MINIMIZING SENSITIVE DATA EXPOSURE DURING PREPARATION OF REDACTED DOCUMENTS

• US 20120304304A1
• Filed: 05/23/2011
• Published: 11/29/2012
• Est. Priority Date: 05/23/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: FOX, Joshua, AVRAHAMI, Shlomit, KOSHAROVSKY, Yuri, PELTS, Michael, RYBAK, Vladislav P., SHAPIRO, Ora
• Granted Patent: US 8,959,654 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes

Abstract

A document review and security technique is provided that presents a first portion of a document to a first reviewer, wherein the first portion includes less than the entire document, presents a second portion of the document to a second reviewer, wherein the second portion includes less than the entire document, wherein the second portion is at least partially different from the first portion, and wherein the first reviewer and the second reviewer are different reviewers, receives from the first reviewer a review action input associated with the first portion, receives from the second reviewer a review action input associated with the second portion, and determines a disposition of the document in accordance with the review action inputs.

Claims

1-12. -12. (canceled)

13. A document review and security system comprising:

a document review manager configured to

present a first portion of a document to a first reviewer, wherein the first portion includes less than the entire document,

present a second portion of the document to a second reviewer, wherein the second portion includes less than the entire document, wherein the second portion is at least partially different from the first portion, and wherein the first reviewer and the second reviewer are different reviewers,

receive, from the first reviewer, a review action input associated with the first portion, and

receive, from the second reviewer, a review action input associated with the second portion; and

a document processing engine configured to determine a disposition of the document in accordance with the review action inputs.

14. The system of claim 13 wherein the first portion has been provisionally redacted, and wherein the review action input associated with the first portion indicates that the first portion has been correctly redacted.

15. The system of claim 13, wherein the document processing engine is configured to perform at least one of:

a) redacting the document, b) assigning a classification to the document, and c) imposing a security constraint upon the document.

16. The system of claim 13, wherein document review manager is configured to

identify a first element within the document that is contextually related to a second element within the document in accordance with predefined contextual relationship criteria, and

include the first element within the first portion or the second portion without the second element.

17. The system of claim 13, wherein the document review manager is configured to divide an image of the document into a plurality of sub-images, wherein each of the sub-images includes a contiguous area of the document that is less than the entire area of the document, wherein each of the sub-images is at least partially different from the other sub-images, and wherein each of the first portion and the second portion includes at least partially different subsets of the sub-images.

18. The system of claim 13, wherein the document review manager is configured to

receive a request from the first reviewer to view a third portion of the document, wherein the third portion is adjacent to the first portion, and

provide an extent of the third portion to the first reviewer.

19. The system of claim 13, wherein the document review manager is configured to perform at least one of:

a) replacing any data within the first portion or the second portion with deidentifying data and b) inserting into the first portion or the second portion data that are not found in the document.

20. A document review and security system comprising:

a document review manager configured to

identify a first element within a first document that is contextually related to a second element within the first document in accordance with predefined contextual relationship criteria,

create a second document including the first element, the second element, and a third element, wherein the third element is not interposed between the first element and the second element within the first document, and wherein the third element is interposed between the first element and the second element within the second document,

presenting the second document to a reviewer,

receiving a review action input from the reviewer; and

a document processing engine configured to determine a disposition of the first document in accordance with the review action inputs.

21. The system of claim 20, wherein the third element is from the first document.

22. The system of claim 20, wherein the third element is from a third document.

23. The system of claim 20, wherein the document processing engine is configured to impose a security constraint upon the first document.

24. The system of claim 20, wherein the document review manager is configured to perform at least one of:

a) replacing any data within the second document with deidentifying data and b) inserting into the second document data that are not found in the first document.

25. A computer program product for document review and security, the computer program product comprising:

a computer readable storage medium; and

computer readable program code embodied in the computer readable storage medium, wherein the computer readable program code is configured to;

present a first portion of a document to a first reviewer, wherein the first portion includes less than the entire document,

present a second portion of the document to a second reviewer, wherein the second portion includes less than the entire document, wherein the second portion is at least partially different from the first portion, and wherein first reviewer and the second reviewer are different reviewers,

receive, from the first reviewer, a review action input associated with the first portion,

receive, from the second reviewer, a review action input associated with the second portion, and

determine a disposition of the document in accordance with the review action inputs.

26. The computer program product of claim 25, wherein the first portion has been provisionally redacted, and wherein the review action input associated with the first portion indicates that the first portion has been correctly redacted.

27. The computer program product of claim 25, wherein the computer readable program code for determining is configured to:

perform at least one of;

a) redacting the document, b) assigning a classification to the document, and c) imposing a security constraint upon the document.

28. The computer program product of claim 25, wherein the computer readable program code is configured to:

identify a first element within the document that is contextually related to a second element within the document in accordance with predefined contextual relationship criteria; and

include the first element within the first portion or the second portion without the second element.

29. The computer program product of claim 25, wherein the computer readable program code is configured to:

divide an image of the document into a plurality of sub-images, wherein each of the sub-images includes a contiguous area of the document that is less than the entire area of the document, wherein each of the sub-images is at least partially different from the other sub-images, and wherein each of the first portion and the second portion includes at least partially different subsets of the sub-images.

30. The computer program product of claim 25, wherein the computer readable program code is configured to:

receive a request from the first reviewer to view a third portion of the document, wherein the third portion is adjacent to the first portion; and

provide an extent of the third portion to the first reviewer.

31. The computer program product of claim 25, wherein the computer readable program code is configured to:

perform at least one of;

a) replacing any data within the first portion or the second portion with deidentifying data and b) inserting into the first portion or the second portion data that are not found in the document.

32. A computer program product for document review and security, the computer program product comprising:

a computer readable storage medium; and

computer readable program code embodied in the computer readable storage medium, wherein the computer readable program code is configured to;

identify a first element within a first document that is contextually related to a second element within the first document in accordance with predefined contextual relationship criteria;

create a second document including the first element, the second element, and a third element, wherein the third element is not interposed between the first element and the second element within the first document, and wherein the third element is interposed between the first element and the second element within the second document;

present the second document to a reviewer;

receive a review action input from the reviewer; and

determine a disposition of the first document in accordance with the review action inputs.

33. The computer program product of claim 32, wherein the third element is from the first document.

34. The computer program product of claim 32, wherein the third element is from a third document.

35. The computer program product of claim 32, wherein the determining comprises imposing a security constraint upon the first document.

36. The computer program product of claim 32, wherein the computer readable program code is configured to:

perform at least one of;

a) replacing any data within the second document with deidentifying data and b) inserting into the second document data that are not found in the first document.