Signature match processing in a document registration system

• US 20070226504A1
• Filed: 03/24/2006
• Published: 09/27/2007
• Est. Priority Date: 03/24/2006
• Status: Abandoned Application

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Reconnex Corporation (McAfee, LLC)
• Inventors: Deninger, William, de la Iglesia, Erik, King, Samuel, Ahuja, Ratinder
• Application Number:
  US11/389,630
• Publication Number:
  US 20070226504A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A document accessible over a network can be registered. A registered document, and the content contained therein, is not transmitted undetected over and off of the network. Signatures for registered documents are compared to signatures of objects being transmitted on the network to determine if the objects contain registered content.

Claims

1. A method comprising:

receiving an object being transmitted over a network at a distributed match agent of a document registration system;

generating a set of signatures associated with the object;

comparing the set of signatures associated with the object to signatures associated with at least one document registered with the document registration system;

generating a list of signature matches as a result of the comparing;

determining ownership of the at least one document; and

applying a policy set by the owner of the at least one document.

2. The method of claim 1, wherein the generating a list of signature matches comprises:

creating a table, the table including at least one relationship between a signature and a registered document identifier.

3. The method of claim 1, wherein the applying a policy set by the owner of the at least one document comprises:

determining whether to notify the owner of the at least one document of the signature match.

4. The method of claim 3, further comprising:

sending a notification to the owner of the at least one document, the notification indicating the presence of registered content in the object.

5. The method of claim 3, wherein the determining whether to notify the owner comprises:

comparing the number of signatures from the set of signatures that were matched to a threshold number.

6. The method of claim 1, wherein the set of signatures generated for the object and the at least one register document are generated using the same signature generation procedure.

7. The method of claim 1, wherein the applying a policy set by the owner of the at least one document comprises:

logging the match between signatures.

8. The method of claim 1, wherein the generating the list is halted after a pre-determined number of signature matches.

9. The method of claim 1, wherein the determining ownership of the at least one document is performed by a registration agent.

10. The method of claim 1, further comprising:

forwarding the list of signature matches from the distributed match agent to a registration agent.

11. The method of claim 10, wherein the forwarding is performed if the number of matches in the list is above a threshold level.

12. A document registration system comprising:

a manager agent including;

a master signature database to maintain document identifiers associated with a user of the document registration system,

a permissions database to maintain at least one permission associate with a user of the document registration system, and

a policy enforcement module to apply the at least one permission from the permissions database; and

a match agent including;

at least one object capture module to capture an object being transmitted over a network,

a signature generator to generate a set of signatures associated with the object,

a search engine to compare the set of signatures associated with the object with signatures stored in a local signature database of the distributed match agent that are associated with registered documents and to generate a list of matches, and

a notification module to determine whether to send a notification to the manager agent of registration system based on the result of the comparison.

13. The document registration system of claim 12, wherein the local signature database is periodically updated by the manager agent.

14. The document registration system of claim 12, wherein the notification indicates content of a registered document in the object.

15. The document registration system of claim 12, wherein the set of signatures generated for the intercepted object and the registered documents are generated using the same signature generation procedure.

16. The document registration system of claim 12, wherein the list is created if the number of matches is above a threshold level.

17. The document registration system of claim 12, wherein the registration agent is notified if the list contains number of matches above a threshold level.

18. An article of manufacture including program code which, when executed by a machine, causes the machine to perform a method, the method comprising:

receiving an object being transmitted over a network at a distributed match agent of a document registration system;

generating a set of signatures associated with the object;

comparing the set of signatures associated with the object to signatures associated with at least one document registered with the document registration system;

generating a list of signature matches as a result of the comparing;

determining ownership of the at least one document; and

applying a policy set by the owner of the at least one document.

19. The article of manufacture of claim 18, wherein the generating a list of signature matches comprises:

creating a table, the table including at least one relationship between a signature and a registered document identifier.

20. The article of manufacture of claim 18, wherein the applying a policy set by the owner of the at least one document comprises:

determining whether to notify the owner of the at least one document of the signature match.

21. The article of manufacture of claim 20, further comprising:

sending a notification to the owner of the at least one document, the notification indicating the presence of registered content in the object.

22. The article of manufacture of claim 20, wherein the determining whether to notify the owner comprises:

comparing the number of signatures from the set of signatures that were matched to a threshold number.

23. The article of manufacture of claim 18, wherein the set of signatures generated for the object and the at least one register document are generated using the same signature generation procedure.

24. The article of manufacture of claim 18, wherein the applying a policy set by the owner of the at least one document comprises:

logging the match between signatures.

25. The article of manufacture of claim 18, wherein the generating the list is halted after a pre-determined number of signature matches.

26. The article of manufacture of claim 18, wherein the determining ownership of the at least one document is performed by a registration agent.

27. The article of manufacture of claim 18, further comprising:

forwarding the list of signature matches from the distributed match agent to a registration agent.

28. The article of manufacture of claim 27, wherein the forwarding is performed if the number of matches in the list is above a threshold level.