Document Registration System for Network Data Leakage Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network devices cannot prevent the undetected transmission of sensitive data outside the network or analyze data leaving the network for policy violations and information leaks.
Innovation Solution
A system that registers documents by maintaining stored signatures, intercepts network objects, calculates and compares signatures, and detects registered content to prevent unauthorized transmission, using a capture system with modules for network interface, packet capture, object assembly, classification, and registration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional network devices (firewalls, intrusion detection systems) are used to protect the network, then unauthorized access can be prevented, but the system cannot detect or prevent unauthorized transmission of data once an intruder gains access
Solution Approach 1:
The system performs preliminary actions by registering documents and calculating their signatures before any transmission occurs. The signature database is populated in advance with cryptographic hashes of authorized documents, enabling the system to detect unauthorized transmissions when they occur.
Solution Approach 2:
The system implements feedback by continuously monitoring network traffic, calculating signatures of transmitted objects, and comparing them against the stored signature database. When a mismatch is detected, the system generates alerts and can block the transmission, creating a closed-loop security system.
2Productivity
If no document registration system is implemented, then the network allows free transmission of data, but the system cannot analyze data leaving the network for policy violations or information leaks
Solution Approach 1:
The system introduces an intermediary layer between the network and the outside world in the form of a document registration and analysis system. This intermediary captures all outgoing data, calculates its signature, compares it with registered documents, and provides analysis for policy violations before data leaves the network.
3Reliability
If a comprehensive system to capture, store, and analyze all network data is implemented, then unauthorized transmission and policy violations can be detected, but the system complexity increases
Solution Approach 1:
The system extracts only the essential information needed for security monitoring - the cryptographic signature of each transmitted object - rather than analyzing the entire data payload. This extraction approach significantly reduces processing requirements and system complexity while maintaining effective security monitoring.
Solution Approach 2:
Instead of analyzing the original complex data structures, the system creates and compares simplified cryptographic copies (signatures) of the data. This copying approach maintains the essential identity and integrity information while dramatically reducing the complexity of data handling and analysis.
Data Source
AI summary
A document accessible over a network can be registered. A registered document, and the content contained therein, cannot be transmitted undetected over and off of the network. In one embodiment, the invention includes maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents, intercepting an object being transmitted over a network, calculating a set of signatures associated with the intercepted object, and comparing the set of signatures with the plurality of stored signatures. In one embodiment, the invention can further include detecting registered content from the registered document being contained in the intercepted object, if the comparison results in a match of at least one of the signatures in the set of signatures with one or more of the plurality of stored signatures.