Workstation Information Protection via Binary Signature Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for securing digital content are inadequate due to high false-alarm rates, incompatibility with organizational workflows, and vulnerabilities from digital cameras, particularly those attached to cellular phones, which facilitate unauthorized dissemination of confidential information.

Innovation Solution

A method and system for monitoring user actions on a computer workstation, analyzing these actions against a predefined policy, and enforcing restrictions or modifications to prevent unauthorized access or leakage of digital information, utilizing a tamper-resistant software client that detects tampering attempts and manages usage rights based on classification and authentication levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If keyword filtering is used to monitor digital traffic, then confidential information can be identified, but false-alarm rate increases and many miss-detections occur

Engineering Contradiction:
Improvedetection accuracyVSAvoidfalse-alarm rate
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The system changes from keyword-based detection to binary signature-based detection, fundamentally altering the detection parameter. Binary signatures provide precise mathematical fingerprints of confidential documents that remain consistent regardless of text changes, eliminating false alarms caused by keyword filtering while maintaining high detection accuracy.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the mechanical keyword filtering approach with a mathematical binary signature analysis system. Instead of searching for text patterns, the system converts documents to binary representations and compares their mathematical signatures, providing more reliable and accurate detection without false positives.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If specialized digital rights management software is used to handle confidential files, then security is improved, but compatibility with regular organizational workflow decreases

Engineering Contradiction:
Improvesecurity levelVSAvoidworkflow compatibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system introduces a binary signature analysis mechanism as an intermediary between confidential documents and users. The binary signatures are embedded in documents and automatically verified by the software client without requiring users to change their workflow, thus maintaining ease of operation while ensuring security through continuous background verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The software client automatically performs binary signature verification and policy enforcement without requiring user intervention. The system self-monitors document access, copying, and distribution by continuously checking binary signatures, eliminating the need for cumbersome manual security procedures while maintaining high security standards.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If digital cameras are allowed for communication purposes, then communication capability is improved, but unauthorized dissemination of confidential information increases

Engineering Contradiction:
Improvecommunication capabilityVSAvoidunauthorized information leakage
Core Design Contradiction:
Adaptability or versatilityVSObject-generated harmful factors

Solution Approach 1:

The system implements continuous feedback monitoring of camera usage by detecting binary signatures of confidential documents in camera captures. The software client monitors camera activity and automatically identifies when confidential information is being photographed, providing real-time feedback that enables immediate policy enforcement to prevent unauthorized dissemination while allowing legitimate camera use.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS8141159B2Method and system for protecting confidential information
Publication Date: 2012.03.20 FORCEPOINT LLC
  • US8141159B2 patent drawing
  • US8141159B2 patent drawing
  • US8141159B2 patent drawing

AI summary

A method for computer workstation based information protection is presented, the method comprises: a) monitoring user's actions on the computer workstation, b) analysis of the actions in respect to a pre-defined policy to determine whether the actions prejudice information to which the policy applies, and c) executing the policy in accordance with the results of the analysis to prevent or modify or restrict or monitor or log the actions.