SYSTEMS AND METHODS FOR AUTOMATICALLY BLOCKING THE USE OF TRACKING TOOLS

    公开(公告)号:WO2022026564A1

    公开(公告)日:2022-02-03

    申请号:PCT/US2021/043481

    申请日:2021-07-28

    申请人: ONETRUST, LLC

    摘要: Embodiments of the present invention provide methods, apparatus, systems, computing devices, computing entities, and/or the like for permitting or blocking tracking tools used through webpages. In particular embodiments, the method involves: scanning a webpage to identify a tracking tool configured for processing personal data; determining a data destination location that is associated with the tracking tool; and generating program code configured to: determine a location associated with a user who is associated with a rendering of the webpage; determine a prohibited data destination location based on the location associated with the user; determine that the data destination location associated with the tracking tool is not the prohibited data destination location; and responsive to the data destination location associated with the tracking tool not being the prohibited data destination location, permit the tracking tool to execute.

    DATA TRANSFER DISCOVERY AND ANALYSIS SYSTEMS AND RELATED METHODS

    公开(公告)号:WO2022192269A1

    公开(公告)日:2022-09-15

    申请号:PCT/US2022/019358

    申请日:2022-03-08

    申请人: ONETRUST, LLC

    摘要: In various aspects, a data transfer discovery and analysis system may query an entity computing system to identify access credentials for third-party computing systems and scan each access credential to determine associated permissions provided by each access credential on the entity computing system. The data transfer discovery and analysis system may further inspect access logs to identify actual data transfers between the entity computing system and third-party computing systems as well as other access activity associated with each of the credentials. The system can generate and store a mapping of all actual data transfers (e.g., based on the access log data) and potential data transfers (e.g., based on particular access permissions) between/among the entity computing system and the third-party computing systems. By analyzing access logs to determine actual data transfers executed under each particular access credential, the data transfer discovery and analysis system can identify unused and/or underutilized access permissions.

    DATA PROCESSING SYSTEMS AND METHODS FOR AUTOMATICALLY DETECTING TARGET DATA TRANSFERS AND TARGET DATA PROCESSING

    公开(公告)号:WO2022061270A1

    公开(公告)日:2022-03-24

    申请号:PCT/US2021/051217

    申请日:2021-09-21

    申请人: ONETRUST, LLC

    摘要: Aspects of the present disclosure provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for protection of system software, or data from destruction, unauthorized modification, and/or unauthorized disclosure securing by, for example, detecting the transfer and/or processing of target data. Accordingly, a method is provided that involves: scanning a software application to identify functionality configured for processing target data; identifying fields associated with the functionality; identifying metadata associated with a field; generating, from the metadata, an identification of a type of data associated with the field; determining a location based on the processing of the target data by the functionality; determining a risk associated with the functionality processing the target data based on the location and the type of data; determining that the risk satisfies a threshold level of risk; and in response, causing an action to be performed to mitigate the risk.

    DATA PROCESSING SYSTEMS AND METHODS FOR AUTOMATIC DISCOVERY AND ASSESSMENT OF MOBILE SOFTWARE DEVELOPMENT KITS

    公开(公告)号:WO2021237075A1

    公开(公告)日:2021-11-25

    申请号:PCT/US2021/033631

    申请日:2021-05-21

    申请人: ONETRUST, LLC

    IPC分类号: G06F8/70 G06F21/62 G06F21/57

    摘要: A mobile application privacy analysis system is described, where the system scans a mobile device to identify files associated with a particular SDK and generates a tokenized name for the SDK. The tokenized name includes tokens representing the SDK vendor and one or more functions of the SDK. Using the tokenized name, the system then determines corresponding categories for each functionality token and score for each such category. Based on the scores, the system determines the most significant category and assigns that category to the SDK for use in privacy analysis. The system may also, or instead, determine a vendor category using the vendor token and assign that category to the SDK. Weighting factors may be applied to the scores for the categories associated with the functionality tokens and vendor tokens.

    SELECTIVE REDACTION OF MEDIA CONTENT
    8.
    发明申请

    公开(公告)号:WO2022178219A1

    公开(公告)日:2022-08-25

    申请号:PCT/US2022/016930

    申请日:2022-02-18

    申请人: ONETRUST, LLC

    IPC分类号: G10L15/26 G06F21/62 G06V10/00

    摘要: In general, various aspects of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for identifying and documenting certain subject matter found in media content, as well as selectively redacting the subject matter found in media content. In accordance with various aspects, a method is provided that comprises: obtaining first metadata for media content, the metadata identifying a context and a portion of content for an individual; identifying, based on the context, a certain subject matter for the media content; determining that a particular item associated with the subject matter is present in the portion of content associated with the individual; generating second metadata to document the particular item present in the portion of content; and using the second metadata to selectively redacting the item from the portion of content associated with the individual upon request to do so with respect to the individual.

    DATA PROCESSING SYSTEMS AND METHODS FOR DETECTING TOOLS FOR THE AUTOMATIC BLOCKING OF CONSENT REQUESTS

    公开(公告)号:WO2022060860A1

    公开(公告)日:2022-03-24

    申请号:PCT/US2021/050497

    申请日:2021-09-15

    申请人: ONETRUST, LLC

    IPC分类号: G06F16/957 G06F21/62

    摘要: Systems and methods are disclosed detecting whether calls to consent rejection functions originate with an automated tool or a human user. The system can determine that a calls to a consent rejection function are likely from an automated tool by determining that a rate and/or number of calls to a function exceeds a threshold and/or that the calls are received before the interface requesting user consent preferences has been rendered to the user. The system can also require that a function call include a token that an automated tool would not have knowledge of or access to and reject function calls without this token. The system can also use private consent rejection function calls with obfuscated names and/or provide a follow up consent rejections confirmation interface requiring human user input before process a consent rejection.