Image analysis and management

• US 9,064,125 B2
• Filed: 05/03/2013
• Issued: 06/23/2015
• Est. Priority Date: 05/03/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Frost, Simon
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US13/886,543
• Publication Number:
  US 20140331333A1
• Time in Patent Office: 781 Days
• Field of Search: 726/28
• US Class Current: 1/1
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06V 30/413 Classification of content, e.g. text, photographs or tables
• CPC Class Codes: G06V 30/416 Extracting the logical structure, e.g. chapters, sections or page numbers; Identifying elements of the document, e.g. authors
• CPC Class Codes: H04N 1/00846 based on detection of a dedicated indication, e.g. marks or the like
• CPC Class Codes: H04N 1/00859 Issuing an alarm or the like
• CPC Class Codes: H04N 1/00875 Inhibiting reproduction, e.g. by disabling reading or reproduction apparatus
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems, methods and apparatuses are described herein that allow an enterprise to analyze and manage work product images that are stored on a mobile device. Employees of an enterprise may use a mobile device to store both work product images (e.g., images of sensitive or proprietary information) and non-work product images (e.g., personal images). An enterprise may desire to enforce security protocols on the work product images, but the employee may not want the security protocols applied to the non-work product images. In some embodiments, by installing and executing an image manager that is able to analyze and manage images, the enterprise can enforce security protocols on only the work product images. Such security protocols may include the prevention of unauthorized viewing of the work product image (e.g., by encrypting the work product image) or deleting any work product image from the mobile device when the employee'"'"'s employment has ended.

Claims

1. A method, comprising:

registering a mobile device with an enterprise resource or enterprise service provided by an enterprise;

installing an image manager on the mobile device;

executing the image manager on the mobile device;

selecting, by the image manager, a first image stored on the mobile device;

performing, by the image manager, image analysis on the first image to identify one or more text elements present in the first image and one or more graphical elements present in the first image;

analyzing the one or more text elements and the one or more graphical elements to determine that at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information;

determining, by the image manager, that the first image is a work product image based on the at least one of the one or more text elements or the one or more graphical elements including sensitive or proprietary information;

responsive to determining that the first image is a work product image, the image manager storing a copy of the first image to a work product image backup location and editing the first image to prevent unauthorized viewing of the first image on the mobile device;

determining, by the image manager, that an enterprise action has occurred which indicates a user of the mobile device is no longer employed by the enterprise; and

responsive to determining that the enterprise action has occurred, performing a deletion of work product images from the mobile device, wherein performing the deletion includes deleting, by the image manager, the first image from the mobile device.

2. The method of claim 1, further comprising:

selecting, by the image manager, a second image stored on the mobile device;

performing, by the image manager, image analysis on the second image to determine whether at least one whitespace element is present in the second image;

determining, by the image manager, that the second image is a work product image based on a determination that at least one whitespace element is not present in the second image; and

responsive to determining that the enterprise action has occurred, deleting the second image when performing the deletion of work product images from the mobile device.

3. An apparatus, comprising:

one or more processors; and

memory storing executable instructions that, when executed by said one or more processors, cause the apparatus to;

perform image analysis on an image stored by the apparatus to identify one or more text elements present in the image and one or more graphical elements present in the image;

analyze the one or more text elements and the one or more graphical elements to determine that at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information;

determine that the image is a work product image based on the at least one of the one or more text elements or the one or more graphical elements including sensitive or proprietary information; and

responsive to determining that the image is a work product image, restrict image security to prevent unauthorized viewing of the image.

4. The apparatus of claim 3, wherein causing the apparatus to restrict image security to prevent unauthorized viewing of the image includes causing the apparatus to edit original image data of the image to prevent unauthorized viewing of the original image data.

5. The apparatus of claim 4, wherein the executable instructions, when executed by the one or more processors, cause the apparatus to:

determine that a user has requested to view the image;

responsive to determining that the user has requested to view the image, restore the original image data; and

cause display of the image subsequent to restoring the original image data.

6. The apparatus of claim 5, wherein the executable instructions, when executed by the one or more processors, cause the apparatus to:

determine that the user has requested to close the image; and

responsive to determining that the user has requested to close the image, reapply restricted image security to prevent unauthorized viewing of the image.

7. The apparatus of claim 3, wherein the executable instructions, when executed by the one or more processors, cause the apparatus to:

determine that a user action has occurred; and

perform the user action based on restricted image security.

8. The apparatus of claim 3, wherein the executable instructions, when executed by the one or more processors, cause the apparatus to:

determine that an enterprise event has occurred; and

responsive to determining that the enterprise event has occurred, delete only work product images stored at the apparatus and ignoring non-work product images.

9. The apparatus of claim 3, wherein causing the apparatus to perform image analysis on the image to identify the one or more text elements present in the image and the one or more graphical elements present in the image includes causing the apparatus to perform image analysis on the image to identify one or more whitespace elements.

10. The apparatus of claim 3, wherein causing the apparatus to analyze the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information comprises causing the apparatus to analyze the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes a chart.

11. The apparatus of claim 3, wherein causing the apparatus to analyze the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information comprises causing the apparatus to analyze the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes handwriting.

12. A method, comprising:

performing, by a computing device, image analysis on an image stored by the computing device to identify one or more text elements present in the image and one or more graphical elements present in the image;

analyzing the one or more text elements and the one or more graphical elements to determine that at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information;

determining that the image is a work product image based on the at least one of the one or more text elements or the one or more graphical elements including sensitive or proprietary information; and

responsive to determining that the image is a work product image, restrict image security to prevent unauthorized viewing of the image.

13. The method of claim 12, wherein restricting image security to prevent unauthorized viewing of the image includes editing original image data of the image to prevent unauthorized viewing of the original image data.

14. The method of claim 13, further comprising:

determining that occurred user has requested to view the image;

responsive to determining that the user has requested to view the image, restoring the original image data; and

causing display of the image subsequent to restoring the original image data.

15. The method of claim 14, further comprising:

determining that the user has requested to close the image; and

responsive to determining that the user has requested to close the image, reapplying restricted image security to prevent unauthorized viewing of the image.

16. The method of claim 12, further comprising:

determining that an enterprise event has occurred; and

responsive to determining that the enterprise event has occurred, delete only work product images stored at the computing device and ignoring non-work product images.

17. The method of claim 12, wherein performing image analysis on the image to identify the one or more text elements present in the image and the one or more graphical elements present in the image includes performing image analysis on the image to identify one or more whitespace elements.

18. The method of claim 12, wherein analyzing the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information comprises analyzing the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes a chart.

19. The method of claim 12, wherein analyzing the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes sensitive or proprietary information comprises analyzing the one or more text elements and the one or more graphical elements to determine that the at least one of the one or more text elements or the one or more graphical elements includes handwriting.

20. The method of claim 12, the computing device is a mobile device used by an employee of an enterprise, and all steps are performed by an image manager installed on the mobile device that enforces a work product image security protocol provided by the enterprise.