US 12,346,471 B2
Systems and methods for hard deletion of data across systems
Ryan Drapeau, Seattle, WA (US); and Andrew Bullen, Alameda, CA (US)
Assigned to Stripe, Inc., South San Francisco, CA (US)
Filed by Stripe, Inc., South San Francisco, CA (US)
Filed on Dec. 20, 2023, as Appl. No. 18/390,060.
Application 18/390,060 is a continuation of application No. 17/123,694, filed on Dec. 16, 2020, granted, now 11,914,732.
Prior Publication US 2024/0126908 A1, Apr. 18, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/00 (2013.01); G06F 21/31 (2013.01); G06F 21/54 (2013.01); G06F 21/62 (2013.01); G06F 21/64 (2013.01)
CPC G06F 21/6218 (2013.01) [G06F 21/31 (2013.01); G06F 21/54 (2013.01); G06F 21/64 (2013.01); G06F 2221/2141 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, at a computer system from a user system, a request to delete user data, the request comprising a user identifier associated with a user making the request;
executing a deletion job comprising the request with the user identifier comprising:
querying a first subsystem filter to determine whether a first data partition, in which first data generated by a first subsystem of the computer system is stored, is predicted to contain a first record having the user identifier,
in response to a first data partition being predicted to contain the first record having the user identifier, adding the first data partition to a subset of partitions to search for data records containing the user identifier, and querying a second subsystem filter to determine whether a second data partition, in which second data generated by a second subsystem of the computer system is stored, is predicted to contain a second record having the user identifier,
adding the second data partition to the subset of partitions containing the user identifier when the querying of the second subsystem filter indicates that the second data partition is predicted to contain the second record;
for each partition in the subset of partitions, searching, by the computer system, said each partition for the data records based on the user identifier; and
performing, by the computer system, a hard deletion of each record containing the user data located in any data partition that contains the user identifier.