Patent ID: 8875284
Filing Date: 2014-10-28
Classification: G06F,H04L,H04W

Abstract:
1. A computer-implemented method comprising: receiving configuration information from a user, the configuration information indicating specific personal identifiable information to be protected, the specific personal identifiable information being of the user; determining that transmitted network content includes personal identifiable information included within the specific information previously received as configuration information from the user, the personal identifiable information within the transmitted network content being transmitted personal identifiable information, the transmitted personal identifiable information being formed of a critical portion and a noncritical portion, wherein the critical portion is a minimum amount of information necessary to identify the specific information previously received; creating a transaction record that identifies the critical portion of the transmitted personal identifiable information and that identifies at least one of a time that the personal identifiable information was transmitted and an application responsible for transmitting the personal identifiable information; storing the transaction record and discarding the noncritical portion of the transmitted personal identifiable information; detecting malicious code, wherein the malicious code is present on a host computer system responsible for transmitting the personal identifiable information, wherein detecting malicious code comprises determining whether the malicious code is of a type that steals personal information; determining, as a result of determining that the malicious code is of a type that steals personal information, that the critical portion of the transmitted personal identifiable information was exposed to the malicious code by querying the transaction record, wherein the determination is made by at least one of: providing, as a result of determining that the malicious code is of a type that steals personal information, a personal identifiable information (PII) theft notification to the user, on the host computing system.