Methods and systems for auto-marking, watermarking, auditing, reporting, tracing and policy enforcement via e-mail and networking systems

• US 8,200,793 B2
• Filed: 10/07/2003
• Issued: 06/12/2012
• Est. Priority Date: 10/22/2002
• Status: Active Grant

• Current Assignee: Gula Consulting Limited Liability Company (Intellectual Ventures LLC)
• Original Assignee: Alearo Properties Limited Liability Company (Intellectual Ventures LLC)
• Inventors: Touboul, Shlomo, Yusin, Robert Edward
• Primary Examiner(s): Elchanti, Hussein A.
• Assistant Examiner(s): Anwari, Maceeh
• Application Number:
  US10/680,962
• Publication Number:
  US 20040153515A1
• Time in Patent Office: 3,171 Days
• Field of Search: 709/222, 709/224, 709/206
• US Class Current: 709/222
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/234 for tracking messages
• CPC Class Codes: H04L 63/0281 Proxies

Abstract

A method for tracking the routing of an electronic document, including embedding a unique identifier within an electronic document and monitoring e-mail messages transmitted from senders to recipients, for detection of e-mail messages having the electronic document embedded therewithin or attached thereto, based on the unique identifier. A system and computer readable storage medium are also described and claimed.

Claims

1. A method comprising:

embedding a control mark within an electronic document created by a document word processor,

wherein the control mark remains embedded in the electronic document after changing a body of the electronic document with the document word processor;

wherein the control mark cannot be changed by or removed with the document word processor; and

wherein the control mark includes an encrypted check sum configured to self-authenticate or self-validate the electronic document;

detecting at least one packet containing the electronic document transmitted over a network;

making a determination that the electronic document has been changed in response to detecting the control mark in the electronic document contained in the at least one packet; and

blocking access to the electronic document in response to the determination.

2. The method of claim 1 further comprising logging an audit record in response to detecting the at least one network packet containing the electronic document, wherein the audit record is configured to identify a distribution route of the electronic document.

3. The method of claim 2 wherein the audit record includes a destination of the transmission.

4. The method of claim 2 wherein the audit record includes a date and time of the transmission.

5. The method of claim 1 wherein said detecting at least one packet includes detecting at least one packet transmitted internally within the network.

6. The method of claim 1 wherein said detecting at least one packet includes detecting at least one packet transmitted from within the network to an external network.

7. The method of claim 1 wherein said detecting at least one packet includes detecting at least one packet transmitted to the network from an external network.

8. The method of claim 1 wherein the at least one packet is transmitted in response to an FTP download.

9. The method of claim 1 wherein the at least one packet is transmitted in response to an HTTP download.

10. The method of claim 1 wherein the at least one packet is transmitted in response to an Instant Messenger download.

11. A memory device having instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations comprising:

embedding a control mark within an electronic document created by a document word processor,

wherein the control mark remains embedded in the electronic document after changing a body of the electronic document with the document word processor;

wherein the control mark cannot be changed by or removed with the document word processor; and

wherein the control mark includes an encrypted check sum configured to self-authenticate or self-validate the electronic document; and

detecting transmitted network packets containing the electronic document, based on the control mark;

making a determination that the electronic document contained in at least one of the transmitted packets has been changed; and

blocking access to the electronic document contained in the at least one of the transmitted packets in response to the determination.

12. The memory device of claim 11 wherein execution of the instructions cause the processing device to perform operations further comprising logging transmission information including a distribution route of the electronic document in an audit record in response to detecting the transmitted network packets.

13. The memory device of claim 12 wherein the audit record includes a date and time associated with detecting the transmitted network packets.

14. The memory device of claim 12 wherein the audit record includes a destination of the transmitted network packets.

15. The memory device of claim 11 wherein said detecting further includes monitoring network packets transmitted internally within an organization network.

16. The memory device of claim 11 wherein said detecting further includes monitoring network packets transmitted from an internal organization network to an external organization network.

17. The memory device of claim 11 wherein said detecting further includes monitoring network packets transmitted to an internal organization network from an external organization network.

18. The memory device of claim 11 wherein said detecting transmitted network packets occurs in response to an FTP download.

19. The memory device of claim 11 wherein said detecting transmitted network packets occurs in response to an HTTP download.

20. The memory device of claim 11 wherein said detecting transmitted network packets occurs in response to an Instant Messenger download.