata storage accessibilityVSAvoiddata control
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent introduces a cloud-based DLP system as an intermediary layer between the organization and third-party platforms. This mediator consolidates data streams from multiple third-party sources, applies DLP policies centrally, and maintains control over sensitive data without requiring direct control of the underlying third-party infrastructure. The system acts as a bridge that preserves accessibility while reasserting control.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple third-party platforms are used, then functional versatility is improved, but system complexity and difficulty of uniform DLP implementation increase

Engineering Contradiction:
Improvefunctional versatilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges multiple data streams from different third-party platforms into a unified data stream that is processed through a single cloud-based DLP system. By consolidating the DLP functionality into one centralized system rather than implementing separate DLP solutions for each platform, the patent reduces overall system complexity while maintaining the ability to handle diverse data sources.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The cloud-based DLP system is designed as a universal platform that can handle data from multiple different third-party sources through a single interface. The system performs multiple functions including data consolidation, policy application, and monitoring across various platforms, eliminating the need for platform-specific DLP implementations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If traditional DLP implementation is used across multiple platforms, then data protection coverage is improved, but implementation cost and setup complexity increase

Engineering Contradiction:
Improvedata protection coverageVSAvoidimplementation cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent implements a self-service model where the cloud-based DLP system automatically consolidates data streams, applies appropriate policies, and manages sensitive data without requiring manual configuration at each third-party platform. This automation reduces implementation costs and setup complexity while maintaining comprehensive data protection coverage.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12493711B2Data loss prevention framework using cloud infrastructure
Publication Date: 2025.12.09 CAPITAL ONE SERVICES LLC
  • US12493711B2 patent drawing
  • US12493711B2 patent drawing
  • US12493711B2 patent drawing

AI summary

A system and method for data loss prevention (DLP) is disclosed, the system and method including at least: receiving, by one or more computing devices and from one or more remote sources, one or more data streams each containing a textual data; consolidating, by the one or more computing devices, the one or more data streams into a single data stream, wherein the single data stream includes a field indicating from which of the one or more remote sources the textual data for each of the one or more data streams originates; transmitting, by the one or more computing devices, the single data stream to an analytics engine; determining, with the analytics engine, whether the textual data of each of the one or more data streams contains a sensitive data using a reference table; and based on the determining, transmitting, by the one or more computing devices, a request to the one or more remote sources to delete the textual data.