Migration Engine Routing Sensitive Items to DLP Engine

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

During email migration, there is a lack of effective mechanisms to enforce data loss prevention (DLP) rules, which can lead to the unintended transfer of sensitive content across systems, compromising security and compliance.

Innovation Solution

A system comprising a migration engine and a DLP engine that applies DLP rules during the migration process, routing sensitive items to the DLP engine for processing before transferring them to the target system, ensuring that only processed items are migrated, thereby maintaining data security and compliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DLP rules are enforced during migration by routing items through a DLP engine, then data security and compliance are improved, but migration complexity and processing time increase

Engineering Contradiction:

Improvedata securityVSAvoidmigration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a DLP engine as an intermediary component between the migration engine and the target system. This mediator processes items during migration to enforce DLP rules, thereby improving data security while managing the complexity through a dedicated security layer that operates independently from the core migration functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The migration system is segmented into distinct functional components: a migration engine for transferring items, a DLP engine for security processing, and configuration settings for control. This segmentation allows each component to specialize in its function, improving overall security while making the system more manageable and maintainable despite the added complexity.

Inventive Principle:

Principle #1Segmentation

2Reliability

If all items are routed through the DLP engine for processing, then data loss prevention is strengthened, but migration productivity decreases

Engineering Contradiction:

Improvedata loss preventionVSAvoidmigration speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system applies DLP processing selectively rather than universally. Through DLP configuration settings, administrators can specify which types of items should be processed by the DLP engine during migration. This partial application of DLP rules prevents data loss for sensitive items while avoiding the productivity penalty of processing every single item, thus balancing security needs with migration efficiency.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS10447638B2Automatically applying data loss prevention rules during migration

Publication Date: 2019.10.15 QUEST SOFTWARE INC

AI summary

Data loss prevention (“DLP”) rules can be automatically applied to items during a migration. When a migration is performed, a migration engine may be configured with migration configuration settings which define the items to be migrated from the source system to the target system. The migration engine may also be configured with DLP configuration settings which define the type of items on which DLP should be performed. When the DLP configuration settings indicate that DLP should be applied to an item to be migrated, the migration engine routes the item to a DLP engine rather than directly migrating the item to the target system. After the DLP engine has processed the item, the DLP engine can return the processed item to the migration engine which in turn can migrate the processed item to the appropriate location in the target system.