Patent Application
20090208142
Aspects of the disclosure relate to content-aware document modification.
Many corporate and personal computer users generate and edit documents in the course of their daily work. Many of these documents include content that is sensitive, confidential, restricted, and/or secret—i.e., forbidden to release.
Accordingly, it would be desirable to provide systems and methods to analyze such documents to determine whether the documents include content that is sensitive, confidential, restricted, and/or secret—i.e., forbidden to release.
It is an object of this invention to provide systems and methods to analyze such documents to determine whether the documents include content that is sensitive, confidential, and/or secret—i.e., forbidden to release. For the purposes of this application any expression that contains information that is any one of sensitive, confidential, and/or secret may be referred to in a generic sense as confidential.
Additional embodiments of the invention may include upon discovery of such limited access content, redacting the document or taking some other form of corrective action.
A method for analyzing a document based on the document content to determine whether confidential information is included in the document is provided. The method may include loading a set of rules into an appropriate document generating and/or editing application. The set of rules may define a set of confidential expression patterns. The defined set of expressions can include expressions that typically include confidential information. For example, the majority of the occurrences of the expression in the document, or the majority of the occurrences of the expressions in a predetermined historical sample, or expressions as predetermined by either a human or computer, may include confidential information.
The method may further include analyzing a document to determine the existence of one of the set of expression patterns in the document. In response to the detection of one of the defined set of expression patterns in the document, the method may display a visual indication of the detection of one of the defined set of expression patterns.
The objects and advantages of the invention will be apparent upon consideration of the following detailed description, taken in conjunction with the accompanying drawings, in which like reference characters refer to like parts throughout, and in which:
In the following description of the various embodiments, reference is made to the accompanying drawings, which form a part hereof, and in which is shown by way of illustration various embodiments in which the invention may be practiced. It is to be understood that other embodiments may be utilized and structural and functional modifications may be made without departing from the scope and spirit of the present invention.
As will be appreciated by one of skill in the art upon reading the following disclosure, various aspects described herein may be embodied as a method, a data processing system, or a computer program product. Accordingly, those aspects may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, such aspects may take the form of a computer program product stored by one or more computer-readable storage media having computer-readable program code, or instructions, embodied in or on the storage media. Any suitable computer readable storage media may be utilized, including hard disks, CD-ROMs, optical storage devices, magnetic storage devices, and/or any combination thereof. In addition, various signals representing data or events as described herein may be transferred between a source and a destination in the form of electromagnetic waves traveling through signal-conducting media such as metal wires, optical fibers, and/or wireless transmission media (e.g., air and/or space).
I/O module 109 may include a microphone, keypad, touch screen, and/or stylus through which a user of device 101 may provide input, and may also include one or more of a speaker for providing audio output and a video display device for providing textual, audiovisual and/or graphical output. Software may be stored within memory 115 and/or storage to provide instructions to processor 103 for enabling server 101 to perform various functions. For example, memory 115 may store software used by server 101, such as an operating system 117, application programs 119, and an associated database 121. Alternatively, some or all of server 101 computer executable instructions may be embodied in hardware or firmware (not shown). As described in detail below, database 121 may provide centralized storage of account information and account holder information for the entire business, allowing interoperability between different elements of the business residing at different physical locations.
Server 101 may operate in a networked environment supporting connections to one or more remote computers, such as terminals 141 and 151. Terminals 141 and 151 may be personal computers or servers that include many or all of the elements described above relative to server 101. The network connections depicted in
Additionally, application program 119 used by server 101 according to an illustrative embodiment of the invention may include computer executable instructions for invoking user functionality related to communication, such as email, short message service (“SMS”), and voice input and speech recognition applications.
Computing device 101 and/or terminals 141 or 151 may also be mobile terminals including various other components, such as a battery, speaker, and antennas (not shown).
Systems and methods according to the invention provide content-aware document analysis and modification. When handling information, the document users involved often are not aware (or are not sufficiently reactive to the fact) that the information contained in the document is confidential, sensitive or proprietary. It would be advantageous to have a system according to the invention that periodically or substantially continually checks document content to determine whether the document includes patterns of information that typically include confidential, sensitive or proprietary information. In one embodiment, such a system could operate in a manner that is transparent to a user.
A system according to the invention can determine whether previously identified sensitive, confidential or secret information is found in a document, presentation, or spreadsheet. In certain embodiments of the invention, templates can be used to detect and change key factors such as color, graphics, and embedded characteristics of the identified sensitive and/or confidential information based on the previously identified sensitivity of information provided to the template.
The system according to the invention preferably provides a set of rules and/or templates that can be applied to documents to analyze and modify the document's content. Accordingly, unlike selecting a template that is for application to a static document, by using code or plugins that can detect when certain patterns of information is entered and alter the content as needed, the visible and invisible characteristics of a document can be changed.
Such a system preferably provides a mechanism for visible feedback to a user that the user has crossed a predetermined threshold of what should be recorded into a document. Such a threshold may be measured in terms of a certain level of appropriateness with respect to a particular document or other suitable criteria. Such criteria may include the number of occurrences of a social security number pattern and/or the discovery of restricted text pattern.
The process could also be extended to form an appropriateness rule which could be akin to, or, alternatively, implemented as a part of, grammar rules or spell checking. Such a process could provide a visible means to note that a document contains noticeable and/or unacceptable amounts or occurrences of patterns of confidential data.
An example of a platform for implementation of the invention could be a typical word processing suite such as Microsoft Office's WORD™. As the WORD users type or otherwise edit a document, the words and grammar, making up content, would be analyzed against specific “document sensitivity” rules. Such analysis could occur either locally, or at a central server. As content is entered into the document, the content can be compared, preferably in real-time or otherwise at some predetermined interval, to the rules governing the security of the document itself.
If patterns of sensitive information are entered and/or otherwise detected, the system and/or process according to the invention can detect the patterns of sensitive information and the template could redact, highlight, or otherwise display a visual indication of the sensitive information pattern accordingly.
Step 208 shows an optional step of initializing a “Smart Tags” process within the greater process of analyzing document content and, where applicable, correcting or otherwise indicating the existence of such content pattern.
Smart Tags is a system that is currently available and known. Such a system preferably provides for the categorization and tagging of portions of and/or entire documents in a fashion that may be transparent to the document creator and/or editor. In one embodiment of the invention, when a threshold is passed with respect to the Regex rules—e.g., a predetermined number of social security numbers are found in the document—then the document may be tagged as a sensitive document. One implementation of Smart Tags may be to limit access, under certain conditions, to tagged documents—e.g., the tagged document may only be available when the person's laptop computer is docked at a predetermined docking station but not when the laptop computer is being used in a mobile computing mode.
Step 210 shows that, following loading of the rules and optional initialization of the Smart Tags system, the process according to the invention may continue with the creation of any Office Document. In one embodiment of the invention, the Office program (or other remotely administered program) can continuously check and further process the document with respect to the determination of whether sensitive information is found in the document, as shown in step 212. In certain embodiments of the invention, the Office program (or other externally administered program) can check the document periodically to determine whether sensitive information has been included in the document.
Step 214 shows that, under certain predetermined circumstances, the smart tagged data and/or documents can be sent to the pre-deployed recognizer within the DLL. Step 216 shows the process working, preferably side by side with the Smart Tagging, to determine whether a word or expression matches a pattern as included in a Regex rule as set forth in the Regex rules that have been loaded into the DLL.
Step 218 shows the execution of preferably custom code to display a visual indication of, and/or otherwise redact, the sensitive information that has been determined to exist in the document. Thereafter, as shown in step 220, or, alternatively, following a determination that the word or expression in the document did not match the Regex expression, the process may loop back to wait for more document data. Following the input of additional data, or, alternatively, the elapsing of a predetermined time period (not shown), the system may loop back to step 212 such that the Office application (or other suitable document editing and/or generating application) continues to check the document in a manner similar to the known continuous spell-checking and/or grammar checking algorithms.
This process according to the invention allows for dynamic configuration and provides the means for white-listing—i.e., authorizing as non-sensitive—document behavior and contents. The process could preferably extend to document characteristics such as document ownership, read/write access, content rules (i.e. sensitive information as defined by the pre-loaded Regex rules) as well as implementing document modifications. Such modifications may include but not be limited to adding watermarks to sensitive documents and/or redacting sensitive information.
As stated above, the method according to the invention may communicate via a plug-in to the Microsoft Office Suite™ (this may include applications such as, for example, WORD™, Excel™, and PowerPoint™). The add-in within each product could contain default rules making a communication service to an external rules providing application optional. In certain embodiments of the invention, the inline—i.e., operating substantially in real-time with the ongoing document creation and/or editing—document monitor add-in according to the invention can act very similar to a conventional spell checking utility. As such, the add-in can be “always on” and monitor substantially every keystroke by examining the syntactical typography for confidential information and/or expressions that following patterns that typically include confidential information. The add-in can then check the input against the defined rules to determine whether matches to the Regex exist. If a match, or matches, is found, then action can be taken per the provided rules.
First, the process could highlight the sensitive information, as shown at 304. This could occur automatically, in a manner similar to the known automatic visual indication of a portion of text that reflects a web site in a document.
Second, the process could attach watermark 306 to the document which may describe the document as confidential. Alternatively, the process may, by some other mark, identify the document as sensitive in some other predetermined fashion.
Other rules according to the invention could implement other document security-enhancing procedures such as preventing the document from being saved or printed. Another security-enhancing procedure according to the invention may include encrypting the document upon saving or other suitable measures.
The invention, as described herein, preferably alleviates a user awareness issue with respective to sensitive documents. Processes and systems according to the invention may outline the information that is appropriate to be shared and stored in a document, spreadsheet, or presentation. If information contained in the document contains restricted subject matter, the systems and methods according to the invention may either visually indicate the presence of such confidential material and/or take remedial measures to prevent the further distribution of such material.
The following is a more detailed description of the invention. On a first level of operation, the process according to the invention may create different templates based on document criticality, confidentiality, or sensitivity of content.
An example of such a first level of operation could be identification of a document that contains social security numbers and applying a watermark thereto. Such a template could be available to a user such that the user could select and define unique characteristics of the watermark such as color, font or style of watermark. Such a watermark could be detected using monitoring systems.
A second level of operation of the invention could possibly utilize a subsystem to select a template based on a review of the content entered into the document. Such a subsystem could change the surrounding template to most closely match the one for a given (or predetermined) level of confidentiality.
When plug-in 404 is loaded into a suitable application, it may be used as an in-line document monitor 406. In-line document monitor 406 may be adapted to perform a number of corrective measures. Such measures may include correcting the document by adding a watermark showing that the document is confidential. Such measures may also include highlighting or otherwise visually indicating that the document contains sensitive material. Additionally, such measures may include redacting the document to remove any sensitive material.
Examples of such implementations may include a first scenario in which a user creates a presentation and the presentation (or other suitable document) contains no sensitive information or previously identified restricted content. In such a scenario, the template could maintain the current or initial state of the document.
In a second scenario, the user could create a presentation and enter social security numbers, personnel information, or pictures which are restricted from a predetermined class of documents—such as publicly available documents. The template and application may detect this content and make changes such as applying a red border to the document, applying a label—e.g., as a header or footer—of “confidential” to the document, and/or applying a watermark to the document.
In certain embodiments of the invention, such changes may be detectable by document monitoring systems according to the invention which could inspect for predefined changes prior to the document being exported from a host computer where the existence of the sensitive information was detected.
The applicable subsystems shown in
The communication plug-in 404 may also incorporate a detection subsystem, as preferably further defined by rules server/service 402. Plug-in 404 (or other similarly suitable code) may detect restricted content as it is entered into the document creation and/or editing application.
In one embodiment of the invention, restricted content may also include content defined by the detection subsystem to include certain entity documents that have been put on a restricted list. Such documents may include certain high-priority or privileged entity documents such as secret recipes, other trade secrets, partnership agreements, entity by-laws, confidential e-mails or any other suitable document that an entity may desire to maintain in a restricted state.
In such an embodiment, the detection subsystem can be set to monitor all entity documents presently in use for the presence of even portions of such restricted documents. Accordingly, critical entity documents would be protected from unauthorized editing and/or distribution. Yet another embodiment of the invention along similar lines may include informing a central administrative division of the entity that editing and/or distribution of critical documents is occurring. Entities of all kinds may be appropriate candidates for implementing such systems and processes as described above. Such entities may include financial services entities, law firms, and any corporation that regularly deals with documents of sensitive and/or confidential nature.
A method or system according to the foregoing embodiment—i.e., the embodiment implementing sending information to a central administrative division—may also be used to prevent fraud within the entity and other crimes. For example, when the system identifies that a user is using bank account numbers in a pattern that suggests illegal transfer of funds, then the administrative division may be informed—preferably transparently to the alleged illegal transferor.
Yet another subsystem according to the invention may be a sensitive content or secret content subsystem. A signature or heuristic list may be used by this subsystem. The list may contain specific patterns of confidential expressions and/or entire confidential documents (each of the entire documents could be broken down further into sub-documents, some of which are sensitive and some of which are not) that could be updated with applicable information. Such a subsystem could further change the design of the document based on rules that may be included in this subsystem.
The invention is operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the invention include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
The invention may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The invention may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
Aspects of the invention have been described in terms of illustrative embodiments thereof. A person having ordinary skill in the art will appreciate that numerous additional embodiments, modifications, and variations may exist that remain within the scope and spirit of the appended claims. For example, one of ordinary skill in the art will appreciate that the steps illustrated in the figures may be performed in other than the recited order and that one or more steps illustrated may be optional. The methods and systems of the above-referenced embodiments may also include other additional elements, steps, computer-executable instructions, or computer-readable data structures. In this regard, other embodiments are disclosed herein as well that can be partially or wholly implemented on a computer-readable medium, for example, by storing computer-executable instructions or modules or by utilizing computer-readable data structures.
Thus, systems and methods for providing content aware document analysis and modification according to the invention have been provided. Persons skilled in the art will appreciate that the present invention can be practiced by other than the described embodiments, which are presented for purposes of illustration rather than of limitation, and the present invention is limited only by the claims which follow.
