WO2011148377A1 - Data tagging - Google Patents

Data tagging Download PDF

Info

Publication number
WO2011148377A1
WO2011148377A1 PCT/IL2011/000409 IL2011000409W WO2011148377A1 WO 2011148377 A1 WO2011148377 A1 WO 2011148377A1 IL 2011000409 W IL2011000409 W IL 2011000409W WO 2011148377 A1 WO2011148377 A1 WO 2011148377A1
Authority
WO
WIPO (PCT)
Prior art keywords
data elements
characterizing
metatag
data
owner
Prior art date
Application number
PCT/IL2011/000409
Other languages
French (fr)
Inventor
Yakov Faitelson
Ohad Korkus
Ophir Kretzer-Katzir
David Bass
Original Assignee
Varonis Systems, Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US13/014,762 external-priority patent/US8805884B2/en
Priority claimed from US13/106,023 external-priority patent/US8533787B2/en
Application filed by Varonis Systems, Inc. filed Critical Varonis Systems, Inc.
Priority to CN2011800361521A priority Critical patent/CN103026333A/en
Priority to EP11786229.2A priority patent/EP2577445A4/en
Priority to US13/384,465 priority patent/US10296596B2/en
Publication of WO2011148377A1 publication Critical patent/WO2011148377A1/en
Priority to US16/384,111 priority patent/US11138153B2/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/10—Office automation; Time management
    • G06Q10/101—Collaborative creation, e.g. joint development of products or services
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10—File systems; File servers
    • G06F16/11—File system administration, e.g. details of archiving or snapshots
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10—File systems; File servers
    • G06F16/16—File or folder operations, e.g. details of user interfaces specifically adapted to file systems
    • G06F16/164—File meta data generation

Definitions

  • the present invention relates to improved systems and methodologies for data tagging.
  • the present invention provides improved systems and methodologies for data tagging.
  • a method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the method for characterizing data elements in an enterprise also includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
  • the employing includes automatically applying specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the employing includes automatically applying to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
  • the data identifier is one of file type, author, category and language.
  • the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
  • the employing includes employing an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the employing includes employing an access metric to automatically apply a metatag to ones of the plurality of data elements.
  • the employing includes employing a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • a method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically recommend application of metatags to the plurality of data elements.
  • the employing includes automatically recommending application of specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the employing includes automatically recommending application to each of the plurality of data elements a metatag previously applied to a parent folder thereof.
  • the method for characterizing data elements in an enterprise also includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate application of the recommended metatags to ones of the plurality of data elements of which he is the owner.
  • the data identifier is one of file type, author, category and language.
  • the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
  • the employing includes employing an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
  • the employing includes employmg an access metric to automatically recommend application of metatags to the plurality of data elements.
  • the employing includes employing a data identifier to automatically recommend application of metatags to the plurality of data elements.
  • a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and requiring the owner to apply at least one metatag to ones of the plurality of data elements of which he is the owner.
  • the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
  • a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and requiring the owner to review and validate metatags applied to ones of the plurality of data elements of which he is the owner.
  • the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
  • a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and automatically recommending application of metatags by the owner to the plurality of data elements of which he is the owner.
  • the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
  • a method of operating a file system including maintaining a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements; applying the metatags to the plurality of data elements in a storage platform and automatically synchronizing the metatags applied to the plurality of data elements and the database.
  • a system for characterizing data elements in an enterprise including access metrics collection functionality operative to collect access metrics associated with a plurality of data elements, metadata collection functionality operative to collect metadata associated with the plurality of data elements and metatag application functionality operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the system for characterizing data elements in an enterprise also includes metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
  • the metatag application functionality is also operative to automatically apply specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the metatag application functionality is also operative to automatically apply to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
  • the data identifier is one of file type, author, category and language.
  • system for characterizing data elements in an enterprise also includes an access metrics database which stores the access metrics collected by the access metrics collection functionality. Additionally or alternatively, the system for characterizing data elements in an enterprise and also includes a metadata database which stores the metadata collected by the metadata collection functionality.
  • the metatag application functionality is also operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the metatag application functionality is also operative to utilize the access metrics collection functionality to automatically employ an access metric to automatically apply a metatag to ones of the plurality of data elements.
  • the metatag application functionality is also operative to utilize the metadata collection functionality to automatically employ a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • a system for characterizing data elements in an enterprise including access metrics collection functionality operative to collect access metrics associated with a plurality of data elements, metadata collection functionality operative to collect metadata associated with the plurality of data elements and metatag recommendation functionality operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
  • the metatag recommendation functionality is also operative to automatically recommend application of specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the metatag recommendation functionality is also operative to automatically recommend applying to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
  • system for characterizing data elements in an enterprise also includes metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners to review and validate application of the recommended metatags to ones of the plurality of data elements of which he is the owner.
  • the data identifier is one of file type, author, category and language.
  • the system for characterizing data elements in an enterprise also includes an access metrics database which stores the access metrics collected by the access metrics collection functionality. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores the metadata collected by the metadata collection functionality.
  • the metatag recommendation functionality is also operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
  • the metatag recommendation functionality is also operative to utilize the access metrics collection functionality to automatically employ an access metric to automatically recommend application of a metatag to ones of the plurality of data elements.
  • the metatag recommendation functionality is also operative to utilize the metadata collection functionality to automatically employ a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
  • a system for characterizing data elements in an enterprise including metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners apply at least one metatag to ones of the plurality of data elements of which he is the owner.
  • the system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements.
  • the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
  • metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to require each of the owners to review and validate application of metatags to ones of the plurality of data elements of which he is the owner.
  • system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
  • a system for characterizing data elements in an enterprise including metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to recommend application of metatags by each of the owners to ones of the plurality of data elements of which he is the owner.
  • the system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements.
  • the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
  • a system of operating a file system including a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements, metatag application functionality operative to apply the metatags to the plurality of data elements in a storage platform and synchronizing functionality operative to automatically synchronize the metatags applied to the plurality of data elements and the database.
  • Fig. 1 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention
  • Fig. 2 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention
  • FIG. 3 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention
  • Fig. 4 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention
  • Fig. 5 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention
  • Fig. 6 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention.
  • Fig. 7 is a simplified block diagram illustration of the automatic data tagging system whose functionality is illustrated in Figs. 1 - 6.
  • Fig. 1 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 1 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 1 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
  • the term "data identifier" is used throughout to refer to metadata associated with a data element.
  • the data identifier may be a content-based data identifier or a non content-based data identifier.
  • a content-based data identifier associated with a data element preferably includes, for example, keywords or an abstract of the content of the data element.
  • a non content-based data identifier associated with a data element preferably includes characteristics associated with the data element such as, for example, file type, author, category and language.
  • a non content-based data identifier associated with a data element may also include one or more non content- based data identifiers associated with a parent folder of the data element.
  • the metadata may comprise predefined characteristics provided by the system which hosts the data elements or user-defined characteristics.
  • Metatags are useful, for example, for automating data management tasks and for identifying data elements which may be grouped or categorized together for purposes of automatic or manual data management tasks.
  • the automatic data tagging system of Fig. 1 typically resides on an a server 100 that is connected to an enterprise computer network 102 which preferably includes multiple disparate clients 104, servers 106 and data storage resources 108.
  • data elements such as computer files, reside on servers 106 and on data storage resources 108 and are accessible to users of the network 102 in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise.
  • This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • an IT Administrator of enterprise network 102 decides to utilize the automatic data tagging system residing on server 100 to automatically tag a subset of files which files have access permissions to the 'Everyone' group and contain the term 'confidential' as being vulnerable files.
  • the Administrator decides to send a list of the vulnerable files to their respective owners for access permissions remediation.
  • access permissions remediation may include, for example, modification of the access permissions of the file to include access permissions only to trusted individuals who require ongoing access to the file.
  • FIG. 2 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 2 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 2 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements, and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
  • the automatic data tagging system of Fig. 2 typically resides on an a server 200 that is connected to an enterprise computer network 202 which preferably includes multiple disparate clients 204, servers 206 and data storage resources 208.
  • data elements such as computer files, reside on servers 206 and on data storage resources 208 and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise.
  • This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • an IT Administrator of enterprise network 202 decides to utilize the automatic data tagging system residing on server 200 to automatically tag a subset of files which files are owned by Dave, the company attorney, as being 'legal' files. The Administrator then decides to send a list of the legal files to Dave, requesting Dave to ascertain and confirm that the files tagged as 'legal' are actually legal-related files. As seen in Fig. 2, Dave ascertains and confirms that the file Contractl .doc and Agreement2.doc are actually legal-related files, while Resume5.doc is not legal-related, and therefore should not be tagged as 'legal'.
  • FIG. 3 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 3 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 3 preferably includes characterizing data elements in an enterprise by ascertaining an owner for each of a plurality of data elements, and requiring the owner to apply metatags to ones of the plurality of data elements of which he is the owner.
  • the automatic data tagging system of Fig. 3 typically resides on an a server 300 that is connected to an enterprise computer network 302 which preferably includes multiple disparate clients 304, servers 306 and data storage resources 308.
  • data elements such as computer files, reside on servers 306 and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise.
  • This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • an IT Administrator of enterprise network 302 decides to request from all owners of a subset of files to manually tag the files.
  • the Administrator utilizes the system residing on server 300 to automatically ascertain the owners of the files and to send a request to each owner to tag their respectively owned files.
  • each file owner tags their respectively owned files.
  • Fig. 4 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 4 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 4 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
  • the operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements, and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
  • the automatic data tagging system of Fig. 4 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources.
  • data elements such as computer files
  • the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (400).
  • the system also preferably continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements (402).
  • the system utilizes the database of stored access metrics and the database of metadata to automatically apply a metatag to each of the subset of data elements (404).
  • the system may automatically apply the metatag assigned to the parent folder of each of the subset of data elements to the data element.
  • system preferably ascertains an owner for each of the subset of data elements (406), and requires the owner of each of the subset of data elements to review and validate the metatag automatically applied to the data element (408).
  • Fig. 5 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 5 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 5 preferably includes characterizing data elements in an enterprise by: ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically recommend application of metatags to the plurality of data elements.
  • the recommending of application of metatags to the plurality of data elements includes automatically recommending application of specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
  • the automatic data tagging system of Fig. 5 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources.
  • data elements such as computer files, reside on servers and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise.
  • This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (500).
  • the system also preferably continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements (502).
  • the system utilizes the database of stored access metrics and the database of metadata to recommend applying at least one metatag to each of the subset of data elements (504).
  • the system preferably ascertains an owner for each of the subset of data elements (506), and requires the owner of each of the subset of data elements to review and approve the recommendation to apply the at least one metatag to the data element (508).
  • Fig. 6 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention.
  • the automatic data tagging system of Fig. 6 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
  • the operation of the automatic data tagging system of Fig. 6 preferably includes characterizing data elements in an enterprise by ascertaining an owner for each of a plurality of data elements, and requiring the owner to apply metatags to ones of the plurality of data elements of which he is the owner.
  • the automatic data tagging system of Fig. 6 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources.
  • data elements such as computer files, reside on servers and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise.
  • This functionality is described in U.S. Patent 7,606,801 , in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference.
  • Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
  • the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
  • the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (600).
  • the system utilizes the database of access metrics to ascertain an owner for each of the data elements (602), and requires the owner of each of the data elements to apply at least one metatag to each of the data elements of which he is the owner (604).
  • Fig. 7 is a simplified block diagram illustration of the automatic data tagging system whose functionality is illustrated in Figs. 1 - 6.
  • the automatic data tagging system 700 typically resides on an a server 702 that is connected to an enterprise computer network 704 which preferably includes multiple disparate clients 706, servers 708 and data storage resources 710.
  • data elements such as computer files, reside on servers 708 and on data storage resources 710 and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder.
  • the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
  • the automatic data tagging system 700 comprises access metrics collection functionality 720 and metadata collection functionality 722.
  • access metrics collection functionality 720 preferably stores access metrics in an access metrics database 724 and metadata collection functionality 722 preferably stores data element metadata in metadata database 726.
  • Metatag functionality 730 is preferably provided to utilize databases 724 and 726 to automatically apply metatags to data elements residing anywhere on network 704, as described hereinabove with regard to Figs. 1 - 6.
  • Metatag functionality 730 preferably includes metatag application functionality 732, which is operative to apply metatags to data elements, and metatag recommendation functionality 734, which is operative to recommend application of metatags to data elements.
  • Metatag application functionality 730 also preferably includes metatag owner validation functionality 736, which is operative to ascertain owners of data elements and to require the owners of the data elements to assign metatags to data elements or to validate recommendations of metatag assignment recommended by metatag recommendation functionality 734.

Abstract

A method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.

Description

DATA TAGGING
REFERENCE TO RELATED APPLICATIONS
Reference is made to U.S. Provisional Patent Application Serial No. 61/348,829, filed May 27, 2010 and entitled "DATA MANAGEMENT USING DATA TAGGING", the disclosure of which is hereby incorporated by reference and priority of which is hereby claimed pursuant to 37 CFR 1.78(a) (4) and (5)(i).
Reference is also made to U.S. Patent Application Serial No. 13/014,762, filed January 27, 2011, and entitled "AUTOMATIC RESOURCE OWNERSHIP ASSIGNMENT SYSTEMS AND METHODS", the disclosure of which is hereby incorporated by reference and priority of which is hereby claimed pursuant to 37 CFR 1.78(a) (1) and (2)(i).
Reference is also made to U.S. Patent Application Serial No. 13/106,023, filed May 12, 2011, and entitled "AUTOMATIC RESOURCE OWNERSHIP ASSIGNMENT SYSTEM AND METHOD",, the disclosure of which is hereby incorporated by reference and priority of which is hereby claimed pursuant to 37 CFR 1.78(a) (1) and (2)(i).
Reference is also made to the following patents and patent applications, owned by assignee, the disclosures of which are hereby incorporated by reference:
U.S. Patent Nos. 7,555,482 and 7,606,801;
U.S. Published Patent Application Nos. 2007/0244899, 2008/0271157,
2009/0100058, 2009/0119298; 2009/0265780; 2011/0060916 and 2011/0061111; and
U.S. Patent Application Serial No. 12/673,691.
FIELD OF THE INVENTION The present invention relates to improved systems and methodologies for data tagging.
BACKGROUND OF THE INVENTION The following patent publications are believed to represent the current state of the art:
U.S. Patent Nos.: 5,465,387; 5,899,991; 6,338,082; 6,393,468; 6,928,439; 7,031,984; 7,068,592; 7,403,925; 7,421,740; 7,555,482, 7,606,801 and 7,743,420; and
U.S. Published Patent Application Nos.: 2003/0051026; 2004/0249847;
2005/0108206; 2005/0203881; 2005/0086529; 2006/0064313; 2006/0184530; 2006/0184459; 2007/0203872; 2007/0244899; 2008/0271157; 2009/0100058; 2009/0119298 and 2009/0265780.
SUMMARY OF THE INVENTION
The present invention provides improved systems and methodologies for data tagging.
There is thus provided in accordance with a preferred embodiment of the present invention a method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
Preferably, the method for characterizing data elements in an enterprise also includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the employing includes automatically applying specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the employing includes automatically applying to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
Preferably, the data identifier is one of file type, author, category and language.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
Preferably, the employing includes employing an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements. Alternatively, the employing includes employing an access metric to automatically apply a metatag to ones of the plurality of data elements. In another alternative embodiment the employing includes employing a data identifier to automatically apply a metatag to ones of the plurality of data elements. There is also provided in accordance with another preferred embodiment of the present invention a method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically recommend application of metatags to the plurality of data elements.
Preferably, the employing includes automatically recommending application of specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the employing includes automatically recommending application to each of the plurality of data elements a metatag previously applied to a parent folder thereof.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate application of the recommended metatags to ones of the plurality of data elements of which he is the owner.
Preferably, the data identifier is one of file type, author, category and language.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
Preferably, the employing includes employing an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements. Alternatively, the employing includes employmg an access metric to automatically recommend application of metatags to the plurality of data elements. In another alternative embodiment, the employing includes employing a data identifier to automatically recommend application of metatags to the plurality of data elements.
There is yet further provided in accordance with still another preferred embodiment of the present invention a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and requiring the owner to apply at least one metatag to ones of the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
There is even further provided in accordance with a further preferred embodiment of the present invention a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and requiring the owner to review and validate metatags applied to ones of the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
There is also provided in accordance with yet another preferred embodiment of the present invention a method for characterizing data elements in an enterprise including ascertaining an owner for each of a plurality of data elements and automatically recommending application of metatags by the owner to the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the method for characterizing data elements in an enterprise also includes maintaining a database of access metrics for the each of a plurality of data elements. Additionally or alternatively, the method for characterizing data elements in an enterprise also includes maintaining a database of data identifiers for the each of a plurality of data elements.
There is further provided in accordance with still another preferred embodiment of the present invention a method of operating a file system including maintaining a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements; applying the metatags to the plurality of data elements in a storage platform and automatically synchronizing the metatags applied to the plurality of data elements and the database.
There is still further provided in accordance with another preferred embodiment of the present invention a system for characterizing data elements in an enterprise including access metrics collection functionality operative to collect access metrics associated with a plurality of data elements, metadata collection functionality operative to collect metadata associated with the plurality of data elements and metatag application functionality operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.
Preferably, the system for characterizing data elements in an enterprise also includes metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the metatag application functionality is also operative to automatically apply specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the metatag application functionality is also operative to automatically apply to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
Preferably, the data identifier is one of file type, author, category and language.
In accordance with a preferred embodiment of the present invention the system for characterizing data elements in an enterprise also includes an access metrics database which stores the access metrics collected by the access metrics collection functionality. Additionally or alternatively, the system for characterizing data elements in an enterprise and also includes a metadata database which stores the metadata collected by the metadata collection functionality.
Preferably, the metatag application functionality is also operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements. Alternatively, the metatag application functionality is also operative to utilize the access metrics collection functionality to automatically employ an access metric to automatically apply a metatag to ones of the plurality of data elements. In another alternative embodiment, the metatag application functionality is also operative to utilize the metadata collection functionality to automatically employ a data identifier to automatically apply a metatag to ones of the plurality of data elements.
There is yet further provided in accordance with still another preferred embodiment of the present invention a system for characterizing data elements in an enterprise including access metrics collection functionality operative to collect access metrics associated with a plurality of data elements, metadata collection functionality operative to collect metadata associated with the plurality of data elements and metatag recommendation functionality operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
Preferably, the metatag recommendation functionality is also operative to automatically recommend application of specific ones of a plurality of different metatags to specific ones of the plurality of data elements. Additionally or alternatively, the metatag recommendation functionality is also operative to automatically recommend applying to each one of the plurality of data elements a metatag previously applied to a parent folder thereof.
In accordance with a preferred embodiment of the present invention the system for characterizing data elements in an enterprise also includes metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners to review and validate application of the recommended metatags to ones of the plurality of data elements of which he is the owner.
Preferably, the data identifier is one of file type, author, category and language. In accordance with a preferred embodiment of the present invention the system for characterizing data elements in an enterprise also includes an access metrics database which stores the access metrics collected by the access metrics collection functionality. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores the metadata collected by the metadata collection functionality.
Preferably, the metatag recommendation functionality is also operative to utilize the access metrics collection functionality and the metadata collection functionality to automatically employ an access metric and a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements. Alternatively, the metatag recommendation functionality is also operative to utilize the access metrics collection functionality to automatically employ an access metric to automatically recommend application of a metatag to ones of the plurality of data elements. In another alternative embodiment the metatag recommendation functionality is also operative to utilize the metadata collection functionality to automatically employ a data identifier to automatically recommend application of a metatag to ones of the plurality of data elements.
There is even further provided in accordance with yet another preferred embodiment of the present invention a system for characterizing data elements in an enterprise including metatag owner validation functionality operative to ascertain owners of each of the plurality of data elements and to require each of the owners apply at least one metatag to ones of the plurality of data elements of which he is the owner.
Preferably, the system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
There is also provided in accordance with still another preferred embodiment of the present invention a system for characterizing data elements in an enterprise including metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to require each of the owners to review and validate application of metatags to ones of the plurality of data elements of which he is the owner.
In accordance with a preferred embodiment of the present invention the system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
There is yet further provided in accordance with yet another preferred embodiment of the present invention a system for characterizing data elements in an enterprise including metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to recommend application of metatags by each of the owners to ones of the plurality of data elements of which he is the owner.
Preferably, the system for characterizing data elements in an enterprise also includes an access metrics database which stores access metrics associated with the plurality of data elements. Additionally or alternatively, the system for characterizing data elements in an enterprise also includes a metadata database which stores metadata associated with the plurality of data elements.
There is still further provided in accordance with another preferred embodiment of the present invention a system of operating a file system including a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements, metatag application functionality operative to apply the metatags to the plurality of data elements in a storage platform and synchronizing functionality operative to automatically synchronize the metatags applied to the plurality of data elements and the database. BRIEF DESCRIPTION OF THE DRAWINGS
The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:
Fig. 1 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention;
Fig. 2 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention;
Fig. 3 is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention;
Fig. 4 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention;
Fig. 5 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention;
Fig. 6 is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention; and
Fig. 7 is a simplified block diagram illustration of the automatic data tagging system whose functionality is illustrated in Figs. 1 - 6. DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS
Reference is now made to Fig. 1, which is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention. The automatic data tagging system of Fig. 1 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 1 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements. The operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
The term "data identifier" is used throughout to refer to metadata associated with a data element. The data identifier may be a content-based data identifier or a non content-based data identifier. A content-based data identifier associated with a data element preferably includes, for example, keywords or an abstract of the content of the data element. A non content-based data identifier associated with a data element preferably includes characteristics associated with the data element such as, for example, file type, author, category and language. A non content-based data identifier associated with a data element may also include one or more non content- based data identifiers associated with a parent folder of the data element. It is appreciated that the metadata may comprise predefined characteristics provided by the system which hosts the data elements or user-defined characteristics.
The term "metatag" is used throughout to refer to a metadata tag which is associated with a data element. Metatags are useful, for example, for automating data management tasks and for identifying data elements which may be grouped or categorized together for purposes of automatic or manual data management tasks. The automatic data tagging system of Fig. 1 typically resides on an a server 100 that is connected to an enterprise computer network 102 which preferably includes multiple disparate clients 104, servers 106 and data storage resources 108. Typically, data elements, such as computer files, reside on servers 106 and on data storage resources 108 and are accessible to users of the network 102 in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 1, an IT Administrator of enterprise network 102 decides to utilize the automatic data tagging system residing on server 100 to automatically tag a subset of files which files have access permissions to the 'Everyone' group and contain the term 'confidential' as being vulnerable files. The Administrator then decides to send a list of the vulnerable files to their respective owners for access permissions remediation. In the example of Fig. 1 access permissions remediation may include, for example, modification of the access permissions of the file to include access permissions only to trusted individuals who require ongoing access to the file.
Reference is now made to Fig. 2, which is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention. The automatic data tagging system of Fig. 2 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 2 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements. The operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements, and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
The automatic data tagging system of Fig. 2 typically resides on an a server 200 that is connected to an enterprise computer network 202 which preferably includes multiple disparate clients 204, servers 206 and data storage resources 208. Typically, data elements, such as computer files, reside on servers 206 and on data storage resources 208 and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 2, an IT Administrator of enterprise network 202 decides to utilize the automatic data tagging system residing on server 200 to automatically tag a subset of files which files are owned by Dave, the company attorney, as being 'legal' files. The Administrator then decides to send a list of the legal files to Dave, requesting Dave to ascertain and confirm that the files tagged as 'legal' are actually legal-related files. As seen in Fig. 2, Dave ascertains and confirms that the file Contractl .doc and Agreement2.doc are actually legal-related files, while Resume5.doc is not legal-related, and therefore should not be tagged as 'legal'.
Reference is now made to Fig. 3, which is a simplified pictorial illustration of an example of the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention. The automatic data tagging system of Fig. 3 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 3 preferably includes characterizing data elements in an enterprise by ascertaining an owner for each of a plurality of data elements, and requiring the owner to apply metatags to ones of the plurality of data elements of which he is the owner.
The automatic data tagging system of Fig. 3 typically resides on an a server 300 that is connected to an enterprise computer network 302 which preferably includes multiple disparate clients 304, servers 306 and data storage resources 308. Typically, data elements, such as computer files, reside on servers 306 and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise. Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 3, an IT Administrator of enterprise network 302 decides to request from all owners of a subset of files to manually tag the files. The Administrator utilizes the system residing on server 300 to automatically ascertain the owners of the files and to send a request to each owner to tag their respectively owned files. As seen in Fig. 3, upon receiving the request, each file owner tags their respectively owned files.
Reference is now made to Fig. 4, which is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with a preferred embodiment of the present invention. The automatic data tagging system of Fig. 4 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 4 preferably includes characterizing data elements in an enterprise by ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements. The operation of the automatic data tagging system also preferably includes ascertaining an owner for each of the plurality of data elements, and requiring the owner to review and validate the metatags automatically applied to ones of the plurality of data elements of which he is the owner.
The automatic data tagging system of Fig. 4 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources. Typically, data elements, such as computer files, reside on servers and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure. Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 4, the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (400). The system also preferably continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements (402). Preferably, the system utilizes the database of stored access metrics and the database of metadata to automatically apply a metatag to each of the subset of data elements (404). Alternatively, the system may automatically apply the metatag assigned to the parent folder of each of the subset of data elements to the data element.
Additionally, the system preferably ascertains an owner for each of the subset of data elements (406), and requires the owner of each of the subset of data elements to review and validate the metatag automatically applied to the data element (408).
Reference is now made to Fig. 5, which is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with another preferred embodiment of the present invention. The automatic data tagging system of Fig. 5 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 5 preferably includes characterizing data elements in an enterprise by: ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements, and employing the at least one of an access metric and a data identifier to automatically recommend application of metatags to the plurality of data elements. Preferably, the recommending of application of metatags to the plurality of data elements includes automatically recommending application of specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
The automatic data tagging system of Fig. 5 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources. Typically, data elements, such as computer files, reside on servers and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801, in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise.
Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 5, the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (500). The system also preferably continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements (502). Preferably, the system utilizes the database of stored access metrics and the database of metadata to recommend applying at least one metatag to each of the subset of data elements (504). Additionally, the system preferably ascertains an owner for each of the subset of data elements (506), and requires the owner of each of the subset of data elements to review and approve the recommendation to apply the at least one metatag to the data element (508).
Reference is now made to Fig. 6, which is a simplified flowchart indicating steps in the operation of an automatic data tagging system constructed and operative in accordance with yet another preferred embodiment of the present invention. The automatic data tagging system of Fig. 6 is preferably suitable for operating in an enterprise computer network including multiple disparate clients, data elements, computer hardware resources and computer software resources.
The operation of the automatic data tagging system of Fig. 6 preferably includes characterizing data elements in an enterprise by ascertaining an owner for each of a plurality of data elements, and requiring the owner to apply metatags to ones of the plurality of data elements of which he is the owner.
The automatic data tagging system of Fig. 6 typically resides on a server that is connected to an enterprise computer network which preferably includes multiple disparate clients, servers and data storage resources. Typically, data elements, such as computer files, reside on servers and on data storage resources and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
Preferably, the system continuously maintains a database of actual access and access permissions of every user to every data element in the enterprise. This functionality is described in U.S. Patent 7,606,801 , in U.S. Published Patent Application 2009/0265780 and in U.S. Patent Application 12/673,691 owned by assignee, the disclosures of which are hereby incorporated by reference. Access permissions and/or actual access are together designated as access metrics and may be used to designate subsets of all of the data elements in the enterprise. Preferably, the system also continuously crawls over at least a subset of all data elements in the enterprise and maintains a database of metadata associated with each of the subset of data elements.
As shown in Fig. 6, the system preferably continuously maintains a database of access metrics which include actual access and access permissions of every user to every data element in the enterprise (600). Preferably, the system utilizes the database of access metrics to ascertain an owner for each of the data elements (602), and requires the owner of each of the data elements to apply at least one metatag to each of the data elements of which he is the owner (604).
Reference is now made to Fig. 7, which is a simplified block diagram illustration of the automatic data tagging system whose functionality is illustrated in Figs. 1 - 6. The automatic data tagging system 700 typically resides on an a server 702 that is connected to an enterprise computer network 704 which preferably includes multiple disparate clients 706, servers 708 and data storage resources 710. Typically, data elements, such as computer files, reside on servers 708 and on data storage resources 710 and are accessible to users of the network in accordance with access permissions defined by an owner of each data element or each data element folder. It is appreciated that the data elements may reside on any suitable data storage system or platform, such as a file system or a data collaboration system, which may reside on any suitable computer operating system or infrastructure.
As shown in Fig. 7, the automatic data tagging system 700 comprises access metrics collection functionality 720 and metadata collection functionality 722. As described hereinabove regarding Figs. 1 - 6, access metrics collection functionality 720 preferably stores access metrics in an access metrics database 724 and metadata collection functionality 722 preferably stores data element metadata in metadata database 726.
Metatag functionality 730 is preferably provided to utilize databases 724 and 726 to automatically apply metatags to data elements residing anywhere on network 704, as described hereinabove with regard to Figs. 1 - 6. Metatag functionality 730 preferably includes metatag application functionality 732, which is operative to apply metatags to data elements, and metatag recommendation functionality 734, which is operative to recommend application of metatags to data elements. Metatag application functionality 730 also preferably includes metatag owner validation functionality 736, which is operative to ascertain owners of data elements and to require the owners of the data elements to assign metatags to data elements or to validate recommendations of metatag assignment recommended by metatag recommendation functionality 734.
It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather, the invention also includes various combinations and subcombinations of the features described hereinabove as well as modifications and variations thereof, which would occur to persons skilled in the art upon reading the foregoing and which are not in the prior art.

Claims

1. A method for characterizing data elements in an enterprise comprising:
ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements; and
employing said at least one of an access metric and a data identifier to automatically apply a metatag to ones of said plurality of data elements.
2. A method for characterizing data elements in an enterprise according to claim 1 and also comprising:
ascertaining an owner for each of said plurality of data elements; and requiring said owner to review and validate said metatags automatically applied to ones of said plurality of data elements of which he is the owner.
3. A method for characterizing data elements in an enterprise according to either of claims 1 and 2 and wherein said employing comprises automatically applying specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
4. A method for characterizing data elements in an enterprise according to any of claims 1 - 3 and wherein said employing comprises automatically applying to each one of said plurality of data elements a metatag previously applied to a parent folder thereof.
5. A method for characterizing data elements in an enterprise according to any of claims 1 - 4 and wherein said data identifier is one of file type, author, category and language.
6. A method for characterizing data elements in an enterprise according to any of claims 1 - 5 and also comprising maintaining a database of access metrics for said each of a plurality of data elements.
7. A method for characterizing data elements in an enterprise according to any of claims 1 - 6 and also comprising maintaining a database of data identifiers for said each of a plurality of data elements.
8. A method for characterizing data elements in an enterprise according to any of claims 1 - 7 and wherein said employing comprises employing an access metric and a data identifier to automatically apply a metatag to ones of said plurality of data elements.
9. A method for characterizing data elements in an enterprise according to any of claims 1 - 7 and wherein said employing comprises employing an access metric to automatically apply a metatag to ones of said plurality of data elements.
10. A method for characterizing data elements in an enterprise according to any of claims 1 - 7 and wherein said employing comprises employing a data identifier to automatically apply a metatag to ones of said plurality of data elements.
11. A method for characterizing data elements in an enterprise comprising:
ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements; and
employing said at least one of an access metric and a data identifier to automatically recommend application of metatags to said plurality of data elements.
12. A method for characterizing data elements in an enterprise according to claim 11 and wherein said employing comprises automatically recommending application of specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
13. A method for characterizing data elements in an enterprise according to either of claims 11 and 12 and wherein said employing comprises automatically recommending application to each of said plurality of data elements a metatag previously applied to a parent folder thereof.
14. A method for characterizing data elements in an enterprise according to any of claims 11 - 13 and also comprising:
ascertaining an owner for each of said plurality of data elements; and requiring said owner to review and validate application of said recommended metatags to ones of said plurality of data elements of which he is the owner.
15. A method for characterizing data elements in an enterprise according to any of claims 11 - 14 and wherein said data identifier is one of file type, author, category and language.
16. A method for characterizing data elements in an enterprise according to any of claims 11 - 15 and also comprising maintaining a database of access metrics for said each of a plurality of data elements.
17. A method for characterizing data elements in an enterprise according to any of claims 11 - 16 and also comprising maintaining a database of data identifiers for said each of a plurality of data elements.
18. A method for characterizing data elements in an enterprise according to any of claims 11 - 17 and wherein said employing comprises employing an access metric and a data identifier to automatically recommend application of a metatag to ones of said plurality of data elements.
19. A method for characterizing data elements in an enterprise according to any of claims 11 - 17 and wherein said employing comprises employing an access metric to automatically recommend application of metatags to said plurality of data elements.
20. A method for characterizing data elements in an enterprise according to any of claims 11 - 17 and wherein said employing comprises employing a data identifier to automatically recommend application of metatags to said plurality of data elements.
21. A method for characterizing data elements in an enterprise comprising:
ascertaining an owner for each of a plurality of data elements; and requiring said owner to apply at least one metatag to ones of said plurality of data elements of which he is the owner.
22. A method for characterizing data elements in an enterprise according to claim 21 and also comprising maintaining a database of access metrics for said each of a plurality of data elements.
23. A method for characterizing data elements in an enterprise according to either of claims 21 & 22 and also comprising maintaining a database of data identifiers for said each of a plurality of data elements.
24. A method for characterizing data elements in an enterprise comprising:
ascertaining an owner for each of a plurality of data elements; and requiring said owner to review and validate metatags applied to ones of said plurality of data elements of which he is the owner.
25. A method for characterizing data elements in an enterprise according to claim 24 and also comprising maintaining a database of access metrics for said each of a plurality of data elements.
26. A method for characterizing data elements in an enterprise according to either of claims 24 and 25 and also comprising maintaining a database of data identifiers for said each of a plurality of data elements.
27. A method for characterizing data elements in an enterprise comprising:
ascertaining an owner for each of a plurality of data elements; and automatically recommending application of metatags by said owner to said plurality of data elements of which he is the owner.
28. A method for characterizing data elements in an enterprise according to claim 27 and also comprising maintaining a database of access metrics for said each of a plurality of data elements.
29. A method for characterizing data elements in an enterprise according to either of claims 27 & 28 and also comprising maintaining a database of data identifiers for said each of a plurality of data elements.
30. A method of operating a file system comprising:
maintaining a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements;
applying said metatags to said plurality of data elements in a storage platform; and
automatically synchronizing said metatags applied to said plurality of data elements and said database.
31. A system for characterizing data elements in an enterprise comprising:
access metrics collection functionality operative to collect access metrics associated with a plurality of data elements;
metadata collection functionality operative to collect metadata associated with said plurality of data elements; and
metatag application functionality operative to utilize said access metrics collection functionality and said metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically apply a metatag to ones of said plurality of data elements.
32. A system for characterizing data elements in an enterprise according to claim 31 and also comprising: metatag owner validation functionality operative to ascertain owners of each of said plurality of data elements and to require each of said owners to review and validate said metatags automatically applied to ones of said plurality of data elements of which he is the owner.
33. A system for characterizing data elements in an enterprise according to either of claims 31 and 32 and wherein said metatag application functionality is also operative to automatically apply specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
34. A system for characterizing data elements in an enterprise according to any of claims 31 - 33 and wherein said metatag application functionality is also operative to automatically apply to each one of said plurality of data elements a metatag previously applied to a parent folder thereof.
35. A system for characterizing data elements in an enterprise according to any of claims 31 - 34 and wherein said data identifier is one of file type, author, category and language.
36. A system for characterizing data elements in an enterprise according to any of claims 31 - 35 and also comprising an access metrics database which stores said access metrics collected by said access metrics collection functionality.
37. A system for characterizing data elements in an enterprise according to any of claims 31 - 36 and also comprising a metadata database which stores said metadata collected by said metadata collection functionality.
38. A system for characterizing data elements in an enterprise according to any of claims 31 - 37 and wherein said metatag application functionality is also operative to utilize said access metrics collection functionality and said metadata collection functionality to automatically employ an access metric and a data identifier to automatically apply a metatag to ones of said plurality of data elements.
39. A system for characterizing data elements in an enterprise according to any of claims 31 - 37 and wherein said metatag application functionality is also operative to utilize said access metrics collection functionality to automatically employ an access metric to automatically apply a metatag to ones of said plurality of data elements.
40. A system for characterizing data elements in an enterprise according to any of claims 31 - 37 and wherein said metatag application functionality is also operative to utilize said metadata collection functionality to automatically employ a data identifier to automatically apply a metatag to ones of said plurality of data elements.
41. A system for characterizing data elements in an enterprise comprising:
access metrics collection functionality operative to collect access metrics associated with a plurality of data elements;
metadata collection functionality operative to collect metadata associated with said plurality of data elements; and
metatag recommendation functionality operative to utilize said access metrics collection functionality and said metadata collection functionality to automatically employ at least one of an access metric and a data identifier to automatically recommend application of a metatag to ones of said plurality of data elements.
42. A system for characterizing data elements in an enterprise according to claim 41 and wherein said metatag recommendation functionality is also operative to automatically recommend application of specific ones of a plurality of different metatags to specific ones of said plurality of data elements.
43. A system for characterizing data elements in an enterprise according to either of claims 41 and 42 and wherein said metatag recommendation functionality is also operative to automatically recommend applying to each one of said plurality of data elements a metatag previously applied to a parent folder thereof.
44. A system for characterizing data elements in an enterprise according to any of claims 41 - 43 and also comprising:
metatag owner validation functionality operative to ascertain owners of each of said plurality of data elements and to require each of said owners to review and validate application of said recommended metatags to ones of said plurality of data elements of which he is the owner.
45. A system for characterizing data elements in an enterprise according to any of claims 41 - 44 and wherein said data identifier is one of file type, author, category and language.
46. A system for characterizing data elements in an enterprise according to any of claims 41 - 45 and also comprising an access metrics database which stores said access metrics collected by said access metrics collection functionality.
47. A system for characterizing data elements in an enterprise according to any of claims 41 - 46 and also comprising a metadata database which stores said metadata collected by said metadata collection functionality.
48. A system for characterizing data elements in an enterprise according to any of claims 41 - 47 and wherein said metatag recommendation functionality is also operative to utilize said access metrics collection functionality and said metadata collection functionality to automatically employ an access metric and a data identifier to automatically recommend application of a metatag to ones of said plurality of data elements.
49. A system for characterizing data elements in an enterprise according to any of claims 41 - 47 and wherein said metatag recommendation functionality is also operative to utilize said access metrics collection functionality to automatically employ an access metric to automatically recommend application of a metatag to ones of said plurality of data elements.
50. A system for characterizing data elements in an enterprise according to any of claims 41 - 47 and wherein said metatag recommendation functionality is also operative to utilize said metadata collection functionality to automatically employ a data identifier to automatically recommend application of a metatag to ones of said plurality of data elements.
51. A system for characterizing data elements in an enterprise comprising:
metatag owner validation functionality operative to ascertain owners of each of said plurality of data elements and to require each of said owners apply at least one metatag to ones of said plurality of data elements of which he is the owner.
52. A system for characterizing data elements in an enterprise according to claim 51 and also comprising an access metrics database which stores access metrics associated with said plurality of data elements.
53. A system for characterizing data elements in an enterprise according to either of claims 51 and 52 and also comprising a metadata database which stores metadata associated with said plurality of data elements.
54. A system for characterizing data elements in an enterprise comprising:
metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to require each of said owners to review and validate application of metatags to ones of said plurality of data elements of which he is the owner.
55. A system for characterizing data elements in an enterprise according to claim 54 and also comprising an access metrics database which stores access metrics associated with said plurality of data elements.
56. A system for characterizing data elements in an enterprise according to either of claims 54 and 55 and also comprising a metadata database which stores metadata associated with said plurality of data elements.
57. A system for characterizing data elements in an enterprise comprising:
metatag owner validation functionality operative to ascertain owners of each of a plurality of data elements and to recommend application of metatags by each of said owners to ones of said plurality of data elements of which he is the owner.
58. A system for characterizing data elements in an enterprise according to claim 57 and also comprising an access metrics database which stores access metrics associated with said plurality of data elements.
59. A system for characterizing data elements in an enterprise according to either of claims 57 and 58 and also comprising a metadata database which stores metadata associated with said plurality of data elements.
60. A system of operating a file system comprising:
a data owner/administrator accessible database of metatags assigned by data owner/administers to a plurality of data elements;
metatag application functionality operative to apply said metatags to said plurality of data elements in a storage platform; and
synchronizing functionality operative to automatically synchronize said metatags applied to said plurality of data elements and said database.
PCT/IL2011/000409 2010-05-27 2011-05-26 Data tagging WO2011148377A1 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
CN2011800361521A CN103026333A (en) 2010-05-27 2011-05-26 Data tagging
EP11786229.2A EP2577445A4 (en) 2010-05-27 2011-05-26 Data tagging
US13/384,465 US10296596B2 (en) 2010-05-27 2011-05-26 Data tagging
US16/384,111 US11138153B2 (en) 2010-05-27 2019-04-15 Data tagging

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
US34882910P 2010-05-27 2010-05-27
US61/348,829 2010-05-27
US13/014,762 US8805884B2 (en) 2009-09-09 2011-01-27 Automatic resource ownership assignment systems and methods
US13/014,762 2011-01-27
US13/106,023 2011-05-12
US13/106,023 US8533787B2 (en) 2011-05-12 2011-05-12 Automatic resource ownership assignment system and method

Related Child Applications (2)

Application Number Title Priority Date Filing Date
US13/384,465 A-371-Of-International US10296596B2 (en) 2010-05-27 2011-05-26 Data tagging
US16/384,111 Continuation US11138153B2 (en) 2010-05-27 2019-04-15 Data tagging

Publications (1)

Publication Number Publication Date
WO2011148377A1 true WO2011148377A1 (en) 2011-12-01

Family

ID=45003412

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IL2011/000409 WO2011148377A1 (en) 2010-05-27 2011-05-26 Data tagging

Country Status (3)

Country Link
EP (1) EP2577445A4 (en)
CN (1) CN103026333A (en)
WO (1) WO2011148377A1 (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8909673B2 (en) 2011-01-27 2014-12-09 Varonis Systems, Inc. Access permissions management system and method
CN104221009A (en) * 2012-03-07 2014-12-17 瓦欧尼斯系统公司 Enterprise level data management
US9904685B2 (en) 2009-09-09 2018-02-27 Varonis Systems, Inc. Enterprise level data management
US10102389B2 (en) 2011-01-27 2018-10-16 Varonis Systems, Inc. Access permissions management system and method
US10296596B2 (en) 2010-05-27 2019-05-21 Varonis Systems, Inc. Data tagging
US10320798B2 (en) 2013-02-20 2019-06-11 Varonis Systems, Inc. Systems and methodologies for controlling access to a file system
US11496476B2 (en) 2011-01-27 2022-11-08 Varonis Systems, Inc. Access permissions management system and method

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050086268A1 (en) * 2001-12-19 2005-04-21 Rogers Mark F. Idea service for automatic file naming and storing
US20090037558A1 (en) * 2007-08-03 2009-02-05 Infoflows Corporation Digital content management system and methods
US20090163183A1 (en) * 2007-10-04 2009-06-25 O'donoghue Hugh Recommendation generation systems, apparatus and methods

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7640267B2 (en) * 2002-11-20 2009-12-29 Radar Networks, Inc. Methods and systems for managing entities in a computing device using semantic objects
US7797335B2 (en) * 2007-01-18 2010-09-14 International Business Machines Corporation Creation and persistence of action metadata
US20080270451A1 (en) * 2007-04-24 2008-10-30 Interse A/S System and Method of Generating a Metadata Model for Use in Classifying and Searching for Information Objects Maintained in Heterogeneous Data Stores

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050086268A1 (en) * 2001-12-19 2005-04-21 Rogers Mark F. Idea service for automatic file naming and storing
US20090037558A1 (en) * 2007-08-03 2009-02-05 Infoflows Corporation Digital content management system and methods
US20090163183A1 (en) * 2007-10-04 2009-06-25 O'donoghue Hugh Recommendation generation systems, apparatus and methods

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2577445A4 *

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10229191B2 (en) 2009-09-09 2019-03-12 Varonis Systems Ltd. Enterprise level data management
US9904685B2 (en) 2009-09-09 2018-02-27 Varonis Systems, Inc. Enterprise level data management
US10176185B2 (en) 2009-09-09 2019-01-08 Varonis Systems, Inc. Enterprise level data management
US10296596B2 (en) 2010-05-27 2019-05-21 Varonis Systems, Inc. Data tagging
US11138153B2 (en) 2010-05-27 2021-10-05 Varonis Systems, Inc. Data tagging
US9679148B2 (en) 2011-01-27 2017-06-13 Varonis Systems, Inc. Access permissions management system and method
US10102389B2 (en) 2011-01-27 2018-10-16 Varonis Systems, Inc. Access permissions management system and method
US8909673B2 (en) 2011-01-27 2014-12-09 Varonis Systems, Inc. Access permissions management system and method
US10476878B2 (en) 2011-01-27 2019-11-12 Varonis Systems, Inc. Access permissions management system and method
US11496476B2 (en) 2011-01-27 2022-11-08 Varonis Systems, Inc. Access permissions management system and method
US10721234B2 (en) 2011-04-21 2020-07-21 Varonis Systems, Inc. Access permissions management system and method
CN104221009A (en) * 2012-03-07 2014-12-17 瓦欧尼斯系统公司 Enterprise level data management
US10320798B2 (en) 2013-02-20 2019-06-11 Varonis Systems, Inc. Systems and methodologies for controlling access to a file system

Also Published As

Publication number Publication date
CN103026333A (en) 2013-04-03
EP2577445A1 (en) 2013-04-10
EP2577445A4 (en) 2014-04-02

Similar Documents

Publication Publication Date Title
US11138153B2 (en) Data tagging
WO2011148377A1 (en) Data tagging
US8640251B1 (en) Methods and systems for classifying computer documents into confidential levels using log information
CN102307210B (en) Data downloading system and data management and downloading method thereof
US11496476B2 (en) Access permissions management system and method
US20180373762A1 (en) Data classification
US8578460B2 (en) Automating cloud service reconnections
US8407241B2 (en) Content mesh searching
Gjermundrød et al. privacyTracker: a privacy-by-design GDPR-compliant framework with verifiable data traceability controls
US10721234B2 (en) Access permissions management system and method
CN105049287A (en) Log processing method and log processing devices
WO2017215646A1 (en) Data transmission method and apparatus
Boyd et al. Technical challenges of providing record linkage services for research
US8949184B2 (en) Data collector
KR20140016263A (en) Ownership resolution system
CN112163236A (en) File access method, device, system and computer readable storage medium
US8429447B2 (en) System and method for providing indexing with high availability in a network based suite of services
JP2017220112A (en) Data management system, control method and program
US9898463B2 (en) Document management server, document management method, and non-transitory storage medium storing program
US20080222183A1 (en) Autonomic rule generation in a content management system
US20140006345A1 (en) Method, a Server, a System and a Computer Program Product for Copying Data From a Source Server to a Target Server
TWI362595B (en) Collaborative tagging systems and methods for resources
Kasioumis et al. Towards building a blog preservation platform
CN109947759A (en) A kind of data directory method for building up, indexed search method and device
JP2010250548A (en) Log output device

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 201180036152.1

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11786229

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 13384465

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2011786229

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2881/MUMNP/2012

Country of ref document: IN

Ref document number: 2011786229

Country of ref document: EP