Document Segmentation and Pointer Routing in Mixed Security Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face significant ICT costs and increased security risks due to over-classification of documents, leading to data duplication and inefficient separation of high and low security content in mixed security environments, often resulting from manual review processes and subjective classification.
Innovation Solution
A method and system utilizing machine learning models to segment and classify documents, routing high security content to a secure environment and low security content to a less secure environment, with pointers stored in the high security environment referencing low security components, allowing dynamic access and reducing unnecessary high security classification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual review and subjective classification are used to classify documents, then security classification can be performed, but ICT costs increase due to over-classification and data duplication
Solution Approach 1:
The patent segments a document into multiple subcomponents (e.g., paragraphs, sections, sentences) and classifies each subcomponent individually using machine learning models. This allows the system to identify and separate high-security content from low-security content within the same document, preventing over-classification and reducing the need to store entire documents in high-security environments, thereby reducing ICT costs while maintaining security classification accuracy
Solution Approach 2:
The patent creates pointers that reference subcomponents stored in different security environments. Instead of duplicating entire documents across multiple security levels, the system uses lightweight pointer structures that reference the actual content, eliminating data duplication while maintaining efficient access to classified information
2Reliability
If high security environment is used for all document content, then security is maintained, but costs increase due to unnecessary high security classification
Solution Approach 1:
The patent applies different security classification levels to different parts (subcomponents) of a document based on their actual security requirements. High-security classification is applied only to subcomponents that contain sensitive information, while low-security subcomponents are stored in lower-security environments, optimizing resource allocation and reducing costs associated with maintaining high-security infrastructure
3Reliability
If data duplication is used to maintain separation between security environments, then security separation is achieved, but storage efficiency decreases
Solution Approach 1:
The patent uses pointers instead of duplicating actual data. When a document subcomponent needs to be accessed from a different security environment, a pointer reference is used to locate and retrieve the original subcomponent from its storage location, eliminating the need to store multiple copies of the same data while maintaining security separation
Solution Approach 2:
The patent introduces pointers as intermediary structures that facilitate access between different security environments without requiring direct data duplication. These pointers act as mediators that enable efficient retrieval of subcomponents from appropriate security environments while maintaining the integrity and separation of security boundaries
Data Source
AI summary
Segmentation and classification of documents in a mixed security environment includes receiving a document including a plurality of subcomponents. A security classification level of each of the plurality of subcomponents is determined using a first classification model. The security classification level of each subcomponent includes one of a first classification level and a second classification level. A first subcomponent having the first classification level is routed to a first environment having a first security level. A second subcomponent having the second classification level is routed to a second environment having a second security level. A pointer for the second subcomponent is determined in which the pointer references a portion of the first subcomponent.