Method and system for managing confidential information

Abstract

A method and a system for information management and control is presented, based on modular and abstract description of the information. Identifiers are used to identify features of interest in the information and information use policies are assigned directly or indirectly on the basis of the identifiers, allowing for flexible and efficient policy management and enforcement, in that a policy can be defined with a direct relationship to the actual information content of digital data items. The information content can be of various kinds: e.g., textual documents, numerical spreadsheets, audio and video files, pictures and images, drawings etc. The system can provide protection against information policy breaches such as information misuse, unauthorized distribution and leakage, and for information tracking.

Description

RELATED APPLICATIONS[0001]This application is a divisional of U.S. patent application Ser. No. 10 / 533,452 filed on May 2, 2005, which is a National Phase of PCT Patent Application No. PCT / IL03 / 00889 filed on Oct. 28, 2003, which claims the benefit of priority under 35 USC §119(e) of U.S. Provisional Patent Application No. 60 / 422,128 filed on Oct. 30, 2002. The contents of the above applications are all incorporated by reference as if fully set forth herein in their entirety.FIELD OF THE INVENTION[0002]The present invention relates generally to the field of managing and securing digital information. More specifically, the present invention deals with methods for classification, management and tracking digital information over the course of its lifecycle.BACKGROUND OF THE INVENTION[0003]The information and knowledge assets created and accumulated by organizations and businesses are of extreme value in the modern economical environment. As such, managing and keeping the information and...

AI Technical Summary

Benefits of technology

This patent describes a way to manage and control information using a flexible and efficient system. This system can handle different types of information like text, numbers, videos, and pictures. It can also protect against information policy breaches like misuse, unauthorized distribution, and leakage. Overall, this system allows for more efficient and effective management of information.

Problems solved by technology

However, ease of the promptness, comfort and information availability offered by these digital networks is accompanied by a constant hazard of information leak due to innocent mistakes, carelessness and malicious attempts to deliver non-public or otherwise confidential information to unauthorized entities.

Information losses can cause anything from minor embarrassment to severe financial damage by enabling fraud and by causing loss of business secrets and consequent competitive advantage.

In addition, such loss may expose the organization to legal sanctions and liabilities (e.g., under the US Gramm-Leach-Bliley act, the US Sarbanes-Oxley act, the US HIPAA privacy and security regulations, and directive 95 / 46 / EC of the European Parliament).

This state of affairs further complicates the information-management task.

Some of these methods utilize file meta-data, which may not be robust against changes in the file format.

DRM applications have the disadvantage that they hamper normal workflow and require large to massive investment levels.

Still other methods consider the binary signature of the file, but this has the disadvantage of depending critically on the precise representation of the data.

The above methods thus do not provide an adequate solution to the problem of modern businesses for the reasons outlined above.

The large number of formats in which the same information can be represented, the large number of applications that can use the same information in different ways, the large numbers of kinds of storage that the information can be kept in, and the large number of information distribution channels types, tend to render any given method ineffective over a business environment taken as a whole.

Binary digital signature is of zero-tolerance to any changes in the signed data, and keyword or key-phrase based tracking cover only a very limited aspect of the problem.

These methods lack the resolution needed for effective policy definition and enforcement, and tend to be over exclusive or over inclusive,

These methods are optimized for information retrieval and for providing answers to specific queries, and, in general, cannot provide either for effective tracking of specific information items or for effective policy enforcement.

Another issue that further complicates the monitoring process is the so-called template document.

Tracking different derivatives of a template document is not adequately addressed by current methods.

Images