Classification Management

What is this patent about?

’256 is related to the field of cloud software and, more specifically, to the management and governance of elements (data, configurations, etc.) stored across multiple Software-as-a-Service (SaaS) platforms. Existing labeling schemes for cloud software lack expressiveness and the ability to reflect the structure of organizations, making it difficult to manage security attributes and ensure governance across various SaaS platforms.

The underlying idea behind ’256 is to provide a customizable classification system that allows users to map elements from different SaaS platforms to a single, centralized classification structure. This involves defining a hierarchy of classifications, associating elements with these classifications, and specifying prescribed security attributes for each mapping. The system then compares these prescribed attributes with the actual configured security attributes to identify discrepancies and potential security risks.

The claims of ’256 focus on a system, method, and computer program product that obtain mappings of stored elements to a plurality of classifications via a user interface. These mappings include prescribed security attributes. The claims further cover obtaining a policy that includes identifying information associated with a set of actors and a specified portion of the classifications. The system then compares configured security attributes of the actors to the prescribed security attributes and outputs information pertaining to any discrepancies found.

In practice, the invention allows an administrator to define a hierarchy of classifications that reflect the organization's structure and security policies. They can then map elements from various SaaS platforms (e.g., Salesforce, Workday) to these classifications, specifying the desired security attributes for each mapping. The system then periodically audits the actual configurations of these SaaS platforms, comparing them to the prescribed attributes. Any deviations are flagged as discrepancies, allowing the administrator to take corrective action.

This approach differs from prior solutions by providing a flexible and centralized way to manage security attributes across multiple SaaS platforms. Instead of relying on each platform's native labeling scheme, which may be limited or inconsistent, ’256 allows users to define their own customizable classifications and mappings. Furthermore, the system automates the auditing process, identifying discrepancies that might otherwise go unnoticed, thereby improving overall security and governance.