Digital watermarks as a gateway and control mechanism

Abstract

An electronic system where messages include information carried by digital watermarks. The digital watermarks are used to control the transmission and/or receipt of messages including images or audio transmitted over the system. The system prevents the accidental dissemination of information to unauthorized receivers. Furthermore, while no security system is fool-proof, the system helps guards against the intentional, but unauthorized, dissemination of information to unauthorized receivers.

Description

FIELD OF THE INVENTION

The invention relates to Internet communication and more particularly to using digital watermarks to as control elements in Internet communication.

BACKGROUND OF THE INVENTION

The Internet presents security challenges to corporations and others who have computers which store confidential information and which have connections to the internet. Traditionally, documents containing confidential information are marked with a legend or other visual indicia with words such a “CONFIDENTIAL”, “PROPRIETARY”, etc. The presence of these marks alerts anyone handling such documents that they should only be transferred outside of company under special precautions. It is relatively difficult and unusual for someone to inadvertently manually send such a document to an unauthorized receiver. However, the use of Internet communication changes the situation.

The Internet and electronic mail speeds the communications process; however, the Internet and electronic mail also make it much easier to inadvertently or accidentally send a confidential document to an unauthorized receiver. A single accidental or inadvertent keystroke can have wide ranging unintended consequences. The Internet and other electronic communication system make it easy to communicate; however, these systems and networks also make it easy to mistakenly or inadvertently sent a document to the wrong party.

SUMMARY OF THE PRESENT INVENTION

The invention utilizes digital watermarks to control the transmission and/or receipt of documents, including images or audio, transmitted over computer networks such as the Internet. The invention can be used to prevent the accidental dissemination of information to unauthorized receivers. Furthermore, while no security system is fool-proof, the invention helps guards against the intentional, but unauthorized, dissemination of information to unauthorized receivers.

Most electronically transmitted messages contain text. However, electronic mail systems generally allow images (i.e. pictures) or sound bites to be embedded into and form part of a message. For example, a message can contain a “stamp” with the word “confidential” or a message can contain a sound clip with the word “confidential”. An image or sound clip that forms part of an electronic message can carry a digital watermark that can be detected and read by conventional watermark reading programs.

The “payload” or digital data in a digital watermark typically has a number of different fields. One or more of these fields can be dedicated to a flags which indicates that the document or image containing the watermark is confidential or otherwise classified and that it should only be disseminated in a particular manor.

Typically, e-mail enters a transmission network by way of an e-mail server. Programs that can detect and read watermarks are well known and commercially available. In one embodiment, the e-mail server passes each e-mail messages through a watermark detection and reading program prior to sending the message out over a network. If the watermark program detects a watermark, it interrogates certain flag bits to determine how the message should be handled. For example, if the watermark reading program finds that a particular flag is set, it can take action such as alerting both the sender and a network administrator. If the watermark program finds no watermark or finds that a particular flag is not set, the message is sent over the network in a conventional manner.

Thus, the invention can serve as a control mechanism for controlling the dissemination and receipt of electronic messages.

Messages and documents also enter the Internet and other electronic networks from servers such as Web servers and FTP servers. In a similar fashion a watermark detection program can interrogate documents on servers such as Web and FTP servers and take action as described above.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram with an image containing the words “Confidential”.

FIG. 2 is diagram of the fields in a typical watermark.

FIG. 3 is a diagram of a typical e-mail system.

FIG. 4 is a more detailed diagram of the watermark reading and detection program shown in FIG. 3.

DESCRIPTION OF PREFERRED EMBODIMENTS

The embodiments of the invention described herein relate to systems for transmitting e-mail messages over the Internet. This first embodiment has the ability to prevent the accidental dissemination of confidential e-mail messages and documents to unauthorized users. That is, the first embodiment of the invention prevents the transmission of confidential e-mail or documents to anyone. An alternate embodiment merely prevents the transmission of confidential documents to “unauthorized” users. That is, if a message is sent to two recipients, one of whom is authorized and one of whom is not authorized, the documents are transmitted to authorized user and not transmitted to unauthorized user. It is very easy to add addressees to an e-mail message. Someone may address an e-mail message which contains confidential information to a large group of people without realizing the one of the addressee is not authorized to receive confidential information. The system will prevent such an e-mail from being transmitted to the unauthorized person even though the sender included the address of that person in the list of addressee. Another alternative embodiment can take a variety of actions such as logging messages or sending them to an administrator in addition to preventing them from being disseminated.

A typical confidential document 10 is represented in FIG. 1. The document 10 can either be an e-mail message, or alternatively it may be a document that is attached to an e-mail message. The document 10 includes a confidentiality stamp 11 and lines of text. The confidentiality stamp 11 is an image that has the word “confidential” superimposed over a background that has a variety of lines. That is, the background in image 11 contains lines the width of which are varied to carry a watermark in accordance with the teachings of U.S. application Ser. No. 09/074,034, filed May 6, 1998, now U.S. Pat. No. 6,449,377 (which corresponds to PCT application PCT/US99/08252), and U.S. application Ser. No. 09/127,503, filed Jul. 31, 1998 (which corresponding to PCT application PCT/US99/14532). The disclosures of the above referenced patent applications are hereby incorporated herein in their entireties by reference. Alternatively the background of image 11 may comprise a weave or tint pattern that carries a watermark. In still another alternative embodiment instead of having an image 11 embedded in the message, the message may contain an audio clip with the work confidential. The audio clip would be watermarked using conventional audio watermarking techniques. However, in the first embodiment described herein the, image 11 has both a human readable word “Confidential” and a digital watermark that can be read by a watermark detection and reading program.

The data fields and flags in a typical watermark payload are shown in FIG. 2. It should be understood that the fields and flags shown are merely representative and they can take may alternative forms. The first embodiment of the invention utilizes one of the flag fields to indicate that a particular document is confidential. The other fields can be used in a conventional manner. Alternate embodiments can use a number of flags to indicate actions that should be taken with a particular message.

FIG. 3 shows a typical e-mail system. A relatively large number of individual user terminal 301 are connected to an e-mail server 302. Only five representative terminals designated 301a to 301x are shown for convenience of illustration. The terminals 301 are connected to server 302 by conventional connections such as by an Ethernet LAN or by dial up modems. The e-mail server 302 has a conventional interface 303 to the Internet and it receives and sends messages from the individual users to the Internet. The e-mail server 302 is conventional and the details of the e-mail server 302 form no part of the present invention. However, with the present invention, before the e-mail server 302 transmits a message from one of the individual user terminals 301a to 301x to the Internet, the e-mail server passes the message through a watermark detection and reading program 305. Both the e-mail message itself and any attached documents are passed through the watermark reading program. The watermark detection and reading program 305 determines if a message contains a watermark. If a watermark is detected, the confidentiality flag bit is interrogated. If the watermark reading program 305 determines that the flag bit is set to “confidential”, the first embodiment of the invention merely informs the e-mail server 302 to return the message to the sender. Thus, the first embodiment of the invention prohibits any confidential information from being transmitted as part of an e-mail message.

A second embodiment of the invention provides for a wider array of alternative. As shown in FIG. 4, the second embodiment of the invention includes a data base 401. The data base 401 contains a list of different potential message senders, a list showing different groups of potential message recipients, and a set of possible categories indicated by the setting of the various flags in a message. For example, the senders may fall into three groups designated sender groups S1, S2 and S3. The potential recipients can fall into three groups designated R1, R2, and R3. The data base 401 and the associated logic 402 can implement logic rules such as indicated by the following table:

Sender	Recipient	Flag
Group	Group	Conditions	Action
S1	R1	011	Send message
S1	R2	110	Do not sent message notify the
			administrator
S1	R2	001	Send message, and log fact that S1 sent
			a message to R2.
S1	R2	101	Return message to sender
S2	R1	011	Send message
S2	R3	110	Do not sent message and notify the
			system administrator

It should be clearly noted that the above is merely a simplified example of the rules and combinations that could be in data base 401. The data bases could include hundreds or thousands of users and it could include dozens of rules. The system can be complex or simple as desired for a particular application. A system can include many alternatives in addition to those shown above or a system might include only a very few alternatives. For example, the system could include only a list of addresses which are authorized to receive messages which have a confidentiality flag set to “confidential”. Such a system would allow confidential documents to be only sent to selected addresses. Alternatively or in addition the system could include a list of individuals authorized to send confidential documents. The system could merely check the sender against this list or alternatively, the system could require that a password be entered when such messages are encountered. The table above shows three flag bits. A system could have more or less flag bits as the needs of the particular system require.

The import point is that the system considers the message sender, the message recipient and the condition of the flags in the data carried by a digital watermark to determine what action should be taken. The digital watermark can be carried by the message using any of the known ways of watermarking a document. For example, it can be carried by modulating the width of lines or by modulating the luminosity of pixels in an image or by a watermark in audio data.

In alternate embodiments of the invention, the confidentiality stamp could include a watermark in an image by means other than using line width modulation as described with respect to the first embodiment of the invention. The background of the stamp could include a conventional image carrying a conventional watermark.

In an alternative embodiment of the invention, rather than checking for a digital watermark, the system could check for a text string such as “confidential” and take action in response to locating such a text string.

The above described embodiments relate to controlling the dissemination of information; however, it should be understood that the invention could be applied in similar manner to control the receipt of confidential information or to control the action taken when messages containing watermarks are received.

While the previously described embodiments apply to e-mail systems, similar precautions could be taken with FTP servers or with Web servers.

While the invention has been shown and described with respect to various preferred embodiments, it should be understood that various changes in form and detail could be made without departing from the scope and spirit of the invention.

Claims

1. A method comprising: receiving a message, at a server, being transmitted on a transmission network from a sender to a receiver;extracting audio or image data from the message;detecting a digital watermark in the audio or image data;reading one or more bits of data carried in the digital watermark; andtaking an action, in response to reading the one or more bits, to manage the transfer of the message, including logging information about the message.

2. The method of claim 1, wherein the audio or image data comprises a sound clip.

3. The method of claim 1, further comprising controlling transmission of the message as a function of the one or more bits and identity of the sender or the receiver.

4. The method of claim 1, wherein the action is determined by interrogating a database with information about the sender or the receiver and information from the digital watermark.

5. The method of claim 1, wherein the server comprises a web server, and wherein the web server extracts the audio or image data from the message and executes a watermark reader to detect the digital watermark and read the one or more bits of data carried in the digital watermark.

6. The method of claim 1, wherein the server comprises an electronic file transfer server, and wherein the electronic file transfer server extracts the audio or image data from the message and executes a watermark reader to detect the digital watermark and read the one or more bits of data carried in the digital watermark.

7. The method of claim 1, wherein receivers of messages transmitted on the transmission network are categorized into different groups, and wherein the action depends on a determination of which of these groups the receiver is associated with.

8. The method of claim 1, wherein senders of messages transmitted on the transmission network are categorized into different groups, and wherein the action depends on a determination of which of these groups the sender of the message is associated with.

9. The method of claim 1, wherein the action comprises sending an alert to the sender.

10. The method of claim 1, wherein the action comprises sending an alert to an administrator, wherein the administrator is separate from the sender and receiver of the message.

11. The method of claim 1, wherein the one or more bits comprise one or more predetermined flags.

12. The method of claim 1, wherein the action comprises seeking additional authorization, electronically from the sender or the receiver of the message.

13. The method of claim 12, wherein the additional authorization comprises a password.

14. The method of claim 1, wherein the action comprises interrogating a rules database, wherein the rules database provides the action to be taken based on the one or more bits and information about the sender or the receiver.

15. A system comprising: a server on a transmission network configured to receive and route, a message being transmitted on the transmission network from a sender to a receiver, wherein the server includes memory for storing at least part of the message, wherein the server further includes an interface configured to extract audio or image data from the at least part of the message stored in the memory; anda digital watermark detector, in communication with the interface, configured to detect a digital watermark in the audio or image data, and further configured to read one or more bits of data carried in the digital watermark;wherein the server is further configured to take an action, in response to the one or more bits, to manage the transfer of the message, including logging information about the message.

16. The system of claim 15, wherein the server comprises a gateway between a sending device of the sender and a network.

17. The system of claim 15, wherein the interface is configured to extract the audio or image data from the message while the message is temporarily buffered for transfer over a network.

18. The system of claim 15, wherein the audio or image data comprises a sound clip.

19. The system of claim 15, wherein the server is further configured to control transmission of the message as a function of the one or more bits and identity of the sender or the receiver.

20. The system of claim 15, wherein the server is further configured to interrogate a rules database with information about the sender or the receiver and information from the digital watermark to determine the action.

21. The system of claim 15, wherein the server comprises a web server, and wherein the web is configured to: extract the audio or image data from the message; andexecute a watermark reader, wherein the watermark reader is configured to to detect the digital watermark and read the one or more bits of data carried in the digital watermark.

22. The system of claim 15, wherein the server comprises an electronic file transfer server, and wherein the electronic file transfer server is configured to: extract the audio or image data from the message; andexecute a watermark reader, wherein the watermark reader is configured to detect the digital watermark and read the one or more bits of data carried in the digital watermark.

23. The system of claim 15, wherein receivers of messages transmitted on the transmission network are categorized into different groups, and wherein the action depends on a determination of which of these groups the receiver is associated with.

24. The system of claim 15, wherein senders of messages transmitted on the transmission network are categorized into different groups, and wherein the action depends on a determination of which of these groups the sender of the message is associated with.

25. The system of claim 15, wherein the action comprises sending an alert to the sender or an administrator regarding control of the transfer of the message.

26. An apparatus comprising: a processor; anda computer-readable medium operatively connected to the processor having instructions stored thereon that, if executed by the processor, cause the apparatus to: receive a message being transmitted on the transmission network from a sender to a receiver;extract audio or image data from the message;detect a digital watermark in the audio or image data;read one or more bits of data carried in the digital watermark; andin response to reading the one or more bits, take an action to manage the transfer of the message, including logging information about the message.

27. The apparatus of claim 26, wherein the computer-readable medium further comprises instructions that, if executed by the processor, cause the apparatus to interrogate a rules database with information about the sender or the receiver and information from the digital watermark to determine the action.

28. An article of manufacture including a computer-readable medium having instructions stored thereon that, if executed by a computing device, cause the computing device to perform operations comprising: receiving a message being transmitted on the transmission network from a sender to a receiver;extracting audio or image data from the message;detecting a digital watermark in the audio or image data;reading one or more bits of data carried in the watermark; andin response to reading the one or more bits, taking an action to manage the transfer of the message, including logging information about the message.

29. The article of manufacture of claim 28, wherein the action comprises sending an alert to the sender or an administrator regarding control of the transfer of the message.