Document Sanitiser XML Metadata Redaction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Documents exported from networks often contain hidden sensitive information such as track changes, comments, and author details, which can lead to accidental data breaches due to user oversight, especially in long documents.
Innovation Solution
A method and tool for sanitizing documents by converting them to XML format, identifying and redacting or deleting embedded objects like tracked changes, comments, and author details, and then converting back to the original format, with user-selectable or preconfigured options for metadata management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If documents are exported from a network, then document sharing and collaboration are enabled, but hidden sensitive information such as track changes, comments, and author details may be inadvertently published
Solution Approach 1:
The system performs preliminary sanitization of documents by automatically detecting and removing hidden metadata (track changes, comments, author details) before the document is exported or shared through the network. This preventive action ensures that sensitive information is eliminated in advance, preventing potential data breaches while maintaining document sharing capabilities
Solution Approach 2:
The sanitization tool acts as an intermediary between document creation and document export/share processes. It intercepts documents, processes them to remove hidden information, and then allows the sanitized version to be shared, thus mediating between collaboration needs and security requirements
2Reliability
If users manually check documents for hidden information, then awareness of potential security issues increases, but time consumption and human error increase
Solution Approach 1:
The system enables self-service sanitization where the document processing system automatically detects, identifies, and removes hidden metadata without requiring user intervention. The tool serves itself by programmatically scanning for and eliminating sensitive information types, freeing users from manual checking while maintaining high security standards
Solution Approach 2:
The system replaces the manual mechanical process of user review with an automated computational process. Algorithms systematically scan document structures, identify hidden metadata elements, and remove them programmatically, substituting human time and effort with efficient automated processing that eliminates both time loss and human error
3Reliability
If all document objects are removed during sanitization, then security is maximized, but useful document information may be lost
Solution Approach 1:
The system applies different treatment to different parts of the document based on their nature and sensitivity. It selectively removes only harmful metadata elements (track changes, comments, author details) while preserving the main document content and necessary structural information. This localized approach ensures security enhancement without unnecessary loss of useful information
Solution Approach 2:
The system changes the state of specific document parameters selectively - it modifies or removes only those parameters related to hidden metadata while leaving other document parameters intact. By precisely controlling which parameters are altered and which are preserved, the system achieves security enhancement without compromising document utility
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of sanitising a document is provided. The method comprises: receiving at least one document having embedded document objects; identifying the document file format of the at least one document; using the document file format to convert the document to an XML format; in the XML document, finding reference to the document objects; redacting, deleting or ignoring the document objects; and converting the modified XML document into the original document file format to create a reformed document. A document sanitiser, a computer program and a non-transitory machinereadable storage medium are also provided.