Document Dissemination Tracking via Local Agent Logs

Solution Overview

Problem

Companies face challenges in effectively managing access to and tracking the dissemination of sensitive documents within their systems, as existing methods fail to provide comprehensive control and visibility into document interactions and usage.

Innovation Solution

A system comprising clients, an enforcement server, and an identity service, which includes local agents, a rules management module, key management, and a global usage repository, to monitor and control document operations, enforce access rules, and track document dissemination paths.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If companies create large numbers of documents with sensitive information, then business operations and productivity are improved, but security risks and difficulty in tracking document dissemination increase

Engineering Contradiction:

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary action by establishing encryption keys and access rules before document creation and distribution. Each document is pre-encrypted with unique keys, and access control rules are pre-configured, enabling automatic security enforcement without requiring manual security checks during document handling operations.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary system consisting of encryption keys and access control mechanisms that mediate between document creators and users. This intermediary layer automatically manages authentication, authorization, and document distribution, reducing the security burden on individual users while maintaining productivity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If companies implement strict access control measures, then document security is improved, but ease of operation and user convenience deteriorate

Engineering Contradiction:

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system implements self-service by automatically enforcing access control rules without requiring manual intervention from administrators or users. The encryption and access control mechanisms operate autonomously, automatically authenticating users, determining permissions, and controlling document access based on pre-configured rules, thereby maintaining security while simplifying user interaction.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent applies parameter changes by dynamically adjusting access control parameters based on user identities, document properties, and contextual information. The system changes security parameters such as encryption keys, access permissions, and distribution lists according to the specific requirements of each document and user combination, maintaining both security and ease of operation.

Inventive Principle:

Principle #35Parameter changes

3Loss of information

If companies track document dissemination paths, then security monitoring and compliance are improved, but device complexity and system overhead increase

Engineering Contradiction:

Core Design Contradiction:

Loss of informationVSDevice complexity

Solution Approach 1:

The system merges document encryption, access control, and dissemination tracking functions into a unified integrated system. The same encryption infrastructure and access control mechanisms that protect documents also automatically generate and maintain dissemination paths, eliminating the need for separate tracking systems and reducing overall complexity.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent implements feedback mechanisms where the system automatically logs and monitors document access, distribution, and usage patterns. This feedback information is used to update dissemination paths and enhance future access control decisions, providing continuous security monitoring while maintaining efficient system operation through automated processes.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS10691821B2Method and system for managing and tracking content dissemination in an enterprise

Publication Date: 2020.06.23

AI summary

A method and system for managing document dissemination are disclosed, including obtaining a plurality of operation logs from a plurality of local agents, where each of the plurality of local agents is executing on one of a plurality of clients. The method further includes identifying a document stored on a client of the plurality of clients, determining, using at least one of the plurality of operation logs, a dissemination path of the document between the plurality of clients, and performing an action based on the dissemination path of the document.