Patent ID: 8181260

Claim:
A computer-implemented method for controlling transmission of sensitive data comprising the steps, performed within a scripting environment, of: a processor associating an indication of origin with a first data element; the processor propagating said indication of origin to a generated data element, wherein said generated data element was generated from the first data element, and wherein said propagating indications of origin comprises: identifying a set of one or more inputs to a scripting operation that generates one or more outputs; identifying any indications of origin that are associated with the one or more inputs; deriving secondary indications of origin from the inputs' indications of origin; and saving the secondary indications of origin in association with the one or more generated outputs; and the processor restricting transmission of the first data element and said generated data element to only permitted destinations that are identified with reference to the indication of origin, wherein said associating the indication of origin with the first data element and said restricting transmissions of the first data element are performed in response to determining that the first data element comprises sensitive data.