Document de-registration

• US 20050132198A1
• Filed: 05/25/2004
• Published: 06/16/2005
• Est. Priority Date: 12/10/2003
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Ahuja, Ratinder Paul Singh, Lowe, Rick, Iglesia, Erik de la, Howard, Matthew
• Granted Patent: US 8,548,170 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A document accessible over a network can be registered. A registered document, and the content contained therein, cannot be transmitted undetected over and off of the network. In one embodiment, the invention includes maintaining a plurality of stored signatures in a signature database, each signature being associated with one of a plurality of registered documents. In one embodiment, the invention further includes maintaining the signature database by de-registering documents by removing the signatures associated with de-registered documents. In one embodiment, the invention further includes maintaining the database by removing redundant and high detection rate signatures. In one embodiment, the invention also includes maintaining the signature database by removing signatures based on the source text used to generate the signature.

Claims

1. A method comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

receiving a document to be de-registered;

calculating a set of signatures associated with the received document; and

removing from the plurality of stored signatures those signatures that match any signature from the set of calculated signatures associated with the received document.

2. The method of claim 1, wherein the document to be de-registered has exceeded a temporal registration threshold for the document.

3. The method of claim 1, wherein maintaining a plurality of stored signatures comprises maintaining a signature database.

4. A method comprising:

maintaining a signature database of signatures, each signature being associated with one of a plurality of registered documents;

receiving a request to de-register an identified document from the plurality of registered documents; and

de-registering the identified document by removing all signatures associated with the identified document from the signature database.

5. The method of claim 4, wherein the request identifies the identified document by a unique name.

6. The method of claim 4, further comprising determining that the identified document exceeds a temporal registration threshold.

7. A method comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

identifying a set of redundant signatures in the plurality of stored signatures; and

removing the set of redundant signatures from the plurality of stored signatures.

8. The method of claim 7, wherein maintaining a plurality of stored signatures comprises maintaining a signature database of stored signatures.

9. The method of claim 7, wherein identifying the set of redundant signatures comprises identifying a plurality of identical signatures.

10. The method of claim 7, wherein identifying the set of redundant signatures comprises identifying a threshold number of identical signatures associated with a threshold number of different registered documents.

11. A method comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

identifying a set of high detection rate signatures in the plurality of stored signatures; and

removing the set of high detection rate signatures from the plurality of stored signatures.

12. The method of claim 11, wherein maintaining a plurality of stored signatures comprises maintaining a signature database of stored signatures.

13. The method of claim 11, wherein identifying the set of high detection rate signatures comprises identifying a set of signatures that have a detection rate above a threshold level.

14. The method of claim 13, wherein the detection rate of a signature comprises a percentage of captured objects having one signature matching the signature, and the threshold level comprises a percentage threshold.

15. The method of claim 13, wherein the detection rate of a signature comprises a number of times a signature is generated from captured objects during a time window.

16. The method of claim 15, wherein the rate of the signature comprises a rate of signature appearance per day.

17. A method comprising:

having a database of stored signatures, each signature being associated with one of a plurality of registered documents; and

maintaining the database by removing a set of signatures from the database based on source text used to generate signatures in the set.

18. The method of claim 17, wherein the set of signatures comprises signatures generated from unparsable source text.

19. The method of claim 17, wherein the set of signatures comprises signatures generated from source text appearing on a signature blacklist.

20. The method of claim 17, wherein the set of signatures comprises signatures generated from irrelevant source text.

21. A machine-readable medium storing data representing instructions that, when executed by a processor, cause the processor to perform operations comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

receiving a document to be de-registered;

calculating a set of signatures associated with the received document; and

removing from the plurality of stored signatures those signatures that match any signature from the set of calculated signatures associated with the received document.

22. The machine-readable medium of claim 21, wherein the document to be de-registered has exceeded a temporal registration threshold for the document.

23. The machine-readable medium of claim 21, wherein maintaining a plurality of stored signatures comprises maintaining a signature database.

24. A machine-readable medium storing data representing instructions that, when executed by a processor, cause the processor to perform operations comprising:

maintaining a signature database of signatures, each signature being associated with one of a plurality of registered documents;

receiving a request to de-register an identified document from the plurality of registered documents; and

de-registering the identified document by removing all signatures associated with the identified document from the signature database.

25. The machine-readable medium of claim 24, wherein the request identifies the identified document by a unique name.

26. The machine-readable medium of claim 24, wherein the instructions further cause the processor to determine that the identified document exceeds a temporal registration threshold.

27. A machine-readable medium storing data representing instructions that, when executed by a processor, cause the processor to perform operations comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

identifying a set of redundant signatures in the plurality of stored signatures; and

removing the set of redundant signatures from the plurality of stored signatures.

28. The machine-readable medium of claim 27, wherein maintaining a plurality of stored signatures comprises maintaining a signature database of stored signatures.

29. The machine-readable medium of claim 27, wherein identifying the set of redundant signatures comprises identifying a plurality of identical signatures.

30. The machine-readable medium of claim 27, wherein identifying the set of redundant signatures comprises identifying a threshold number of identical signatures associated with a threshold number of different registered documents.

31. A machine-readable medium storing data representing instructions that, when executed by a processor, cause the processor to perform operations comprising:

maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents;

identifying a set of high detection rate signatures in the plurality of stored signatures; and

removing the set of high detection rate signatures from the plurality of stored signatures.

32. The machine-readable medium of claim 31, wherein maintaining a plurality of stored signatures comprises maintaining a signature database of stored signatures.

33. The machine-readable medium of claim 31, wherein identifying the set of high detection rate signatures comprises identifying a set of signatures that have a detection rate above a threshold level.

34. The machine-readable medium of claim 33, wherein the detection rate of a signature comprises a percentage of captured objects having one signature matching the signature, and the threshold level comprises a percentage threshold.

35. The machine-readable medium of claim 33, wherein the detection rate of a signature comprises a number of times a signature is generated from captured objects during a time window.

36. The machine-readable medium of claim 35, wherein the rate of the signature comprises a rate of signature appearance per day.

37. A machine-readable medium storing data representing instructions that, when executed by a processor, cause the processor to perform operations comprising:

having a database of stored signatures, each signature being associated with one of a plurality of registered documents; and

maintaining the database by removing a set of signatures from the database based on source text used to generate signatures in the set.

38. The machine-readable medium of claim 37, wherein the set of signatures comprises signatures generated from unparsable source text.

39. The machine-readable medium of claim 37, wherein the set of signatures comprises signatures generated from source text appearing on a signature blacklist.

40. The machine-readable medium of claim 37, wherein the set of signatures comprises signatures generated from irrelevant source text.

41. An apparatus comprising:

a network interface module to connect the apparatus to a network;

a signature database to store a plurality of signatures, each signature being associated with one of a plurality of registered documents;

a user interface to receive a document to be de-registered; and

a registration module comprising a registration engine to generate a set of signatures associated with the received document, and a search engine to identify signatures in the signature database matching any of the signatures in the set of signatures associated with the received document.

42. The apparatus of claim 41, wherein the registration module is configured to remove the signatures matching any of the signatures in the set of signatures associated with the received document from the signature database.

43. An apparatus comprising:

a signature database to store a plurality of stored signatures, each signature being associated with one of a plurality of registered documents; and

a registration module to remove a set of redundant signatures from the signature database.

44. The apparatus of claim 43, wherein the set of redundant signatures comprises a plurality of identical signatures.

45. The apparatus claim 43, wherein the set of redundant signatures comprises a threshold number of identical signatures associated with a threshold number of different registered documents.

46. An apparatus comprising:

a signature database to store a plurality of stored signatures, each signature being associated with one of a plurality of registered documents; and

a registration module to maintain the signature database by removing a set of high detection rate signatures from the signature database.

47. The apparatus claim 46, wherein the set of high detection rate signatures comprises identifying a set of signatures that have a detection rate above a threshold level.

48. The apparatus of claim 47, wherein the detection rate of a signature comprises a percentage of captured objects having one signature matching the signature, and the threshold level comprises a percentage threshold.

49. The apparatus of claim 47, wherein the detection rate of a signature comprises a number of times a signature is generated from captured objects during a time window.

50. The apparatus of claim 49, wherein the rate of the signature comprises a rate of signature appearance per day.

51. An apparatus comprising:

a signature database to store a plurality of signatures, each signature being associated with one of a plurality of registered documents; and

a registration module to maintain the signature database by removing a set of signatures from the database based on source text used to generate signatures in the set.

52. The apparatus of claim 51, wherein the set of signatures comprises signatures generated from unparsable source text.

53. The apparatus of claim 51, wherein the set of signatures comprises signatures generated from source text appearing on a signature blacklist.

54. The apparatus of claim 51, wherein the set of signatures comprises signatures generated from irrelevant source text.