Method and a system for outbound content security in computer networks

• US 20070198420A1
• Filed: 02/03/2006
• Published: 08/23/2007
• Est. Priority Date: 02/03/2006
• Status: Abandoned Application

• Current Assignee: GTB Technologies Incorporated
• Original Assignee: GTB Technologies Incorporated
• Inventors: Goldstein, Leonid
• Application Number:
  US11/347,463
• Publication Number:
  US 20070198420A1
• Time in Patent Office: Days
• US Class Current: 705/52
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

The present invention relates to a method and a system for protecting data in a computer network. A device is placed on a network edge in such a way, that all outgoing data has to pass through it. Separately, a set of data that is not allowed to leave the network is defined and stored in a secure form (typically, one way hash). The device determines the network protocol, file types, transforms and normalizes the passing data, and seeks the presence of the data from the defined set. If a threshold amount of the protected data is present, the device interrupts the connection or takes another appropriate action.

Claims

1. A system for controlling data transfers from a protected internal network to an unprotected outside network comprising:

an inspection device coupled to said network to monitor all transmissions out of said internal network, said inspection device comprising;

means for identifying file boundaries in the transmitted data,

means for determining format of said files,

means for extracting data of interest from said files,

means for comparing said data of interest with pre-defined data,

means for blocking data transmission, if a threshold amount of said data of interest matches pre-defined data