Beijing Bytedance Network Technology Co., Ltd.

Lemon Inc.

Zhipeng Tian

Zhengqin Luo

Jianqing Zhang

Hengming Dai

Mu Du

Xingxiu Chen

Lifeng Sang

Deyang Yin

Zhijun Ling

Xiangyun Cao

Ruoxin Shen

Xuan Zhang

Daniel Haimanot

Keyi Wu

Xinglang Wang

Gan Fang

A third party gateway for validating egress traffic in a computer network system is provided. The third party gateway includes a proxy and a gateway agent. The proxy includes a termination proxy and a forward proxy. The proxy is configured to terminate Transport Layer Security communication for the egress traffic. The proxy is further configured to forward the egress traffic to the gateway agent. The gateway agent is configured to validate the egress traffic as valid traffic or invalid traffic based on predetermined validation requirements. The proxy is further configured to receive the valid traffic or the invalid traffic from the gateway agent, and to forward the valid traffic to a destination service or to block the invalid traffic.

Third party gateway

Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified in the query request. Personally identifiable information associated with the query request may then be de-pseudonymized. Accordingly, a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request may be generated. The personally identifiable information in the response may be pseudonymized such that the pseudonymized personally identifiable information and data included in the response is provided to a client.

Data access gateway for security and privacy

According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.

Method and apparatus for control of data access

According to embodiments of the present disclosure, there is provided a method, apparatus, device, storage medium and program product for log information processing. The method comprises: determining a source of a target log in response to a log query request, wherein the log query request indicates that a target user requests to query the target log; determining a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of a variable item in the target log; and performing, based on service attribute information of the target user, the log desensitization policy and service authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log.

Method, apparatus, device, storage medium and program product for log information processing

Systems and methods directed to providing a data security labeling framework at a first device are described. The system may include a storage area and at least one data labeler. The data labeler may be configured to locate one or more data instances, define one or more security attributes to be used under one or more different contexts, and apply a labeling to the located one or more data instances such that each label provided by the labeler includes or is otherwise associated with a plurality of security attributes.

Unified data security labeling framework

Growing community of inventors

Culver City, CA, United States of America

Zhipeng Tian