Method and system for monitoring personal computer documents for sensitive data

• US 20050262557A1
• Filed: 05/20/2004
• Published: 11/24/2005
• Est. Priority Date: 05/20/2004
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Hamilton, Rick Allen, Seaman, James Wesley, Fellenstein, Craig William
• Granted Patent: US 7,523,498 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An apparatus, a method, and a computer program are provided for securing transmitted text. Once text has been produced by an application, the potential exists for an unintended third party to obtain sensitive data transmitted over computer networks. However, a parsing function can then operate either on an individual computer or on a network to scan text at an Open Systems Interconnection (OSI) Layer 1 to assist in the prevention of sensitive data transmission. By utilizing the parsing function, text can be scanned for potentially sensitive data by using a variety of techniques, such as a learning algorithm. The sensitive data can then be verified by a user, bypassed, or autostripped.

Claims

1. An apparatus for electronically securing text transmitted over a computer network, comprising:

a communications module, wherein the communications module is coupled to the computer network, and wherein the communications module is at least configured to transmit text;

at least one application, wherein the at least one application is at least configured to allow the user to generate text;

a parsing function, wherein the parsing function is at least configured to analyze transmitted text for sensitive data; and

a processor, wherein the processor is at least configured to operate the at least one application, and wherein the processor is at least configured to transmit text generated by the at least one application, and wherein the processor is at least configured to employ the parsing function on text generated by the at least one application.

2. The apparatus of claim 1, wherein the parsing function further comprises:

a scanner, wherein the scanner is at least configured to employ a word comparator to at least determine if the text generated by the at least one application contains sensitive data; and

a notifier, wherein the notifier notifies a user if text generated by the at least one application contains sensitive data before transmission.

3. The apparatus of claim 2, wherein the word comparator further comprises a semantical analyzer.

4. The apparatus of claim 2, wherein the word comparator further comprises a learning algorithm.

5. The apparatus of claim 2, wherein the word comparator further comprises a lexical table.

6. The apparatus of claim 2, wherein the notifier further comprises a bypass, wherein the bypass at least allows a user to transmit the text generated by the at least one application.

7. The apparatus of claim 2, wherein the notifier further comprises an autostripper, wherein the autostripper automatically deletes detected, sensitive data.

8. An apparatus for electronically securing text transmitted over a computer network, comprising:

a gateway, wherein the gateway is coupled to the computer network, and wherein the gateway is at least configured to transmit text;

a parsing function, wherein the parsing function is at least configured to analyze transmitted text for sensitive data; and

a processor, wherein the processor is at least configured to receive text, and wherein the processor is at least configured to transmit text generated by the at least one application, and wherein the processor is at least configured to employ the parsing function on text generated by the at least one application.

9. The apparatus of claim 8, wherein the parsing function further comprises:

a scanner, wherein the scanner is at least configured to employ a word comparator to at least determine if the text generated by the at least one application contains sensitive data; and

a notifier, wherein the notifier notifies a user if text generated by the at least one application contains sensitive data before transmission.

10. The apparatus of claim 9, wherein the word comparator further comprises a semantical analyzer.

11. The apparatus of claim 9, wherein the word comparator further comprises a learning algorithm.

12. The apparatus of claim 9, wherein the word comparator further comprises a lexical table.

13. The apparatus of claim 9, wherein the notifier further comprises a bypass, wherein the bypass at least allows a user to transmit the text generated by the at least one application.

14. The apparatus of claim 9, wherein the notifier further comprises an autostripper, wherein the autostripper automatically deletes detected, sensitive data.

15. A method for electronically securing text transmitted over a computer network, comprising:

scanning text generated by a parsing function at an Open Systems Interconnection (OSI) layer to provide scanned text, wherein the OSI layer is Layer 1 or Layer 3;

determining if the scanned text contains sensitive data; and

verifying the scanned text.

16. The method of claim 15, wherein the step of determining further comprises employing a semantical analyzer.

17. The method of claim 15, wherein the step of determining further comprises employing a learning algorithm.

18. The method of claim 15, wherein the step of determining further comprises employing a lexical table.

19. The method of claim 15, wherein the step of verifying further comprises:

notifying a user of presence of the sensitive data in the scanned text;

determining if the user bypasses, wherein the bypass at least allows a user to transmit the text generated by the at least one application.

20. The method of claim 19, wherein the step of notifying further comprises autostripping, wherein the step of autostripping automatically deletes detected, sensitive data in the scanned text.

21. A computer program product for electronically securing text transmitted over a computer network, the computer program product having a medium with a computer program embodied thereon, the computer program comprising:

computer code for scanning text generated by a parsing function at an OSI layer to produce scanned text, wherein the OSI layer is Layer 1 or Layer 3;

computer code for determining if the scanned text contains sensitive data; and

computer code for verifying the scanned text.

22. The computer program product of claim 21, wherein the computer code for determining further comprises computer code for employing a semantical analyzer.

23. The computer program product of claim 21, wherein the computer code for determining further comprises computer code for employing a learning algorithm.

24. The computer program product of claim 21, wherein the computer code for determining further comprises computer code for employing a lexical table.

25. The computer program product of claim 21, wherein the computer code for verifying further comprises:

computer code for notifying a user of presence of the sensitive data in the scanned text;

computer code for determining if the user bypasses, wherein the bypass at least allows a user to transmit the text generated by the at least one application.

26. The computer program product of claim 25, wherein the computer code for notifying further comprises computer code for autostripping, wherein the computer code for autostripping automatically deletes detected, sensitive data.