Mobile DLP via Cloud Fingerprint Offloading
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data leakage prevention (DLP) solutions are ineffective on mobile phones due to requirements that the device be part of the enterprise network, consume excessive bandwidth and storage, and are CPU-intensive for fingerprint matching.
Innovation Solution
A cloud-based DLP service that generates and matches document fingerprints on a mobile device without storing fingerprints locally, using a lower-density fingerprint generator to reduce bandwidth and CPU usage, and offloading fingerprint matching to the service cloud.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional DLP solutions use fingerprint matching on mobile devices, then data leakage prevention capability is improved, but bandwidth consumption and storage requirements increase excessively
Solution Approach 1:
The patent extracts the fingerprint matching function from the mobile device and relocates it to the cloud server. The mobile device only generates and transmits fingerprints, while the cloud server performs the computationally intensive matching operation. This extraction resolves the contradiction by eliminating the need for large storage and bandwidth resources on the mobile device while maintaining effective DLP capability.
Solution Approach 2:
The patent introduces a cloud server as an intermediary between the mobile device and the DLP processing. The cloud server acts as a mediator that receives fingerprints from the mobile device, performs matching against the enterprise fingerprint database, and returns results. This intermediary approach allows the mobile device to maintain minimal local resources while achieving comprehensive DLP functionality.
2Reliability
If conventional DLP solutions perform fingerprint matching on mobile devices, then data leakage prevention is improved, but CPU processing requirements become excessively high
Solution Approach 1:
The patent extracts the CPU-intensive fingerprint matching operation from the mobile device and relocates it to the cloud server. The mobile device's processor only performs lightweight fingerprint generation and data transmission, while the cloud server's processor handles the complex matching algorithms. This extraction resolves the contradiction by maintaining DLP capability while dramatically reducing mobile device CPU requirements.
3Speed
If mobile devices store fingerprint databases locally for DLP, then matching speed is improved, but storage space consumption increases excessively
Solution Approach 1:
The patent extracts the large fingerprint database from the mobile device and relocates it to the cloud server. The mobile device maintains only minimal local storage for fingerprint generation parameters, while the cloud server stores the comprehensive enterprise fingerprint database. This extraction resolves the contradiction by maintaining rapid matching capability (through cloud-based indexing) while eliminating excessive local storage requirements.
4Reliability
If conventional DLP solutions require mobile devices to be part of the enterprise network, then security control is improved, but device versatility and ease of operation deteriorate
Solution Approach 1:
The patent introduces a cloud server as an intermediary that enables DLP functionality without requiring direct enterprise network integration. The cloud server acts as a mediator that receives fingerprints from mobile devices via standard communication protocols, performs matching, and returns results. This intermediary approach maintains security control while dramatically improving device versatility and ease of operation, as mobile devices can function independently of the enterprise network.
Data Source
AI summary
One embodiment relates to a method for providing a service which matches document fingerprints against a database of document fingerprints. Target text data on a mobile phone device is obtained, and target document fingerprints are generated for the target text data using a fingerprint generator on the mobile phone device. The target document fingerprints are transmitted to a service cloud. A feedback message is received from the service cloud. The feedback message depends on results from matching the target document fingerprints against the database of document fingerprints. Other embodiments, aspects and features are also disclosed.