System and method for monitoring unauthorized dissemination of documents and portable media

• US 7,859,725 B2
• Filed: 12/18/2007
• Issued: 12/28/2010
• Est. Priority Date: 02/28/2002
• Status: Active Grant

• Current Assignee: Forcepoint LLC
• Original Assignee: PortAuthority Technologies, Inc. (Forcepoint LLC)
• Inventors: Troyansky, Lidror, Carny, Ofir, Peled, Ariel
• Primary Examiner(s): Rogers; Scott A
• Application Number:
  US12/000,876
• Publication Number:
  US 20080094654A1
• Time in Patent Office: 1,106 Days
• Field of Search: 358/1.1, 358/1.9, 358/3.28, 358/1.18, 358/401, 358/403, 358/464, 358/1.14, 358/1.15, 705/51, 705/57, 705/58, 726/26, 726/31, 726/32, 382/101, 382/305, 382/100, 340/5.86, 340/5.2, 340/5.8, 340/539.1, 340/572.1, 340/572.5, 707/781, 713/189, 713/194, 283/73, 283/82, 283/85, 283/94
• US Class Current: 358/3.28
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A method for enforcing a distribution policy associated with an electronic document comprising the steps of: sending the document to an output device; determining said distribution policy associated with said document; instructing a marking module to embed a marking indicating at least the existence of said distribution policy on an output form of said electronic document produced by said output device, said marking being readable to enforce said associated marking policy.

Claims

1. A method for enforcing a distribution policy associated with an electronic document comprising the steps of:

sending the electronic document to an output device;

determining which one of a plurality of distribution policies is associated with said electronic document that is sent;

instructing a marking module to embed a marking indicating at least the existence of said associated distribution policy on an output form of said electronic document produced by said output device, said embedded marking being readable to enforce said associated distribution policy as indicated by said marking;

detecting marking embedded in said output using a marking detection technique;

notifying at least one distribution policy enforcement facilitation module of the detection of said marking; and

performing a policy enforcement action on said output form according to said notification.

2. A method according to claim 1, wherein said marking comprises at least one of the following:

marking which is not substantially visually perceptible;

marking which is not substantially visually discernable from a background;

a marking comprising a plurality of layers;

a plurality of markings;

a plurality of layers of markings, each layer comprising different information;

a plurality of markings, each comprising different information;

a plurality of different markings each layer comprising a different marking technique;

a plurality of layers of markings each layer comprising several different marking techniques;

marking which is substantially difficult to remove;

marking which is difficult to substantially damage;

marking operable to be localized; and

marking operable to be localized by triangulation.

3. A method according to claim 1, wherein said marking comprise at least one of the following:

an arrangement embedded into said output that can be detected using electromagnetic means;

a radio frequency remote identification device;

an electronic circuit;

an electronic resonant circuit;

an electronic resonant circuit comprising a capacitor and a coil;

matched dipole antenna;

radiation emitting material;

magnetic substance;

antenna;

microwave detectable component;

excite-able quantum system;

piezoelectric component; and

acoustic resonator.

4. A method according to claim 1, wherein said output comprises printing on paper, and said marking comprises at least one of the following:

an apparatus embedded in said paper;

conductive ink;

a printable electronic component;

magnetic ink;

a conductive segment;

detectable chemicals;

barcode; and

visible marking.

5. A method according to claim 1, wherein said policy enforcement action comprising at least one of the following;

logging said notification;

reporting said notification;

logging and reporting said notification;

providing an alert;

sounding an alarm;

obstructing the exit of said document from a restricted area;

obstructing the exit of said document from a restricted area by closing an exit;

preventing a copying device from copying said document;

preventing a writing device from writing said document to digital media;

preventing a writing device from writing said document on unmarked digital media;

preventing a copying device from making an unmarked copy of said detected marked document; and

causing a copying device to embed marking on copies it creates following said detection.

6. A method according to claim 1, further comprising utilizing at least one of the following techniques:

tamper resistance for marks placed on said output;

tamper detection for marks placed on said output, said tamper detection for detecting attempts at tampering;

tamper resistance for a device used for detection of said marks;

tamper detection for a device used for detection of said mark, said tamper detection for detecting attempts at tampering;

tamper resistance for a device used for enforcement of said policy;

tamper detection for a device used for enforcement of said policy, said tamper detection for detecting attempts at tampering;

cryptography within said marking;

cryptography for communication with output devices;

encryption of marks;

encryption of communication with output devices;

encryption of communications concerning said distribution policy;

utilizing a rule based distribution policy to derive a policy for a given document;

rule based policy analyzing;

utilizing a document management system for control of distribution policy over a plurality of documents;

integration with a document management system;

importing of documents;

enforcing a document retention policy;

access control;

utilizing a personnel identification device operable to identify personnel in association with said documents;

utilizing a personnel identification device operable to identify personnel attempting to perform an action related to said document;

access control to at least one storage device;

access control to at least one storage device for enforcement by said storage device;

utilizing Optical Character Recognition to analyze the contents of documents in output form;

utilizing Optical Character Recognition to analyze the contents of marks embedded within documents in output form;

Inserting marks in the form of bar codes and utilizing bar code reading to identify said marks;

utilizing tamper resistant hardware; and

triangulation for position location.

7. A method according to claim 1, further comprising defining at least two zones, such that a document is allowed to be in a first restricted zone, and is not allowed to be in a second, non-restricted, zone, and wherein said enforcing comprises actions preventing transfer of said output form from said first zone to said second zone.

8. A method according to claim 7, wherein said enforcing comprises selecting at least one of the following

not allowing the creation of copies of said documents within said second zone;

monitoring exits of said first zone utilizing marking detection; and

monitoring the entrances of said second zone utilizing marking detection.

9. A method according to claim 1, further comprising

defining at least two classes of documents,

providing each class with a mark allowing said class to be distinguished,

applying a different distribution policy for each class,

defining at least three zones,

defining that a first of said classes is allowed to be in a first restricted zone,

defining that said first class is not allowed to be in a second restricted zone,

defining that a second of said classes is allowed to be in said first restricted zone,

defining that said second class is allowed to be in said second restricted zone,

defining that said second class is not allowed to be in a third non-restricted zone,

defining that said first class is not allowed to be in said third not restricted zone, and

wherein said enforcing comprises actions controlling transfer of said output form between said respective zones in accordance with said definitions.

10. A method according to claim 9, wherein said enforcing comprises selecting at least one of:

not allowing the creation of copies of documents of said first class within said second restricted zone;

monitoring the exits of said first restricted zone utilizing marking detection;

monitoring the exits of said second restricted zone utilizing marking detection;

monitoring the entrances of said second restricted zone utilizing marking detection devices; and

monitoring the entrances of said third not restricted zone utilizing marking detection.

11. A method according to claim 1, wherein said marking comprises indication about at least one of the following:

distribution policy related information for an associated document;

distribution policy related information;

reference to a database;

reference to a database comprising distribution policy related information for an associated document;

reference to a database comprising distribution policy related information; and

an identification of an associated document.

12. A method according to claim 1, wherein said marking comprise indication about at least one of the following:

information about the contents of an associated document;

allowed recipients information for an associated document page number information for the page of a copy of an associated document;

copy number information for a copy of an associated document;

copy identification information for a copy of an associated document;

author identity information for an associated document;

managing personnel identity, information for an associated document;

classification level information for an associated document;

printing permission information for an associated document;

copying permission information for an associated document;

removal from restricted zone permission information for an associated document;

usage restriction information for an associated document; and

access control information for an associated document.

13. A method according to claim 1, further comprising embedding marking detection functionality into at least one of the following devices:

a portable media writing device;

an optical portable media writing device;

a magnetic portable media writing device;

a CD writer;

a DVD writer;

a diskette drive;

a magnetic tape writer;

a zip disk drive;

a flash memory card writing device;

a portable storage device interface;

a USB interface;

a bluetooth interface;

a firewire interface;

a IDE interface;

a SCSI interface;

a TCP/IP interface;

a infrared interface;

a wireless interface; and

a RF interface.

14. A method according to claim 1, further comprising embedding marking detection functionality into at least one of the following devices:

a scanning device;

a scanner;

a printing device;

a printer;

a plotter;

a copying device;

a photocopier;

a fax machine;

a document destruction device; and

a shredder.

15. A method according to claim 14, further comprising embedding said marking detection functionality into a document destruction device, thereby to enable said distribution policy enforcement facilitation module to monitor at least one of the following:

the number of copies of said document that have been created and not destroyed;

the number of copies of said document that have been created and destroyed;

the identity of copies of said document that have been created and not destroyed;

the identity of copies of said document that have been created and destroyed;

the identity of pages of copies of said document that have been created and not destroyed;

the identity of pages of copies of said document that were created and destroyed;

the identity of sections of copies of said document that have been created and not destroyed; and

the identity of sections of copies of said document that have been created and destroyed.

16. A method according to claim 14, further comprising embedding said marking detection functionality into a document destruction device, thereby to enable said distribution policy enforcement facilitation module to monitor at least one of the following:

identities of persons possessing copies of said documents that have been created and not destroyed;

identities of persons possessing copies of said document that have been created and not destroyed;

identities of persons possessing pages of copies of said documents which have been created and not destroyed;

identities of persons possessing sections of copies of said documents which have been created and not destroyed;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discerned by utilizing a personnel identification device;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device;

identities of persons possessing pages of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device; and

identities of persons possessing sections of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device.

17. A method according to claim 1, wherein said output form of said document comprises at least one of one of the following:

a printed copy of said document;

a digital copy of said document;

a copy of said document stored on portable media;

a copy of said document stored on portable storage device;

a copy of said document stored an optical portable media;

a copy of said document stored on a magnetic portable media;

a copy of said document stored an optical media;

a copy of said document stored on a magnetic media;

a copy of said document stored on a CD;

a copy of said document stored on a DVD;

a copy of said document stored on a diskette;

a copy of said document stored on a magnetic tape;

a copy of said document stored on a zip disk; and

a copy of said document stored on a flash memory card.

18. A method according to claim 1, wherein said distribution policy comprises a retention policy.

19. A method for enforcing a distribution policy for documents comprising the steps of:

embedding marking functionality within an electronic document output device, using said output device to produce output of an electronic document in output form;

embedding distribution policy related information for said document on said output form using said marking functionality;

detecting marking embedded in said output using a marking detection technique;

notifying at least one distribution policy enforcement facilitation module of the detection of said marking; and

performing a policy enforcement action regarding said output form according to said notification.

20. A method according to claim 19, wherein said embedding distribution policy related information embedding comprise at least one of the following:

an arrangement embedded into said output that can be detected using electromagnetic means;

a radio frequency remote identification device;

an electronic circuit;

an electronic resonant circuit;

an electronic resonant circuit comprising a capacitor and a coil;

matched dipole antenna;

radiation emitting material;

magnetic substance;

antenna;

microwave detectable component;

excite-able quantum system;

piezoelectric component; and

acoustic resonator.

21. A method according to claim 19, wherein said output comprises printing on paper, and said embedding distribution policy related information embedding comprises at least one of the following:

an apparatus embedded in said paper;

conductive ink;

a printable electronic component;

magnetic ink;

a conductive segment;

detectable chemicals;

barcode; and

visible marking.

22. A method according to claim 19, wherein said embedding distribution policy related information embedding comprise at least one of the following:

marking which is not substantially visually perceptible;

marking which is not substantially visually discernable from a background;

a marking comprising a plurality of layers;

a plurality of markings;

a plurality of layers of markings, each layer comprising different information;

a plurality of markings, each comprising different information;

a plurality of different markings each layer comprising a different marking technique;

a plurality of layers of markings each layer comprising several different marking techniques;

marking which is substantially difficult to remove;

marking which is difficult to substantially damage;

marking operable to be localized; and

marking operable to be localized by triangulation.

23. A method according to claim 19, wherein said policy enforcement action comprising at least one of the following;

logging said notification;

reporting said notification;

logging and reporting said notification;

providing an alert;

sounding an alarm;

obstructing the exit of said document from a restricted area;

obstructing the exit of said document from a restricted area by closing an exit;

preventing a copying device from copying said document;

preventing a writing device from writing said document to digital media;

preventing a writing device from writing said document on unmarked digital media;

preventing a copying device from making an unmarked copy of said detected marked document; and

causing a copying device to embed marking on copies it creates following said detection.

24. A method according to claim 19, further comprising utilizing at least one of the following techniques:

tamper resistance for marks placed on said output;

tamper detection for marks placed on said output, said tamper detection for detecting attempts at tampering;

tamper resistance for a device used for detection of said marks;

tamper detection for a device used for detection of said mark, said tamper detection for detecting attempts at tampering;

tamper resistance for a device used for enforcement of said policy;

tamper detection for a device used for enforcement of said policy, said tamper detection for detecting attempts at tampering;

cryptography within said marking;

cryptography for communication with output devices;

encryption of marks;

encryption of communication with output devices;

encryption of communications concerning said distribution policy;

utilizing a rule based distribution policy to derive a policy for a given document;

rule based policy analyzing;

utilizing a document management system for control of distribution policy over a plurality of documents;

integration with a document management system;

importing of documents;

enforcing a document retention policy;

access control;

utilizing a personnel identification device operable to identify personnel in association with said documents;

utilizing a personnel identification device operable to identify personnel attempting to perform an action related to said document;

access control to at least one storage device;

access control to at least one storage device for enforcement by said storage device;

utilizing Optical Character Recognition to analyze the contents of documents in output form;

utilizing Optical Character Recognition to analyze the contents of marks embedded within documents in output form;

inserting marks in the form of bar codes and utilizing bar code reading to identify said marks;

utilizing tamper resistant hardware; and

triangulation for position location.

25. A method according to claim 19, further comprising defining at least two zones, such that a document is allowed to be in a first restricted zone, and is not allowed to be in a second, non-restricted, zone, and wherein said enforcing comprises actions preventing transfer of said output form from said first zone to said second zone.

26. A method according to claim 25, wherein said enforcing comprises selecting at least one of the following

not allowing the creation of copies of said documents within said second zone;

monitoring exits of said first zone utilizing marking detection; and

monitoring the entrances of said second zone utilizing marking detection.

27. A method according to claim 19, further comprising

defining at least two classes of documents,

providing each class with a mark allowing said class to be distinguished,

applying a different distribution policy for each class,

defining at least three zones,

defining that a first of said classes is allowed to be in a first restricted zone,

defining that said first class is not allowed to be in a second restricted zone,

defining that a second of said classes is allowed to be in said first restricted zone,

defining that said second class is allowed to be in said second restricted zone,

defining that said second class is not allowed to be in a third non-restricted zone,

defining that said first class is not allowed to be in said third not restricted zone, and

wherein said enforcing comprises actions controlling transfer of said output form between said respective zones in accordance with said definitions.

28. A method according to claim 27, wherein said enforcing comprises selecting at least one of:

not allowing the creation of copies of documents of said first class within said second restricted zone;

monitoring the exits of said first restricted zone utilizing marking detection;

monitoring the exits of said second restricted zone utilizing marking detection;

monitoring the entrances of said second restricted zone utilizing marking detection devices; and

monitoring the entrances of said third not restricted zone utilizing marking detection.

29. A method according to claim 19, wherein said marking comprises indication about at least one of the following:

distribution policy related information for an associated document;

distribution policy related information;

reference to a database;

reference to a database comprising distribution policy related information for an associated document;

reference to a database comprising distribution policy related information; and

an identification of an associated document.

30. A method according to claim 19, wherein said marking comprise indication about at least one of the following:

information about the contents of an associated document;

allowed recipients information for an associated document page number information for the page of a copy of an associated document;

copy number information for a copy of an associated document;

copy identification information for a copy of an associated document;

author identity information for an associated document;

managing personnel identity, information for an associated document;

classification level information for an associated document;

printing permission information for an associated document;

copying permission information for an associated document;

removal from restricted zone permission information for an associated document;

usage restriction information for an associated document; and

access control information for an associated document.

31. A method according to claim 19, further comprising embedding marking detection functionality into at least one of the following devices:

a portable media writing device;

an optical portable media writing device;

a magnetic portable media writing device;

a CD writer;

a DVD writer;

a diskette drive;

a magnetic tape writer;

a zip disk drive;

a flash memory card writing device;

a portable storage device interface;

a USB interface;

a bluetooth interface;

a firewire interface;

a IDE interface;

a SCSI interface;

a TCP/IP interface;

a infrared interface;

a wireless interface; and

a RF interface.

32. A method according to claim 19, further comprising embedding marking detection functionality into at least one of the following devices:

a scanning device;

a scanner;

a printing device;

a printer;

a plotter;

a copying device;

a photocopier;

a fax machine;

a document destruction device; and

a shredder.

33. A method according to claim 32, further comprising embedding said marking detection functionality into a document destruction device, thereby to enable said distribution policy enforcement facilitation to monitor at least one of the following:

the number of copies of said document that have been created and not destroyed;

the number of copies of said document that have been created and destroyed;

the identity of copies of said document that have been created and not destroyed;

the identity of copies of said document that have been created and destroyed;

the identity of pages of copies of said document that have been created and not destroyed;

the identity of pages of copies of said document that were created and destroyed;

the identity of sections of copies of said document that have been created and not destroyed; and

the identity of sections of copies of said document that have been created and destroyed.

34. A method according to claim 32, further comprising embedding said marking detection functionality into a document destruction device, thereby to enable said distribution policy enforcement facilitation module to monitor at least one of the following:

identities of persons possessing copies of said documents that have been created and not destroyed;

identities of persons possessing copies of said document that have been created and not destroyed;

identities of persons possessing pages of copies of said documents which have been created and not destroyed;

identities of persons possessing sections of copies of said documents which have been created and not destroyed;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discerned by utilizing a personnel identification device;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device;

identities of persons possessing pages of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device; and

identities of persons possessing sections of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device.

35. A method according to claim 19, wherein said output form of said document comprises at least one of one of the following:

a printed copy of said document;

a digital copy of said document;

a copy of said document stored on portable media;

a copy of said document stored on portable storage device;

a copy of said document stored an optical portable media;

a copy of said document stored on a magnetic portable media;

a copy of said document stored an optical media;

a copy of said document stored on a magnetic media;

a copy of said document stored on a CD;

a copy of said document stored on a DVD;

a copy of said document stored on a diskette;

a copy of said document stored on a magnetic tape;

a copy of said document stored on a zip disk; and

a copy of said document stored on a flash memory card.

36. A method according to claim 19, wherein said distribution policy comprises a retention policy.

37. A system for enforcing a distribution policy associated with an electronic document comprising:

an output device operable to produce an output form of said electronic document;

a policy reference component operable to determine a distribution policy for said document;

a marking module operable to embed a marking indicating at least the existence of said distribution policy on an output form of said electronic document produced by said output device, said marking being readable to enforce said associated marking policy, said policy reference component operable to instruct said marking module a marking detection device operable to detect marking embedded in said output;

a distribution policy enforcement facilitation module, wherein said marking detection device is operable to notify said distribution policy enforcement facilitation module about detection of said marking, and wherein said distribution policy enforcement facilitation module is operable to perform a policy enforcement action on said output form according to said notification.

38. A system according to claim 37, wherein said marking comprise at least one of the following:

an arrangement embedded into said output that can be detected using electromagnetic means;

a radio frequency remote identification device;

an electronic circuit;

an electronic resonant circuit;

an electronic resonant circuit comprising a capacitor and a coil;

matched dipole antenna;

radiation emitting material;

magnetic substance;

antenna;

microwave detectable component;

excite-able quantum system;

piezoelectric component; and

acoustic resonator.

39. A system according to claim 37, wherein said output comprises printed paper, and said marking comprises at least one of the following:

an apparatus embedded in said paper;

conductive ink;

printable electronic component;

magnetic ink;

a conductive segment;

detectable chemicals;

barcode; and

visible marking.

40. A system according to claim 37, wherein said marking comprise at least one of the following:

marking which is not substantially visually perceptible;

marking which is not substantially visually discernable from a background;

a marking comprising a plurality of layers;

a plurality of markings;

a plurality of layers of markings, each layer comprising different information;

a plurality of markings, each comprising different information;

a plurality of different markings each layer comprising a different marking technique;

a plurality of layers of markings each layer comprising several different marking techniques;

marking which is substantially difficult to remove;

marking which is difficult to substantially damage;

marking operable to be localized; and

marking operable to be localized by triangulation.

41. A system according to claim 37 wherein said policy enforcement action comprising at least one of the following;

logging said notification;

reporting said notification;

logging and reporting said notification;

providing an alert;

sounding an alarm;

obstructing the exit of said document from a restricted area;

obstructing the exit of said document from a restricted area by closing an exit;

preventing a copying device from copying said document;

preventing a writing device from writing said document to digital media;

preventing a writing device from writing said document on unmarked digital media;

preventing a copying device from making an unmarked copy of said detected marked document; and

causing a copying device to embed marking on copies it creates following said detection.

42. A system according to claim 37, wherein said marking comprises indication about at least one of the following:

distribution policy related information for an associated document;

distribution policy related information;

reference to a database;

reference to a database comprising distribution policy related information for an associated document;

reference to a database comprising distribution policy related information; and

an identification of an associated document.

43. A system according to claim 37, wherein said marking comprise indication about at least one of the following:

information about the contents of an associated document;

allowed recipients information for an associated document page number information for the page of a copy of an associated document;

copy number information for a copy of an associated document;

copy identification information for a copy of an associated document;

author identity information for an associated document;

managing personnel identity, information for an associated document;

classification level information for an associated document;

printing permission information for an associated document;

copying permission information for an associated document;

removal from restricted zone permission information for an associated document;

usage restriction information for an associated document; and

access control information for an associated document.

44. A system according to claim 37, further comprising a marking detection device embedded into at least one of the following devices:

a portable media writing device;

an optical portable media writing device;

a magnetic portable media writing device;

a CD writer;

a DVD writer;

a diskette drive;

a magnetic tape writer;

a zip disk drive;

a flash memory card writing device;

a portable storage device interface;

a USB interface;

a bluetooth interface;

a firewire interface;

a IDE interface;

a SCSI interface;

a TCP/IP interface;

a infrared interface;

a wireless interface; and

a RF interface.

45. A system according to claim 37, further comprising a marking detection device embedded into at least one of the following devices:

a scanning device;

a scanner;

a printing device;

a printer;

a plotter;

a copying device;

a photocopier;

a fax machine;

a document destruction device; and

a shredder.

46. A system according to claim 45, further comprising a marking detection device embedded into a document destruction device, operable to enable said distribution policy enforcement facilitation module to monitor at least one of the following:

the number of copies of said document that have been created and not destroyed;

the number of copies of said document that have been created and destroyed;

the identity of copies of said document that have been created and not destroyed;

the identity of copies of said document that have been created and destroyed;

the identity of pages of copies of said document that have been created and not destroyed;

the identity of pages of copies of said document that were created and destroyed;

the identity of sections of copies of said document that have been created and not destroyed; and

the identity of sections of copies of said document that have been created and destroyed.

47. A system according to claim 45, further comprising a marking detection device embedded into a document destruction device, operable to enable said distribution policy enforcement facilitation module to monitor at least one of the following:

identities of persons possessing copies of said documents that have been created and not destroyed;

identities of persons possessing copies of said document that have been created and not destroyed;

identities of persons possessing pages of copies of said documents which have been created and not destroyed;

identities of persons possessing sections of copies of said documents which have been created and not destroyed;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discerned by utilizing a personnel identification device;

identities of persons possessing copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device;

identities of persons possessing pages of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device; and

identities of persons possessing sections of copies of said documents that have been created and not destroyed, said identity being discernable by utilizing a personnel identification device.

48. A system according to claim 37, wherein said output form of said document comprises at least one of one of the following:

a printed copy of said document;

a digital copy of said document;

a copy of said document stored on portable media;

a copy of said document stored on portable storage device;

a copy of said document stored an optical portable media;

a copy of said document stored on a magnetic portable media;

a copy of said document stored an optical media;

a copy of said document stored on a magnetic media;

a copy of said document stored on a CD;

a copy of said document stored on a DVD;

a copy of said document stored on a diskette;

a copy of said document stored on a magnetic tape;

a copy of said document stored on a zip disk; and

a copy of said document stored on a flash memory card.

49. A system according to claim 37, wherein said distribution policy comprises a retention policy.