US 12,443,748 B2
Systems and methods for efficient reporting of historical security awareness data
Sunil Mathew Thomas, Cape Town (ZA); Peter John Hayward, Cape Town (ZA); Phillip Samuel Rosochacki, Cape Town (ZA); Raymond Skinner, Dunedin, FL (US); and Mark William Patton, Clear Water, FL (US)
Assigned to KnowBe4, Inc., , FL (US)
Filed by KnowBe4, Inc., Clearwater, FL (US)
Filed on Nov. 14, 2023, as Appl. No. 18/509,029.
Claims priority of provisional application 63/425,362, filed on Nov. 15, 2022.
Prior Publication US 2024/0160782 A1, May 16, 2024
Int. Cl. G06F 21/62 (2013.01)
CPC G06F 21/6245 (2013.01) [G06F 21/6227 (2013.01); G06F 21/6254 (2013.01); H04L 2209/42 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for more efficiently storing and removing personally identifiable information (PII) in a data storage system, the method comprising:
receiving, by one or more devices, a request to store data to one or more data records in a data storage system, the data comprising one or more data items of PII of a user, joined PII and non-PII;
storing, by the one or more devices, the one or more PII data items, the one or more joined PII data items and the one or more non-PII data items to a data record of the one or more data records;
identifying, by an agent of the one or more devices, that the data record has the one or more PII, one or more joined PII and one or more non-PII data items within the data;
generating, by the one or more devices, a PII user identifier for the user;
replacing, by the one or more devices, in the data record the one or more PII data items with a first set of links to the one or more PII data items stored in a PII data table in association with the PII user identifier and the one or more joined PII data items with a second set of links to the one or more joined PII data items stored in a joined PII data table in association with the PII user identifier;
receiving, by the one or more devices, a second request to remove PII associated with the user;
replacing, by the one or more devices, at least the one or more PII data items in the PII data table with a value indicating the PII data item has been removed;
validating, by a removal and validation agent, that removal of the PII associated with the user has occurred throughout the data storage system; and
providing, by the removal and validation agent responsive to validating, a report that the PII associated with the user has been removed.