Automated Document Leak Detection Using Encoded Markers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for detecting leaked documents on a computer network are manual, time-consuming, and often incomplete, leading to undetected leaks due to false positives, irrelevant results, and limitations in search engine outputs.
Innovation Solution
A system and method that uses an encoder module to mark documents with encoded markers representing their properties, and an auditing module to search for these markers across a network, providing automated detection and rule-based actions based on document properties, such as sending notifications or restricting data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Area of stationary object
If commercially available search engines are used to search for organizational documents, then search coverage is improved, but the number of false positives increases
Solution Approach 1:
The patent segments the search process into multiple stages: initial broad search using search engines, followed by filtering through encoded marker detection, and final verification through property correlation. This segmentation allows comprehensive search coverage while systematically eliminating false positives at each stage.
Solution Approach 2:
The patent introduces encoded markers as intermediaries between documents and search queries. These markers serve as unique identifiers that bridge the gap between broad search engine results and precise document identification, enabling accurate detection without relying on organization names or document content alone.
2Measurement precision
If manual analysis of search results is performed, then detection accuracy is improved, but time consumption increases
Solution Approach 1:
The patent applies preliminary actions by encoding markers into documents before they are distributed. This pre-prepared infrastructure enables automated detection systems to quickly identify and verify leaked documents without requiring manual analysis, thus maintaining high accuracy while dramatically reducing time consumption.
Solution Approach 2:
The encoded markers enable documents to self-identify themselves during search operations. Instead of requiring manual analysis to determine if a document is leaked, the system automatically detects encoded markers and correlates them with document properties, allowing the detection process to serve itself without human intervention.
3Productivity
If search engines return limited results, then processing speed is improved, but detection completeness decreases
Solution Approach 1:
The patent adds another dimension to the search process by incorporating encoded marker detection alongside traditional search engine results. This multi-dimensional approach allows the system to process limited search results efficiently while simultaneously checking for encoded markers that may indicate leaked documents, thereby maintaining both speed and completeness.
4Reliability
If automated detection with encoded markers is implemented, then detection completeness is improved, but document complexity increases
Solution Approach 1:
The patent implements universal encoded markers that can be applied to various types of documents and detected across different platforms and search engines. This multi-functional approach allows a single encoding system to work across diverse document formats and distribution channels, improving detection completeness without proportionally increasing system complexity.
Data Source
AI summary
A system and a method of obtaining a location of a document on a computer network based on a document property. The method may include: receiving at least one basic marker and an encoding function associated with the document property; generating a search term according to the encoding function, based on the at least one basic marker; providing the search term to at least one search engine and obtaining therefrom one or more search results corresponding, where each search result may include one or more references to locations of documents on the computer network; discovering at least one document having the document property from the one or more search results and obtaining a discovered location of the document on the computer network; and performing at least one rule-based action, according to at least one document property of the discovered document.