Provide insensitive summary for an encrypted document

• US 10,057,237 B2
• Filed: 02/17/2015
• Issued: 08/21/2018
• Est. Priority Date: 02/17/2015
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Arnady, Shashanka, Doddamani, Chetan, Krishnappa, PrasannaBabu
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US14/624,293
• Publication Number:
  US 20160241546A1
• Time in Patent Office: 1,281 Days
• Field of Search: 713172
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/06 the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

An insensitive summary of an encrypted electronic document, such as email, is provided. The insensitive summary provides a summary of the encrypted electronic document without providing sensitive information, such as passwords. The electronic document may be an email, text (such as in a word processing file), spreadsheet and/or presentation. Natural language processing methods, such as parts of speech (POS) tagging, word clustering, regular expression evaluating, sensitive key word searching and/or other methods, may be used to identify and mask sensitive words before summarization and encryption of the electronic document. A user'"'"'s efficiency in operating a computing device may be increased having an associated insensitive summary without compromising security of the encrypted electronic document. A user may direct a computing device to perform a search (or similarly categorize or use rules) to identify the encrypted electronic document by searching for contents of the associated insensitive summary.

Claims

1. A method comprising:

classifying, by a computing device, content information of an electronic document with at least a linguistic category;

identifying, by the computing device, sensitive information in the content information of the electronic document based on the linguistic category, the content information further including insensitive information;

masking, by the computing device, sensitive information in the electronic document based on the linguistic category to provide an electronic document having sensitive information that is masked by replacing each character of a word that is tagged as sensitive with a masking character;

generating, by the computing device, an insensitive textual summary of the content information in the electronic document, the textual summary comprising only insensitive information from the electronic document having the sensitive information that is masked;

encrypting, by the computing device, the electronic document to provide an encrypted electronic document; and

outputting, by the computing device, both the insensitive textual summary of the electronic document and the encrypted electronic document.

2. The method of claim 1, wherein the categorizing includes:

tokenizing information of the electronic document to obtain a list of words in a same order as presented in the electronic document; and

tagging each word in the list of words with a part of speech category as the linguistic category.

3. The method of claim 2, wherein the identifying includes:

determining when a sentence has sensitive information in the electronic document;

determining sensitive information in the sentence in the electronic document; and

tagging each word in the list of words as sensitive based on determining sensitive information.

4. The method of claim 3, wherein the masking includes:

searching the list of words to obtain a word that is tagged as sensitive.

5. The method of claim 4, wherein the summarizing includes:

summarizing the electronic document without using the sensitive information that is masked, numbers, most common words in the electronic document and words in the list of words having the linguistic category.

6. The method of claim 3, wherein determining the sentence having sensitive information comprises:

searching for a sensitive key word in the list of words;

identifying the sentence as sensitive when a word in the sentence matches the sensitive key word;

searching the list of words for a pattern; and

identifying the sentence as sensitive when at least a word in the sentence matches the pattern.

7. The method of claim 6, wherein the determining sensitive information comprises:

generating a plurality of trigrams for the sentence that has sensitive information;

tagging the plurality of trigrams with parts of speech categories; and

comparing a first part of speech category of a generated trigram in the plurality of trigrams with a second part of speech category of a word that has been tagged with the second part of speech category in the sentence that has sensitive information to determine whether to tag the word as sensitive.

8. The method of claim 7, further comprising:

tagging words as sensitive in the sentence that includes numbers, special characters and non-dictionary words;

tagging words as sensitive in the sentence that match a pattern;

tagging words as sensitive in the sentence that have a particular part of speech category;

tagging words as sensitive in the sentence that match a blacklisted word;

tagging words as sensitive in the sentence that are similar to a word identified as sensitive; and

tagging words as sensitive in the sentence that are similar to a sensitive key word.

9. The method of claim 1, wherein the electronic document is selected from the group consisting of an email, word processing file, spreadsheet and presentation, wherein the information includes a lexical item, and wherein the linguistic category is a part of speech category.

10. An apparatus comprising:

an integrated circuit processor; and

a non-transitory computer readable storage medium to store computer program code, the computer program code configures the integrated circuit processor to;

convert text in the body of an email into a plurality of tokens that represents a plurality of words;

tag a token in the plurality of tokens so that the token represents a part of speech category;

tag the token in the plurality of tokens so the token indicates a word represented by the token is sensitive;

mask the word in the text of the body of the email in response to the token that indicates the word represented by the token is sensitive by replacing each character of a word that is tagged as sensitive with a masking character;

generate an insensitive summary of the text of the body of the email, the insensitive summary including insensitive information from the text in the body that has had the word masked;

encrypt the text of the email into an encrypted email; and

output both the insensitive summary and encrypted email.

11. The apparatus of claim 10, wherein the token includes information stored in the computer readable storage medium, wherein the computer readable storage medium includes an integrated circuit memory, wherein the information includes a first portion to store information that represents the word, a second portion to store information that indicates a part of speech category of the word, and a third portion to store information that indicates whether the word is sensitive.

12. The apparatus of claim 11, wherein tag the token in the plurality of tokens so that the token represents the part of speech category includes the integrated circuit processor accessing the second portion to store information that indicates the part of speech category of the word.

13. The apparatus of claim 12, wherein tag the token in the plurality of tokens so the token indicates the word represented by the token is sensitive includes the integrated circuit processor accessing the third portion to store information that indicates the word represented by the token is sensitive.

14. The apparatus of claim 10, wherein the integrated circuit processor and computer readable storage medium are embodied in an encryption server coupled, by way of a network, to an email server that provides the email to the encryption server.

15. A non-transitory computer program product, comprising:

a computer readable storage medium having computer program code embodied therewith, the computer program code comprising;

computer program code configured to identify sensitive information in an email;

computer program code configured to mask the sensitive information in the email by replacing each character of a word that is tagged as sensitive with a masking character, the email including insensitive information;

computer program code configured to generate an insensitive summary of the email including only insensitive information from the email that has had sensitive information masked;

computer program code configured to encrypt the email into an encrypted email; and

computer program code configured to output both the insensitive summary of the email and the encrypted email.

16. The computer program product of claim 15, wherein the computer program code comprises:

computer program code configured to tokenize text in the email into a plurality of tokens, each token represents at least a lexical item in the text,

wherein the computer program code to tokenize includes computer program code to tag each token in the plurality of tokens with a part of speech category.

17. The computer program product of claim 16, wherein the computer program code configured to identify sensitive information in the email includes computer program code to search for sensitive key words.

18. The computer program product of claim 17, wherein the computer program code configured to identify sensitive information in the email includes computer program code to search for a regular expression pattern.

19. The computer program product of claim 18, wherein the computer program code configured to identify sensitive information in the email includes computer program code to search for words that are similar to sensitive key words and words that are identified as sensitive.