Patent ID: 9727746
Date: 2017-08-08
CPC Classifications: G06F

Claim:
1. A computer-implemented method for redacting data, the method comprising: obtaining from a user, using an electronic interface, for each of a plurality of redaction types, a corresponding identification scope conferred by a respective redaction type and a corresponding disclosure impact indicating an amount of harm, whereby a plurality of triples are obtained, each triple comprising a redaction type, a corresponding identification scope, and a corresponding disclosure impact, wherein each identification scope is selected from the group consisting of: identify a person uniquely, identify a person uniquely in an application, identify a group uniquely, identify a group uniquely in an application, and not needed for identification, and wherein each disclosure impact comprises a level of trust required of a third party to which a value is disclosed; generating an initial redaction matrix comprising the plurality of triples wherein the initial redaction matrix is incomplete, and wherein the initial redaction matrix comprises at least one blank entry for at least one trust requirement and disclosure impact pair; obtaining from a user, using an electronic interface, a selection of a policy, wherein the policy specifies a technique for completing the initial redaction matrix; applying the policy to the initial redaction matrix using an electronic processor, whereby a completed redaction matrix is obtained, the completed redaction matrix associating a redaction type to each of a plurality of pairs of identification scope and disclosure impact; obtaining, from a user, using an electronic interface, an indication of a need to know a content for each of a plurality of data types used in an application; and applying the completed redaction matrix to a corresponding data type used in the application, whereby an application template is obtained, wherein the application template specifies a particular redaction type for each of the plurality of data types used in the application; and applying the application template to the application, whereby data used by the application is redacted.