Personal Data Sensitivity Tagging for Selective Deletion

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current computer systems and networks face difficulties in selectively identifying and deleting sensitive or personal data, especially when it is intertwined with non-sensitive information, and in propagating this deletion across various applications and storage devices, due to lack of effective data management techniques.

Innovation Solution

A computer-implemented method for selective discovery, management, and deletion of personal data, which involves accessing data on network resources, identifying sensitive data elements, determining their sensitivity levels, generating a catalogue, tagging sensitive data elements, and propagating these tags across data tables to enable targeted deletion.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If sensitive data is stored together with non-sensitive data in the same data sets, then storage efficiency is improved, but selective identification and deletion of sensitive data becomes difficult

Engineering Contradiction:

Improvedata storage efficiencyVSAvoiddifficulty of identifying sensitive data

Core Design Contradiction:

Quantity of substanceVSDifficulty of detecting and measuring

Solution Approach 1:

The patent segments data elements by assigning sensitivity tags (e.g., PII tags) to identify sensitive data within mixed data sets. This allows the system to maintain combined storage while enabling selective identification and deletion of sensitive portions through metadata markers that distinguish sensitive from non-sensitive data elements.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces sensitivity tags and metadata as intermediary elements that bridge sensitive and non-sensitive data. These tags act as mediators that enable the system to track, identify, and selectively delete sensitive data without affecting non-sensitive data, resolving the contradiction between combined storage and selective deletion.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If data is propagated across multiple applications and network resources, then data sharing capability is improved, but tracking and deleting all instances of sensitive data becomes difficult

Engineering Contradiction:

Improvedata sharing capabilityVSAvoidloss of data control

Core Design Contradiction:

Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent implements feedback mechanisms where sensitivity tags propagate automatically with data across applications and network resources. When data is copied, transformed, or moved, the sensitivity metadata is preserved and tracked, enabling the system to locate and delete all instances of sensitive data by following the tag trail across the distributed environment.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The patent creates a universal tagging system that works across multiple applications, data formats, and network resources. The sensitivity tags serve multiple functions: identification, tracking, propagation notification, and deletion triggering, enabling consistent sensitive data management across the entire distributed system regardless of where the data resides.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If data transformation is performed on sensitive data, then data utility is improved, but identification of transformed sensitive data becomes difficult

Engineering Contradiction:

Improvedata utilityVSAvoiddifficulty of identifying transformed data

Core Design Contradiction:

Adaptability or versatilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent applies preliminary action by tagging data with sensitivity metadata before transformation occurs. This pre-tagging ensures that even when data undergoes transformation (format changes, processing, etc.), the sensitivity identifier remains attached or can be recovered, enabling continued identification and deletion of transformed sensitive data through the preserved metadata trail.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11562096B2Automated discovery and management of personal data

Publication Date: 2023.01.24 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Embodiments of the present disclosure describe selective discovery, management, and deletion of personal data. The method accesses a set of data on a networked resource. The data is formed of a plurality of data elements which are arranged in at least one data table. The method identifies one or more sensitive data elements within the set of data related to one or more individuals. The method determines a sensitivity level of the one or more sensitive data elements and generates a catalogue including at least one new data element representative of the one or more sensitive data elements and based on the sensitivity level of the one or more sensitive data elements. The method tags the one or more sensitive data elements within the catalogue based on the sensitivity level of the one or more sensitive data elements corresponding to the new data element.