Patent ID: 9342697
Filing Date: 2016-05-17
CPC Classification: G06F,H04L

Claim Text:
1. An apparatus for creating and managing security policies for data leakage prevention (DLP), the apparatus comprising: a computer server; server code on the computer server; a database which is accessible by the server code and which stores a three-layer structure of objects comprising a first layer of digital asset objects which describe sensitive information contained in a file, a second layer of content template objects which are each associated with at least one digital asset object, and a third layer of security policy objects which each contain a condition which depends on at least one content template object, wherein the security policy objects are modeled in at least two models including a first DLP policy model for use in preventing leakage of sensitive data-in-motion and a second DLP policy model for use in discovering sensitive data-at-rest; and a user interface configured to access said database so as to provide for input and editing of said three layers of objects.