Sensitive Information Handling On a Collaboration System

• US 20090132651A1
• Filed: 11/15/2007
• Published: 05/21/2009
• Est. Priority Date: 11/15/2007
• Status: Active Grant

• Current Assignee: Target Brands Inc. (Target Corporation)
• Original Assignee: Target Brands Inc. (Target Corporation)
• Inventors: Roger, Edwin Sidney, Cundiff, Daniel Mark, Olson, Ari Edwin
• Granted Patent: US 8,151,200 B2
• Time in Patent Office: Days
• US Class Current: 709/204
• CPC Class Codes: H04L 12/1822 Conducting the conference, e.g. admission, detection, selection or grouping of participants, correlating users to one or more conference sessions, prioritising transmission
• CPC Class Codes: H04L 12/1831 Tracking arrangements for later retrieval, e.g. recording contents, participants activities or behavior, network status
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

On a document collaboration system, such as a wiki, the content of postings to the collaboration system is monitored for sensitive information. Under some embodiments, when instances of such sensitive information are detected, an e-mail is sent to the user that posted the collaboration page posting. In other embodiments, a message is then sent to a person associated with the entity that indicates that the information placed on the collaboration page is confidential information or is related to an asset of the entity. In further embodiments, individual people are assigned responsibility for monitoring the use of certain instances of sensitive information on the collaboration system. Each user is only notified when the instances they are responsible for appear on a collaboration page. In other embodiments, if a collaboration page includes an instance of sensitive information, access to the collaboration page is changed such that fewer people can access the collaboration page.

Claims

1. A method comprising:

receiving an instruction to save a collaboration page posting from a revision poster;

determining that the posting contains a word from a list of words;

sending an e-mail to the revision poster notifying them that the posting contains the word.

2. The method of claim 1 wherein sending an e-mail comprises notifying the revision poster that the word relates to sensitive information of an entity.

3. The method of claim 1 wherein sending an e-mail comprises suggesting to the revision poster that the posting should be removed from the collaboration page.

4. The method of claim 1 further comprising:

identifying a specialist who is to be notified whenever the word appears on a collaboration page;

identifying an administrator who is to be notified if any word from the list of words appears on a collaboration page, wherein the administrator is notified for more words from the list than the specialist; and

sending messages to the specialist and the administrator to notify the specialist and the administrator that the word appeared in the posting.

5. The method of claim 1 further comprising setting an access parameter to reduce access to the collaboration page based on the word appearing in the posting.

6. The method of claim 1 wherein words may be added to the list of words by any user that can modify the collaboration page.

7. A computer-readable medium having encoded thereon computer-executable instructions that when executed by a computer perform steps comprising:

searching a wiki page for information that an entity wishes to keep confidential;

sending a message to a person associated with the entity that the information placed on the wiki page is confidential information.

8. The computer-readable medium of claim 7 wherein sending a message comprises sending a message to an administrator who is responsible for all wiki pages associated with a wiki application.

9. The computer-readable medium of claim 7 wherein sending a message comprises sending a message to a specialist who is responsible for limiting disclosure of the confidential information.

10. The computer-readable medium of claim 7 wherein sending a message comprises sending a message to a user who posted the confidential information to the wiki page.

11. The computer-readable medium of claim 7 wherein searching a wiki page for information comprises retrieving words from a list of words and comparing the words to words on the wiki page.

12. The computer-readable medium of claim 7 wherein searching a wiki page is triggered when content for the wiki page is saved in a wiki application.

13. The computer-readable medium of claim 7 further comprising reducing access to the wiki page after confidential information is found on the wiki page.

14. The computer-readable medium of claim 13 wherein reducing access to the wiki page comprises changing a security access level for the wiki page.

15. A method comprising:

assigning a first user responsibility for monitoring use of a first instance of sensitive information on knowledge management documents on a knowledge management system;

assigning a second user responsibility for monitoring use of a second instance of sensitive information on the knowledge management documents on the knowledge management system; and

notifying the first user but not the second user if the first instance of sensitive information appears on a knowledge management document on the knowledge management document system.

16. The method of claim 15 further comprising notifying an administrator who is responsible for all knowledge management documents on the knowledge management system if the first instance of sensitive information appears on a knowledge management document on the knowledge management system and notifying the administrator if the second instance of sensitive information appears on a knowledge management document on the knowledge management system.

17. The method of claim 16 further comprising notifying an author of a knowledge management document if the first instance of sensitive information appears in content produced by the author.

18. The method of claim 15 wherein the first instance of sensitive information comprises a word that is associated with an asset of an entity.

19. The method of claim 15 further comprising adjusting access to a knowledge management document if the first instance of sensitive information appears in the knowledge management document.

20. The method of claim 19 wherein adjusting access to a knowledge management document comprises changing a security level required to access the knowledge management document.

21. A computer-readable medium having computer-executable instructions encoded thereon that when executed on a computer perform steps comprising:

receiving an indication that a collaboration page has been changed;

determining that the collaboration page contains a word in a list of sensitive words; and

changing access to the collaboration page such that fewer people can access the collaboration page after it has been changed than before it was changed based on the word being contained in the collaboration page, at least one person being able to access the collaboration page after access to the collaboration page is changed.

22. The computer-readable medium of claim 21 wherein the list of sensitive words comprises words that are considered confidential to an entity.

23. The computer-readable medium of claim 21 further comprising notifying a person associated with the word that the collaboration page contains the word.

24. The computer-readable medium of claim 23 further comprising sending an e-mail message to a person who added the word to the collaboration page to notify the person that the collaboration page contains a sensitive word.