Image Analysis and Management

• US 20140331333A1
• Filed: 05/03/2013
• Published: 11/06/2014
• Est. Priority Date: 05/03/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Frost, Simon
• Granted Patent: US 9,064,125 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06V 30/413 Classification of content, e.g. text, photographs or tables
• CPC Class Codes: G06V 30/416 Extracting the logical structure, e.g. chapters, sections or page numbers; Identifying elements of the document, e.g. authors
• CPC Class Codes: H04N 1/00846 based on detection of a dedicated indication, e.g. marks or the like
• CPC Class Codes: H04N 1/00859 Issuing an alarm or the like
• CPC Class Codes: H04N 1/00875 Inhibiting reproduction, e.g. by disabling reading or reproduction apparatus
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems, methods and apparatuses are described herein that allow an enterprise to analyze and manage work product images that are stored on a mobile device. Employees of an enterprise may use a mobile device to store both work product images (e.g., images of sensitive or proprietary information) and non-work product images (e.g., personal images). An enterprise may desire to enforce security protocols on the work product images, but the employee may not want the security protocols applied to the non-work product images. In some embodiments, by installing and executing an image manager that is able to analyze and manage images, the enterprise can enforce security protocols on only the work product images. Such security protocols may include the prevention of unauthorized viewing of the work product image (e.g., by encrypting the work product image) or deleting any work product image from the mobile device when the employee'"'"'s employment has ended.

Claims

1. A method, comprising:

registering a mobile device with an enterprise resource or enterprise service provided by an enterprise;

installing an image manager on the mobile device;

executing the image manager on the mobile device;

selecting, by the image manager, a first image stored on the mobile device;

processing, by the image manager, the first image to identify one or more elements present in the first image;

determining, by the image manager, that the first image is a work product image based on the one or more elements present in the first image;

responsive to determining that the first image is a work product image, the image manager storing a copy of the first image to a work product image backup location and editing the first image to prevent unauthorized viewing of the first image on the mobile device;

determining, by the image manager, that an enterprise action has occurred which indicates a user of the mobile device is no longer employed by the enterprise; and

responsive to determining that the enterprise action has occurred, performing a deletion of work product images from the mobile device, wherein performing the deletion includes deleting, by the image manager, the first image from the mobile device.

2. The method of claim 1, further comprising:

selecting, by the image manager, a second image stored on the mobile device;

processing, by the image manager, the second image to identify one or more elements present in the second image;

determining, by the image manager, that the second image is a non-work product image based on the one or more elements present in the second image; and

responsive to determining that the enterprise action has occurred, ignoring, by the image manager, the second image when performing the deletion of work product images from the mobile device.

3. An apparatus, comprising:

one or more processors; and

memory storing executable instructions that, when executed by said one or more processors, cause the apparatus to;

analyze an image stored by the apparatus;

determine that the image is a work product image; and

responsive to determining that the image is a work product image, restrict image security to prevent unauthorized viewing of the image.

4. The apparatus of claim 3, wherein restricting image security to prevent unauthorized viewing of the image includes editing original image data of the image to prevent unauthorized viewing of the original image data.

5. The apparatus of claim 4, wherein the memory further stores executable instructions that, when executed by said one or more processors, cause the apparatus to:

determine that a first user action has occurred;

responsive to determining that the first user action has occurred, restore the original image data; and

perform the first user action subsequent to restoring the original image data.

6. The apparatus of claim 5, wherein the memory further stores executable instructions that, when executed by said one or more processors, cause the apparatus to:

determine that a second user action has occurred;

responsive to determining that the second user action has occurred, reapply restricted image security to prevent unauthorized viewing of the image; and

perform the second user action subsequent to reapplying the restricted image security.

7. The apparatus of claim 3, wherein the memory further stores executable instructions that, when executed by said one or more processors, cause the apparatus to:

determine that a user action has occurred; and

perform the user action based on restricted image security.

8. The apparatus of claim 3, wherein the memory further stores executable instructions that, when executed by said one or more processors, cause the apparatus to:

determine that an enterprise event has occurred; and

responsive to determining that the enterprise event has occurred, delete only work product images stored at the apparatus and ignoring non-work product images.

9. The apparatus of claim 3, wherein analyzing the image includes identifying one or more elements present in the image, and wherein determining that the image is a work product image is based on the one or more elements.

10. The apparatus of claim 9, wherein the one or more elements includes a whitespace element and a chart element, and wherein determining that the image is a work product image is based on the whitespace element and the chart element.

11. The apparatus of claim 9, wherein the one or more elements includes a writing or machine readable code element, and wherein determining that the image is a work product image is based on the writing or machine readable code element.

12. A method, comprising:

analyzing, by a computing device, an image stored by the computing device;

determining that the image is a work product image; and

responsive to determining that the image is a work product image, restrict image security to prevent unauthorized viewing of the image.

13. The method of claim 12, wherein restricting image security to prevent unauthorized viewing of the image includes editing original image data of the image to prevent unauthorized viewing of the original image data.

14. The method of claim 13, further comprising:

determining that a first user action has occurred;

responsive to determining that the first user action has occurred, restoring the original image data; and

performing the first user action subsequent to restoring the original image data.

15. The method of claim 14, further comprising:

determining that a second user action has occurred;

responsive to determining that the second user action has occurred, reapplying restricted image security to prevent unauthorized viewing of the image; and

performing the second user action subsequent to reapplying the restricted image security.

16. The method of claim 12, further comprising:

determining that an enterprise event has occurred; and

responsive to determining that the enterprise event has occurred, delete only work product images stored at the computing device and ignoring non-work product images.

17. The method of claim 12, wherein analyzing the image includes identifying one or more elements present in the image, and wherein determining that the image is a work product image is based on the one or more elements.

18. The method of claim 17, wherein the one or more elements includes a whitespace element and a chart element, and wherein determining that the image is a work product image is based on the whitespace element and the chart element.

19. The method of claim 17, wherein the one or more elements includes a writing or machine readable code element, and wherein determining that the image is a work product image is based on the writing or machine readable code element.

20. The method of claim 12, the computing device is a mobile device used by an employee of an enterprise, and all steps are performed by an image manager installed on the mobile device that enforces a work product image security protocol provided by the enterprise.