Method and system for monitoring personal computer documents for sensitive data

• US 7,523,498 B2
• Filed: 05/20/2004
• Issued: 04/21/2009
• Est. Priority Date: 05/20/2004
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Hamilton, Rick Allen, Seaman, James Wesley, Fellenstein, Craig William
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): TABOR, AMARE F
• Application Number:
  US10/850,404
• Publication Number:
  US 20050262557A1
• Time in Patent Office: 1,797 Days
• Field of Search: 726 26- 30, 726/22, 713/188
• US Class Current: 726/22
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An apparatus, a method, and a computer program are provided for securing transmitted text. Once text has been produced by an application, the potential exists for an unintended third party to obtain sensitive data transmitted over computer networks. However, a parsing function can then operate either on an individual computer or on a network to scan text at an Open Systems Interconnection (OSI) Layer 1 to assist in the prevention of sensitive data transmission. By utilizing the parsing function, text can be scanned for potentially sensitive data by using a variety of techniques, such as a learning algorithm. The sensitive data can then be verified by a user, bypassed, or autostripped.

Claims

1. A method for electronically securing text transmitted over a computer network, comprising:

scanning text generated by a parsing function at an Open Systems Interconnection (OSI) layer to provide scanned text, wherein the OSI layer is Layer 1 or Layer 3;

determining if the scanned text contains sensitive data; and

verifying the scanned text, wherein the step of verifying comprises;

notifying a user of presence of the sensitive data in the scanned text, wherein the step of notifying comprises autostripping, and wherein the step of autostripping automatically deletes detected, sensitive data in the scanned text.

2. The method of claim 1, wherein the step of determining further comprises employing a semantical analyzer.

3. The method of claim 1, wherein the step of determining further comprises employing a learning algorithm.

4. The method of claim 1, wherein the step of determining further comprises employing a lexical table.

5. The method of claim 1, wherein the step of verifying further comprises:

determining if the user bypasses, wherein the bypass at least allows a user to transmit the text generated by the at least one application.

6. The method of claim 1, further comprising the steps of:

intercepting the text and reviewing a header information of the text; and

reassembling the text based on the header information.