SYSTEM, METHOD, APPARATUS AND COMPUTER PROGRAMS FOR SECURELY USING PUBLIC SERVICES FOR PRIVATE OR ENTERPRISE PURPOSES

• US 20140298477A1
• Filed: 09/04/2013
• Published: 10/02/2014
• Est. Priority Date: 04/02/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Castro, Paul C., Pistoia, Marco, Ponzo, John J., Truty, Gregory L.
• Granted Patent: US 9,178,856 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 1/32144 embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp

Abstract

A method, system, apparatus and computer programs are disclosed to process content for an enterprise. The method includes reviewing, using at least one enterprise policy, content that is to be sent through a data communications network to a public service to determine if the content comprises secure data and, in response to identifying secure data, modifying the content to be sent to the public service such that a presence of secure data will be visually imperceptible when the content is rendered at the public service. The step of modifying can include steganographically embedding the secure data or a link to the secure data in a container such as image data.

Claims

1. A system to process content for an enterprise, comprising:

at least one data processor;

at least one computer readable medium that stores software program instructions that are executable by the at least one data processor; and

at least one interface to a data communications network, where execution of the software program instructions results in performance of operations that comprise

reviewing, using at least one enterprise policy, content that is to be sent through a data communications network to a public service to determine if the content comprises secure data; and

in response to identifying secure data, modifying the content to be sent to the public service via said at least one interface such that a presence of secure data will be visually imperceptible when the content is rendered at the public service.

2. The system as in claim 1, where modifying comprises steganographically embedding the secure data in a container.

3. The system as in claim 2, where the container is comprised of image data.

4. The system as in claim 2, where the secure data is encrypted prior to being steganographically embedded in the container.

5. The system as in claim 1, where the operation of modifying comprises storing the secure data in a storage medium that is accessible only within the enterprise, and steganographically embedding a link to the stored secure data in a container.

6. The system as in claim 1, where the content to be sent to the public service comprises public data and the secure data or a link to the secure data.

7. The system as in claim 1, where the secure data is partitioned such that a plurality of users each have access to one partition of the secure data.

8. The system as in claim 1, where reviewing the content comprises reviewing chunks of the content and for each chunk, determining if the chunk is comprised of public data or secure data, if the chunk is comprised of secure data modifying the chunk so as to be visually imperceptible when rendered at the public service, and when all chunks are reviewed sending the content comprised of chunks of public data and modified secure data to the public service.

9. The system as in claim 8, where modifying the chunk comprises steganographically embedding the chunk of secure data in a container sent with the public data, or storing the chunks of secure data in a storage medium that is accessible only within the enterprise and steganographically embedding a link to the stored chunks of secure data in the container.