Patent ID: 8590034
Filing Date: 2013-11-19
Classification: G06F,H04L

Abstract:
1. A method of enhancing information privacy and confidentiality, based on the knowledge of format and syntax of a protocol used for computer communication, wherein a request conforming to the said protocol is received from a client for a database application that accepts the said request from the said client, as well as a response generated as a result of the said request by the said database application, which are intercepted by a redaction appliance that redacts sensitive information, further comprising: a. associating the said client with the said request; b. requiring the said client to be aware only of a session identifier and not be aware of redaction rules; c. working at the message level, where each message is composed of a multitude of network packets; d. forwarding the said request to the said database application and intercepting the said response returned by the said database application; e. applying redaction rules associated with client's session to a set of records contained within the said response whereby the redaction rules are applied to the message as a whole and not to the individual packets; f. redacting information in the said response based on the said redaction rules that results in a modified response that also conforms to the said protocol and contains at least one of the said records that was not fully or partially redacted; g. maintaining the redacted information in said redaction appliance; h. returning the said modified response to the said client; i. waiting for a subsequent request from the said client containing updated versions of one or plurality of the said records that were sent to the said client in the said modified response; j. re-inserting the said redacted information that was maintained earlier into the said received subsequent request resulting in a modified subsequent request that now contains completely reconstructed records; and k. forwarding the said modified subsequent request to the said database application; whereby the integrity of the information is retained without having to modify the said database application or having to expose sensitive information to an unauthorized client.