Context-Aware Data Movement Protection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data protection techniques face challenges in automatically detecting violations of data protection policies during data movement operations and implementing remedial actions, particularly in cloud-based environments, which can lead to compliance issues and data security breaches.

Innovation Solution

A computer-implemented method that identifies the context of a data movement operation, applies relevant data protection policies using content scanners, and performs automated remedial actions when regulated data is detected, including actions like quarantine, redaction, repatriation, and blocking, to ensure compliance and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data protection policies are manually monitored and enforced during data movement operations, then compliance accuracy can be maintained, but operational efficiency and productivity decrease due to manual intervention requirements

Engineering Contradiction:

Improvecompliance accuracyVSAvoidoperational efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system enables self-service data protection by automatically detecting regulated data classes during data movement operations and autonomously applying remedial actions based on predefined policies, eliminating the need for manual monitoring while maintaining compliance accuracy

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Manual monitoring and enforcement mechanisms are replaced with automated content scanners and policy enforcement systems that use computational algorithms to detect regulated data and apply protection measures, substituting human-operated mechanical processes with automated electronic systems

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Difficulty of detecting and measuring

If automated content scanners are deployed to detect regulated data during data movement, then compliance detection capability improves, but system complexity and processing time increase

Engineering Contradiction:

Improvecompliance detection capabilityVSAvoidsystem complexity

Core Design Contradiction:

Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

Data protection policies are pre-configured with defined regulated data classes, content scanner configurations, and remedial actions before data movement operations occur. This preliminary setup allows the system to automatically detect and respond to compliance issues without requiring complex real-time decision-making logic during data movement

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The data movement operation is segmented into distinct phases: data identification, content scanning for regulated classes, policy evaluation, and remedial action execution. This segmentation allows each component to be independently optimized and managed, reducing overall system complexity while improving detection capability

Inventive Principle:

Principle #1Segmentation

3Reliability

If remedial actions are automatically executed when regulated data is detected, then data security and compliance are enhanced, but risk of automated errors and system failures increases

Engineering Contradiction:

Improvedata securityVSAvoidautomated error risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system implements preliminary validation and verification mechanisms that cushion against potential automated errors. Before executing remedial actions, the system validates detected regulated data against multiple criteria and prepares rollback capabilities to mitigate potential harmful effects of automated errors

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS11748511B2Protecting data based on context of data movement operation

Publication Date: 2023.09.05 EMC IP HLDG CO LLC

AI summary

Methods, apparatus, and processor-readable storage media for protecting data based on a context of data movement operations are provided herein. An example computer-implemented method includes identifying a context of a data movement operation based at least in part on a source and an indicated destination of data associated with the data movement operation; applying one or more data protection policies to the data movement operation based at least in part on the identified context, wherein a given data protection policy comprises one or more indications of one or more content scanners that are configured to detect data belonging to one or more regulated data classes; and in response to detecting data associated with the data movement operation that belongs to at least one of the regulated data classes, performing one or more automated remedial actions associated with the at least one regulated data class.