System or method to assist and automate an information security classification and marking process for government and non-government organizations for information of an electronic document

• US 20110314551A1
• Filed: 06/06/2011
• Published: 12/22/2011
• Est. Priority Date: 09/13/2005
• Status: Active Grant

• Current Assignee: James Luke Turner, Robert Edward Turner
• Original Assignee: James Luke Turner, Robert Edward Turner
• Inventors: Turner, James Luke, Turner, Robert Edward
• Granted Patent: US 8,713,054 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A software engine runs in a compatible mode with offthe-shelf word processors, e-mail programs and presentation development software and other document development software. The software engine is used for the security classification of sensitive or national security classified information in electronic and resultant hard copy document formats. The software engine ensures that the individual considers all informational portions of a document, that appropriate document marks are employed, that document marks in their electronic format are persistent and that all necessary information, such as classification guides, standards and security regulations, provided by the organization to classify information is at hand and immediately available. In addition to the document sensitivity or classification determination and marking support, the software engine tracks and controls documents and the electronic media storing documents. It also provides warnings and alarms, ad hoc document security analysis and reporting capability to system security administrators with respect to document or network events or captured information that may be indicative of risk to the information requiring protection. The software also provides the ability for an organization to centrally establish and control a security classification or sensitivity marking hierarchy for automated security classification support.

Claims

1-25. -25. (canceled)

26. A method to assist and automate an information security classification and marking process of a government organization or a non-government organization for information of an electronic document comprising:

a. executing on at least one computer comprising;

1. a central processing unit, and

2. a computer readable electronic storage media,

b. processing computer usable instructions encoded on said electronic storage media by said central processing unit, where said instructions comprising;

1. establishing an electronic document security regimen for an organization,

2. establishing a classification mark for information of an electronic document on said computer in accordance with said electronic document security regimen, and

3. inserting said classification mark into said electronic document.

27. The method of claim 26, wherein said electronic document security regimen is configurable.

28. The method of claim 26, wherein inserting said classification mark into said electronic document, where said classification mark is inserted into said electronic document as visible or not visible in the output of said electronic document.

29. The method of claim 26, further comprising:

a. establishing an associated unique identification code for said electronic document security regimen whereby establishing a network unique identification, and

b. inserting said associated unique identification code into said electronic document.

30. The method of claim 26, further comprising inserting a location storage path for said electronic document in an electronic shell of said electronic document.

31. The method of claim 26, further comprising:

a. identifying said classification mark in said electronic document, and

b. set said classification mark as not visible to the output of said electronic document.

32. The method of claim 26, further comprising associating a new said electronic document that is derived from an older said electronic document.

33. The method of claim 26, wherein said information is a portion in said electronic document and where said classification mark is established as a portion mark.

34. The method of claim 26, further comprising establishing a classification mark before said electronic document is transferred.

35. The method of claim 34, wherein said electronic document is transferred by means of electronic storage media, sent as email, print, or text messaging.

36. The method of claim 26, further comprising establishing a classification mark before said electronic document is saved to said electronic storage media.

37. The method of claim 36, wherein said electronic document is saved before an output action of said electronic document is performed.

38. The method of claim 37, wherein said output action is a printing, or displaying a slide show.

39. The method of claim 26, wherein said information is a group of one or more portions in said electronic document, and where said classification mark is established from a portion mark for each said portion in said group of one or more portions, and where said classification mark is established as a document mark for said group of one or more portions.

40. The method of claim 39, wherein said document mark is inserted into a body of said electronic document as a final classification mark when all document criteria established in said electronic document security regimen for said electronic document are met.

41. The method of claim 26, wherein said information is the entire said electronic document, and where said classification mark is established from a portion mark for each portion in said entire said electronic document, and where said classification mark is established as an overall mark for said entire said electronic document.

42. The method of claim 41, wherein said electronic document security regimen comprising a unique code that represents an element in a classification criteria used in the generation of said overall mark, and where said unique code is embedded into said electronic document.

43. The method of claim 26, wherein said electronic document security regimen comprising:

a. a classification and marking element comprising;

1. a national security information classification and marking element,

2. a sensitive information classification and marking element, or

3. an unclassified information classification and marking element,

b. a document criteria,

c. a portion criteria,

d. a criteria for a classification mark, and

e. a classification guidance document.

44. The method of claim 43, wherein said electronic document security regimen further comprising:

a. a need-to-know profile assigned to a user of said computer,

b. an interim classification mark criteria,

c. a document identification string criteria, and

d. a final classification mark criteria.

45. The method of claim 26, wherein said establishing a classification mark for information of an electronic document on said computer in accordance of said electronic document security regimen of an organization comprising:

a. displaying a user interface to a user of said computer,

b. displaying a selectable item in said user interface for said user to select,

c. displaying a classification and marking element as said selectable item,

d. retrieving said classification and marking element of said selectable item that is selected in said user interface, and

e. establishing said classification mark from the retrieved said classification and marking element for information of an electronic document on said computer.

46. The method of claim 45, wherein said information is a portion in said electronic document, and where said classification mark is established as a portion mark.

47. The method of claim 45, wherein said information is a group of portions in said electronic document, and where said classification mark is established as a document mark.

48. The method of claim 45, wherein said information is the entire said electronic document, and where said classification mark is established as an overall mark.

49. The method of claim 45, wherein said information in said electronic document has a pre-existing said classification mark, and where said user interface presents to said user said selectable item of said classification and marking element for said pre-existing said classification mark is displayed as selected as default.

50. The method of claim 45, wherein said user interface will only display said selectable item for said classification and marking element authorized for said user by a need-to-know access profile established in said electronic document security regimen.

51. The method of claim 45, wherein said user interface displays to said user a classification guide document established in said electronic document security regimen.

52. The method of claim 45, wherein said classification and marking element is a code that establishes said classification mark for said information as marked without need of a visible said classification mark in the output of said electronic document.

53. The method of claim 45, wherein said information of said electronic document is focused in a document development application.

54. The method of claim 45, wherein said information of said electronic document is highlighted.

55. The method of claim 45, wherein said user interface displays a high-level classification designator as a first said classification and marking element as a first said selectable item, within said user interface, and where upon said user selection of said first said selectable item for said high-level classification designator, said user interface presents to said user a related sub-element classification designator as a second said classification and marking element as a second said selectable item that is associated with the selected first said selectable item of said high-level classification designator, for further selection by said user.

56. The method of claim 45, wherein said user interface displays a first sub-element classification designator as a first said classification and marking element as a first said selectable item, within said user interface, and where upon said user selection of said first said selectable item for said first sub-element classification designator, said user interface presents to said user a related second sub-element designator as a second said classification and marking element as a second said selectable item that is associated with the selected first said selectable item of said first sub-element classification designator, for further selection by said user.

57. The method of claim 26, further comprising:

a. establishing a document identification string that incorporates said classification mark, and

b. inserting said document identification string into the visible display space of a document development application for said electronic document.

58. The method of claim 57, wherein said document identification string further incorporates a current document status.

59. The method of claim 57, wherein said document identification string is inserted into an electronic shell of said electronic document.

60. The method of claim 26, wherein said information of said electronic document does not meet a document criteria of said electronic document security regimen, and where said classification mark is established as an interim classification mark.

61. The method of claim 60, wherein said document criteria comprising where said electronic document does not have an unmarked portion, and where said electronic document does not have a portion marked as unknown.

62. The method of claim 60, wherein said document criteria comprising where said electronic document does not have an unresolved tracked change to said information of said electronic document.

63. The method of claim 60, wherein said interim classification mark incorporates a second said classification mark.

64. The method of claim 60, wherein said interim classification mark incorporates a highest classification authorized for the system mark established in said electronic document security regimen, and where said highest classification authorized for the system mark sets forth the highest classification authorized for the system.

65. The method of claim 60, wherein said document criteria comprising where said electronic document requires a classification block mark.

66. The method of claim 26, further comprising

a. providing a central service server,

b. establishing a relational structure for a plurality of elements of said computer in said central service server, and

c. establishing a unique identification code for an element of said plurality of elements.

67. The method of claim 66, wherein said element comprising:

a. a user,

b. an electronic document,

c. a drive,

d. a storage media, or

e. a computer.

68. The method of claim 66, wherein said unique identification code is inserted into said electronic document.

69. The method of claim 26 further comprising:

a. providing a central service server, and

b. recording a storage location and said classification mark of said electronic document in said central service server.

70. The method of claim 69 wherein said storage location comprising:

a. computer,

b. drive, and

c. file path on drive.

71. The method of claim 69, further comprising:

a. recording a code comprising a current state as stored on said electronic storage media for said electronic document, and

b. monitoring said code to determine change in said electronic document.

72. A method to automate a classification block mark process for an electronic document where said electronic document contains national security information comprising:

a. executing on at least one computer comprising;

1. a central processing unit, and

2. a computer readable electronic storage media,

b. processing computer usable instructions encoded on said electronic storage media by said central processing unit, where said instructions comprising;

1. displaying a user interface to a user of said computer,

2. displaying an input item for a classification block mark for input from said user,

3. retrieving said input item,

4. establishing a classification block mark from the retrieved said input item, and

5. inserting said classification block mark into an electronic document.

73. The method of claim 72, wherein said input item for said classification block mark is inserted into an electronic shell of said electronic document.

74. The method of claim 72, wherein said classification block mark is formatted as established in an electronic document security regimen.

75. A system to assist and automate an information security classification and marking process of a government organization or a non-government organization for information of an electronic document comprising:

a. at least one computer comprising;

1. a central processing unit, and

2. computer readable electronic storage media,

3. computer usable instructions encoded on said electronic storage media,

b. an electronic document security regimen for an organization on said computer, and

c. said instructions comprising;

1. establish a classification mark for information of an electronic document on said computer in accordance with said electronic document security regimen, and

2. insert said classification mark into said electronic document.

76. The system of claim 75, wherein said electronic document security regimen is configurable.

77. The system of claim 75, wherein insert said classification mark into said electronic document, where said classification mark is inserted into said electronic document as visible or not visible in the output of said electronic document.

78. The system of claim 75, wherein said instructions further comprising:

a. establish an associated unique identification code for said electronic document security regimen whereby establishing a network unique identification, and

b. insert said associated unique identification code into said electronic document.

79. The system of claim 75, wherein said instructions further comprising insert a location storage path for said electronic document in an electronic shell of said electronic document.

80. The system of claim 75, wherein said instructions further comprising:

a. identify said classification mark in said electronic document, and

b. set said classification mark as not visible to the output of said electronic document.

81. The system of claim 75, further comprising associating a new said electronic document that is derived from an older said electronic document.

82. The system of claim 75 wherein said information is a portion in said electronic document and where said classification mark is established as a portion mark.

83. The system of claim 75, further comprising establishing a classification mark before said electronic document is transferred.

84. The system of claim 83, wherein said electronic document is transferred by means of electronic storage media, sent as email, print, or text messaging.

85. The system of claim 75, further comprising establishing a classification mark before said electronic document is saved to said electronic storage media.

86. The system of claim 85, wherein said electronic document is saved before an output action of said electronic document is performed.

87. The system of claim 86, wherein said output action is a printing, or displaying a slide show.

88. The system of claim 75, wherein said information is a group of one or more portions in said electronic document, and where said classification mark is established from a portion mark for each said portion in said group of one or more portions and where said classification mark is established as a document mark for said group of one or more portions.

89. The system of claim 88, wherein said document mark is inserted into a body of said electronic document as a final classification mark when all document criteria established in said electronic document security regimen for said electronic document are met.

90. The system of claim 75, wherein said information is the entire said electronic document, and where said classification mark is established from a portion mark for each portion in said entire said electronic document, and where said classification mark is established as an overall mark for said entire said electronic document.

91. The system of claim 90, wherein said electronic document security regimen comprising a unique code that represents an element in a classification criteria used in the generation of said overall mark, and where said unique code is embedded into said electronic document.

92. The system of claim 75, wherein said electronic document security regimen comprising:

a. a classification and marking element comprising;

1. a national security information classification and marking element,

2. a sensitive information classification and marking element, or

3. an unclassified information classification and marking element,

b. a document criteria,

c. a portion criteria,

d. a criteria for a classification mark, and

e. a classification guidance document.

93. The system of claim 92, wherein said electronic document security regimen further comprising:

a. a need-to-know profile assigned to a user of said computer,

b. an interim classification mark criteria,

c. a document identification string criteria, and

d. a final classification mark criteria.

94. The system of claim 75, wherein said establish a classification mark for information of an electronic document on said computer in accordance of said electronic document security regimen of an organization comprising:

a. display a user interface to a user of said computer,

b. display a selectable item in said user interface for said user to select,

c. display a classification and marking element as said selectable item,

d. retrieve said classification and marking element of said selectable item that is selected in said user interface, and

e. establish said classification mark from the retrieved said classification and marking element for information of an electronic document on said computer.

95. The system of claim 94 wherein said information is a portion in said electronic document, and where said classification mark is established as a portion mark.

96. The system of claim 94 wherein said information is a group of portions in said electronic document, and where said classification mark is established as a document mark.

97. The system of claim 94, wherein said information is the entire said electronic document, and where said classification mark is established as an overall mark.

98. The system of claim 94, wherein said information in said electronic document has a pre-existing said classification mark, and where said user interface presents to said user, and where said selectable item of said classification and marking element for said pre-existing said classification mark is displayed as selected as default.

99. The system of claim 94, wherein said user interface will only display said selectable item for said classification and marking element authorized for said user by a need-to-know access profile established in said electronic document security regimen.

100. The system of claim 94, wherein said user interface displays to said user a classification guide document established in said electronic document security regimen.

101. The system of claim 94, wherein said classification and marking element is a code that establishes said classification mark for said information as marked without need of a visible said classification mark in the output of said electronic document.

102. The system of claim 94, wherein said information of said electronic document is focused in a document development application.

103. The system of claim 94, wherein said information of said electronic document is highlighted.

104. The system of claim 94, wherein said user interface displays a high-level classification designator as a first said classification and marking element as a first said selectable item, within said user interface, and where upon said user selection of said first said selectable item for said high-level classification designator, said user interface presents to said user a related sub-element classification designator as a second said classification and marking element as a second said selectable item that is associated with the selected first said selectable item of said high-level classification designator, for further selection by said user.

105. The system of claim 94, wherein said user interface displays a first sub-element classification designator as a first said classification and marking element as a first said selectable item, within said user interface, and where upon said user selection of said first said selectable item for said first sub-element classification designator, said user interface presents to said user a related second sub-element designator as a second said classification and marking element as a second said selectable item that is associated with the selected first said selectable item of said first sub-element classification designator, for further selection by said user.

106. The system of claim 75, wherein said instructions further comprising:

a. establish a document identification string that incorporates said classification mark, and

b. insert said document identification string into the visible display space of a document development application for said electronic document.

107. The system of claim 106, wherein said document identification string further incorporates a current document status.

108. The system of claim 106, wherein said document identification string is inserted into an electronic shell of said electronic document.

109. The system of claim 75, wherein said information of said electronic document does not meet a document criteria of said electronic document security regimen, and where said classification mark is established as an interim classification mark.

110. The system of claim 109, wherein said document criteria comprising where said electronic document does not have an unmarked portion, and where said electronic document does not have a portion marked as unknown.

111. The system of claim 109, wherein said document criteria comprising where said electronic document does not have an unresolved tracked change to said information of said electronic document.

112. The system of claim 109, wherein said interim classification mark incorporates a second said classification mark.

113. The system of claim 109, wherein said interim classification mark incorporates a highest classification authorized for the system mark established in said electronic document security regimen, and where said highest classification authorized for the system mark sets forth the highest classification authorized for the system.

114. The system of claim 109, wherein said document criteria comprising where said electronic document requires a classification block mark.

115. The system of claim 75, wherein said instructions further comprising:

a. provide a central service server,

b. establish a relational structure for a plurality of element of said computer in said central service server, and

c. establish a unique identification code for said element of said relational structure.

116. The system of claim 115, wherein said element comprising:

a. a user,

b. an electronic document,

c. a drive,

d. a storage media, or

e. a computer.

117. The system of claim 115, wherein said unique identification code is inserted into said electronic document.

118. The system of claim 75, wherein said instructions further comprising:

a. provide a central service server, and

b. record a storage location and said classification mark of said electronic document in said central service server.

119. The system of claim 118, wherein said storage location comprising:

a. computer,

b. drive, and

c. file path on drive.

120. The system of claim 118, wherein said instructions further comprising:

a. record a code comprising a current state as stored on said electronic storage media for said electronic document, and

b. monitor said code to determine change in said electronic document.

121. A system to automate a classification block mark process for an electronic document where said electronic document contains national security information comprising:

a. at least one computer comprising;

1. a central processing unit,

2. computer readable electronic storage media, and

3. computer usable instructions encoded on said electronic storage media, and

b. said instructions comprising;

1. display a user interface to a user of said computer,

2. display an input item for a classification block mark for input from said user,

3. retrieve said input item,

4. establish a classification block mark from the retrieved said input item, and

5. insert said classification block mark into an electronic document.

122. The system of claim 121, wherein said input item for said classification block mark is inserted into an electronic shell of said electronic document.

123. The system of claim 121, wherein said classification block mark is formatted as established in an electronic document security regimen.

124. A computer readable storage device, having stored thereon a sequence of instructions to assist and automate an information security classification and marking process of a government organization or a non-government organization for information of an electronic document, which when executed by a computer, cause said computer to perform the methods comprising:

a. establishing an electronic document security regimen on said computer of an information classification and marking process of an organization,

b. establishing a classification mark for information of an electronic document on said computer in accordance with said electronic document security regimen, and

c. inserting said classification mark into said electronic document.

125. A computer readable storage device, having stored thereon a sequence of instructions to automate a classification block mark process for an electronic document where said electronic document contains national security information, which when executed by a computer, cause said computer to perform the methods comprising:

a. displaying a user interface to a user of said computer,

b. displaying an input item for a classification block mark for input from said user,

c. retrieving said input item,

d. establishing a classification block mark from the retrieved said input item, and

e. inserting said classification block mark into an electronic document.