US 12,314,438 B2
Tagging and auditing sensitive information in a database environment
Christopher Joseph Scuderi, Daly City, CA (US); and Edward Kim, San Francisco, CA (US)
Assigned to ZenPayroll, Inc., San Francisco, CA (US)
Filed by ZenPayroll, Inc., San Francisco, CA (US)
Filed on Feb. 22, 2024, as Appl. No. 18/583,893.
Application 18/583,893 is a continuation of application No. 17/891,138, filed on Aug. 19, 2022, granted, now 11,947,704.
Application 17/891,138 is a continuation of application No. 17/159,161, filed on Jan. 27, 2021, granted, now 11,455,424, issued on Sep. 27, 2022.
Application 17/159,161 is a continuation of application No. 16/676,438, filed on Nov. 7, 2019, granted, now 10,943,026, issued on Mar. 9, 2021.
Application 16/676,438 is a continuation of application No. 16/355,502, filed on Mar. 15, 2019, granted, now 10,521,605, issued on Dec. 31, 2019.
Prior Publication US 2024/0193301 A1, Jun. 13, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/00 (2013.01); G06F 3/04817 (2022.01); G06F 3/0482 (2013.01); G06F 16/2457 (2019.01); G06F 16/248 (2019.01); G06F 21/62 (2013.01); G06F 21/84 (2013.01)
CPC G06F 21/6245 (2013.01) [G06F 3/04817 (2013.01); G06F 3/0482 (2013.01); G06F 16/24573 (2019.01); G06F 16/248 (2019.01); G06F 21/84 (2013.01); G06F 2221/2101 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method of restricting a display of data comprising:
displaying, by a security engine, an interface on a client device of a requesting entity for displaying sensitive information in a set of fields of the interface, the interface including a corresponding interface element that obscures each field, wherein the client device accesses information for display within the interface from a database that includes sensitive flags indicating columns of sensitive information;
after displaying the interface on the client device, receiving, by the security engine, a request from the requesting entity to view the sensitive information within a first field obscured by a corresponding interface element; and
in response to determining that the requesting entity is authorized to view the requested sensitive information, 1) accessing, by the security engine, the requested sensitive information from the database and removing the corresponding interface element such that the accessed sensitive information is displayed within the first field without the field being obscured, and 2) accessing, by the security engine, additional sensitive information that the requesting entity is authorized to view and removing corresponding interface elements such that the accessed additional sensitive information is displayed within additional fields of the set of fields without the additional fields being obscured.