System, method and computer program product for maintaining a confidentiality of data on a network

• US 8,590,002 B1
• Filed: 11/29/2006
• Issued: 11/19/2013
• Est. Priority Date: 11/29/2006
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Chebiyyam, Gopi Krishna, Basavapatna, Prasanna Ganapathi
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US11/564,745
• Time in Patent Office: 2,547 Days
• Field of Search: 726/1, 726/22
• US Class Current: 726/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A data processing system, method and computer program product are provided. In use, data on a network is identified. In addition, a policy is identified. Further, the data is processed based on the policy for maintaining a confidentiality of the data.

Claims

1. A method to be performed in conjunction with a processor operating in an electronic environment, comprising:

identifying data on a network;

identifying a policy having an associated confidentiality status;

wherein the policy is platform-independent;

processing the data based on the policy for maintaining a confidentiality of the data;

wherein processing the data includes;

determining whether the data includes a tag identifying a confidentiality status of the data and a time limit of the confidentiality of the data beyond which the data is to be made unavailable;

processing the data according to the policy if it is determined that the data includes the tag and the confidentiality status of the data identified by the tag matches the confidentiality status associated with the policy; and

wherein if it is determined that the data does not include the tag, generating the tag for the data.

2. The method as recited in claim 1, wherein the data includes network traffic.

3. The method as recited in claim 1, wherein the data includes electronic mail.

4. The method as recited in claim 1, wherein the data is included in a database including one or more of a mail server database and a pubic folder database.

5. The method as recited in claim 1, wherein the data is received at a server.

6. The method as recited in claim 5, wherein the data is received utilizing a protocol including one of simple mail transfer protocol, hypertext transfer protocol, and file transfer protocol.

7. The method as recited in claim 5, wherein the server identifies the policy utilizing a security system.

8. The method as recited in claim 7, wherein the security system processes the data based on the policy for maintaining the confidentiality of the data.

9. The method as recited in claim 1, wherein the data is processed according to a determination of whether the policy is violated in association with the data.

10. The method as recited in claim 1, wherein processing the data includes removing the data from a storage location in which the data is stored.

11. The method as recited in claim 10, wherein the policy includes a threshold period of time, and the data is removed from the storage location after the threshold period of time.

12. The method as recited in claim 1, wherein processing the data includes redirecting the data from a first destination address to a second destination address.

13. The method as recited in claim 1, wherein processing the data includes removing an attachment associated with the data.

14. The method as recited in claim 1, wherein processing the data includes allowing the data to be transmitted to a source address.

15. The method as recited in claim 1, wherein the policy is utilized by a plurality of different security systems.

19. The method as recited in claim 1, wherein the tag identifies a scope of the confidentiality.

20. The method as recited in claim 1, wherein the tag identifies one or more users authorized to access the data.

21. The method as recited in claim 1, wherein the tag is applied to the data.

22. The method as recited in claim 1, wherein the tag is separate from the data.

23. The method as recited in claim 1, wherein the policy includes at least one rule, the rule associated with an attribute utilized for maintaining a confidentiality of the data.

24. The method of claim 1, wherein processing the data further includes determining whether a portion of the data is confidential if it is determined that the data does not include the tag.

16. A computer program product embodied on a non-transitory tangible computer readable medium for performing operations, comprising:

identifying data on a network;

identifying a policy having an associated confidentiality status;

wherein the policy is platform-independent;

processing the data based on the policy for maintaining a confidentiality of the data;

wherein processing the data includes;

determining whether the data includes a tag identifying a confidentiality status of the data and a time limit of the confidentiality of the data beyond which the data is to be made unavailable;

processing the data according to the policy if it is determined that the data includes the tag and the confidentiality status of the data identified by the tag matches the confidentiality status associated with the policy; and

wherein if it is determined that the data does not include the tag, generating the tag for the data.

17. A system, comprising:

a hardware processor for identifying data on a network, the processor further adapted for processing the data based on the policy for maintaining a confidentiality of the data, wherein the policy has an associated confidentiality status;

wherein the policy is platform-independent;

wherein the system is operable such that processing the data includes determining whether the data includes a tag identifying a confidentiality status of the data and a time limit of the confidentiality of the data beyond which the data is to be made unavailable;

processing the data according to the policy if it is determined that the data includes the tag and the confidentiality status of the data identified by the tag matches the confidentiality status associated with the policy; and

wherein if it is determined that the data does not include the tag, generating the tag for the data.

18. The system as recited in claim 17, further comprising memory coupled to the processor via a bus.