Patent ID: 7941859
Filing Date: 2011-05-10
Classification: G06F

Abstract:
1. A method for reducing access to sensitive information, comprising: identifying processes and data associated with a computer system; classifying each of said data as one of sensitive information and non-sensitive information; for each of said processes: preventing access to said sensitive data item by said selected process if, as a result of said analyzing, said sensitive data item is determined not to be needed by said selected process, wherein said preventing access includes substituting a value of said sensitive data item with an alternate data value whenever said selected process requests access to said sensitive data item, and wherein if said selected process does not have changeable code, said substituting a value of said sensitive data item with an alternate data value is performed by inserting a replacement layer between said sensitive data item and said selected process, wherein said substituting a value of said sensitive date item is performed by: selected process; and minimizing access to sensitive information by transforming a process P into a process P′ such that P′ is limited to receiving less personal information than P when it has been determined that P does not require extensive personal information.