Image Data Loss Prevention via OCR Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data loss prevention systems are ineffective in identifying and preventing data loss from images, particularly screenshots and other graphical data, which can contain confidential information, and are easily circumvented by various techniques.

Innovation Solution

A system and method that identifies images for predetermined data, including confidential information, and performs actions to prevent data loss by analyzing and fingerprinting image data, comparing it against known confidential data, and taking preventive measures such as blocking communication or notification, regardless of the image creation method.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional data loss prevention systems only identify and analyze text-based data, then the systems can operate with simpler technology, but they fail to detect confidential data hidden in images such as screenshots

Engineering Contradiction:
Improvedata loss prevention effectivenessVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary component (image analysis module with OCR capabilities) that bridges the gap between text-based DLP systems and image-based confidential data detection. This intermediary extracts and analyzes text from images, enabling the system to detect confidential data in screenshots without requiring complete system redesign.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent enhances the DLP system to perform multiple functions: traditional text-based data analysis and new image-based confidential data detection. By making the system universal and multi-functional, it can handle both text files and images containing confidential information through integrated analysis capabilities.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If data loss prevention systems disable predefined user input commands to prevent image creation, then confidential data in images may be protected, but users can easily circumvent these measures using alternative techniques

Engineering Contradiction:
Improvedata loss prevention effectivenessVSAvoiduser operation flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements a feedback mechanism where the system monitors and analyzes images created through various methods, providing continuous detection and prevention. Rather than relying solely on blocking commands, the system uses feedback from image analysis to identify and prevent data loss, maintaining both security and operational flexibility.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent performs preliminary analysis of images before they are transmitted or stored, identifying confidential data in advance. This preliminary action allows the system to prevent data loss proactively rather than reactively, maintaining security while allowing legitimate image creation and sharing.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the system analyzes all images for confidential data, then data loss prevention is enhanced, but the processing time and computational resources increase

Engineering Contradiction:
Improvedata loss prevention effectivenessVSAvoidimage processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies partial action by analyzing only specific regions or portions of images that are likely to contain confidential data, rather than processing every pixel uniformly. This selective approach maintains high detection effectiveness while reducing overall processing time and computational overhead.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent implements continuous monitoring and analysis of image data streams, processing images as they are generated or transmitted rather than batch processing. This continuous action ensures timely detection of confidential data while optimizing resource utilization through efficient processing pipelines.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS10489606B2System, method, and computer program product for preventing image-related data loss
Publication Date: 2019.11.26 MCAFEE LLC
  • US10489606B2 patent drawing
  • US10489606B2 patent drawing
  • US10489606B2 patent drawing

AI summary

A system, method, and computer program product are provided for preventing data loss associated with an image. In use, an image is identified, and it is determined whether the image includes predetermined data. In addition, an action is performed based on the determination, for preventing data loss.