Local Data Scanning for Security Compliance Profiling

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional data storage systems face security risks and resource inefficiencies due to centralized data scanning and profiling, which require significant computational resources and network bandwidth, and expose sensitive data to potential leaks.

Innovation Solution

Implementing local data scanning and profiling operations using serverless applications on client devices near data storage components, reducing reliance on centralized processing and minimizing network traffic, with confidence scoring and machine learning techniques to identify sensitive data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If centralized data scanning and profiling is implemented, then sensitive data can be identified and secured, but significant computational resources and network bandwidth are consumed

Engineering Contradiction:

Improvedata securityVSAvoidcomputational resources

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent segments the centralized scanning system into distributed scanning agents deployed across multiple data storage components. Each agent independently scans and profiles data locally, dividing the computational workload from the centralized server and reducing network bandwidth consumption while maintaining comprehensive data security coverage.

Inventive Principle:

Principle #1Segmentation

2Reliability

If centralized data scanning is performed, then sensitive data identification is achieved, but network traffic increases and latency occurs

Engineering Contradiction:

Improvedata securityVSAvoidnetwork latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary scanning actions at the data storage location before data needs to be transmitted for processing. Scanning agents perform initial identification and profiling locally, pre-processing data security assessments and reducing the need for subsequent network traffic and centralized re-scanning operations.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If centralized data access is implemented for scanning, then comprehensive data profiling is possible, but security risks and data exposure increase

Engineering Contradiction:

Improvedata profiling capabilityVSAvoidsecurity risks

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent implements local scanning agents with specific, limited functions at each data storage component rather than universal centralized access. Each agent has localized authority to scan and profile data in its specific storage environment, maintaining comprehensive profiling capability while minimizing security risks through distributed, principle-based access control.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS20260037666A1System and methods for scanning and profiling data for security compliance

Publication Date: 2026.02.05 CAPITAL ONE SERVICES LLC

AI summary

Techniques are disclosed for performing scanning and profiling of stored data to identify the location of data entries that comprise sensitive data that require storage in accordance with enhanced security requirements. The techniques advantageously move a portion of the scanning and profiling operations closer to the data storage locations, and involve deploying processing resources near the locations at which the data is stored rather than relying solely upon centralizing processing at a separate location. This approach has the advantages of reducing network traffic and latency, which can help improve performance and reduce costs, and may also facilitate organizations to better take advantage of distributed computing architectures, which can scale more effectively than centralized processing.