Patent ID: 11914732
Assignee: STRIPE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer implemented method for hard deletion of user data, the method comprising:
receiving, at a computer system, a request from a user computer system to delete user data;
determining, by the computer system, a unique user identifier associated by the computer system with a user making the request;
determining, by the computer system, whether a data partition, in which data generated by a job or subsystem of the computer system is stored, is predicted to contain a record having the unique user identifier by searching a hierarchical set of filters, wherein an upstream job or subsystem associated with a first filter in the hierarchical set of filters feeds data to a downstream job or subsystem associated with a second filter in the hierarchical set of filters, wherein each filter in the hierarchical set of filters is associated with a particular data partition and comprises a data structure that indicates a deterministic prediction of whether a data record associated with a given unique user identifier exists within the particular data partition, wherein the first filter and the second filter are arranged relative to one another in the hierarchical set of filters based on an upstream and a downstream status of jobs or subsystem associated with the first filter or the second filter, and wherein searching the hierarchical set of filters comprises:
searching a first data structure comprised in the first filter to determine whether an upstream data partition of the upstream job or subsystem is predicted to contain the record having the unique user identifier, and
when the upstream data partition of the upstream job or subsystem is predicted to contain the record having the unique user identifier, searching a second data structure comprised in the second filter that is downstream of the first filter based on the arrangement of the hierarchical set of filters, to determine whether a downstream data partition of the downstream job or subsystem is predicted to contain the record having the unique user identifier;

searching, one or more of the upstream data partition and the downstream data partition by the computer system, when a corresponding data partition is predicted to contain the record having the unique user identifier, data records stored in the corresponding data partition for a user data record based on the unique identifier; and
performing, by the computer system, a hard deletion of the user data record from the corresponding data partition when found during the searching.