Device configured to manage secure ingestion of documents into an information system, and methods for operating such a device

• US 9,049,330 B2
• Filed: 08/14/2013
• Issued: 06/02/2015
• Est. Priority Date: 08/16/2012
• Status: Active Grant

• Current Assignee: Berkeley Information Technology Pty Ltd.
• Original Assignee: Berkeley Information Technology Pty Ltd.
• Inventors: Coles, Scott David, Naglost, Mark Peter, Hawthorne, Philip James
• Primary Examiner(s): Nguyen, Madelein
• Application Number:
  US13/967,066
• Publication Number:
  US 20140049801A1
• Time in Patent Office: 657 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04N 1/00864 Modifying the reproduction, e.g. outputting a modified copy of a scanned original details of composing or otherwise geometrically modifying originals H04N1/387
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
• CPC Class Codes: H04N 2201/3246 of data relating to permitted access or usage, e.g. level of access or usage parameters for digital rights management [DRM] related to still images

Abstract

Described herein are systems and methods for managing electronic documents. In particular, embodiments of the present invention are focussed on managing ingestion of documents into an information system, such as ingestion of documents generated by a device having scanning functionality. Embodiments include devices, software (defined by computer executable code), carrier media, and methodologies. In overview, a document is received from an ingestion source, such as a Multi Function Device (MFD) having a scanner. For example, the document is a scanned into an electronic form from a paper form. This electronic form is subjected to additional processing thereby to implement a predefined security protocol prior to the document (or a modified version thereof) being released into an information system.

Claims

1. A computer implemented method for managing ingestion of documents into an information system, the method including:

receiving, from an ingestion source, via an input coupled to the ingestion source, data indicative of a document;

storing the document in a memory location isolated from the information system;

processing the document based on a predefined security protocol thereby to determine an ingestion procedure for the document;

executing the ingestion procedure;

subject to the execution of the ingestion procedure, selectively releasing a modified version of the document to the information system, and

obtaining approval from a plurality of users prior to the document being released into the information system;

wherein obtaining approval from a plurality of users prior to the document being released into the information system includes;

(i) a first user, who is electronically authenticated based on authentication data uniquely associated with the first user, providing input representing approval by the first user; and

(ii) a second user, who is electronically authenticated based on authentication data uniquely associated with the second user, providing input representing approval by the second user.

2. A method according to claim 1 wherein processing the document based on a predefined security protocol includes performing OCR analysis.

3. A method according to claim 1 wherein processing the document based on a predefined security protocol includes determining whether the document contains one or more alert artefacts.

4. A method according to claim 3 wherein the one or more alert artefacts include one or more keywords or phrases defined in a list of alert keywords and/or phrases.

6. A method according to claim 3 wherein determined ingestion procedure includes a set of steps, wherein one or more of those steps are selected based on the determination of presence of alert artefacts in the document.

7. A method according to claim 3 wherein, based on the determination of presence of alert artefacts in the document, the ingestion procedure prevents release of any version of the document to the information system.

8. A method according to claim 1 wherein the ingestion procedure includes associating one or more aspects of metadata with the document, thereby to at least in part define the modified version of the document.

9. A method according to claim 8 wherein associating one or more of the aspects of metadata are defined subject to user input.

10. A method according to claim 9 wherein the ingestion procedure includes delivering a user interface configured to obtain the user input.

11. A method according to claim 8 wherein the one or more aspects of metadata include any one or more of:

biometric data, ingestion details, user data, security classification data, and content-based classification data.

12. A method according to claim 1 wherein the ingestion procedure includes inserting additional visible content into the document thereby at least in part define the modified version of the document.

13. A method according to claim 1 wherein the ingestion source includes a device having a document scanning functionality.

14. A method according to claim 1 where the method is performed at a device distinct from the ingestion source.

15. A method according to claim 1 wherein the method is performed by a device that includes the ingestion source.

16. A method according to claim 1 wherein implementing the ingestion procedure includes configuring a tracking system based on a set of tracking rules such that alert notifications are generated based on the tracking rules in response to the document being accessed.

17. A method according to claim 1 wherein the ingestion source includes an email account, such that the method is performed in respect of an outgoing email.

18. A method according to claim 1 wherein the first user and the second user each provide their respective inputs representing approval via a single hardware device.

19. A method according to claim 1 wherein the first user provides the input representing approval by the first user via a first hardware device, wherein the method further includes providing an electronic message to the second user, wherein the second user receives the electronic message and provides the input representing approval by the second user via a second hardware device.

20. A method according to claim 19 wherein the electronic message includes data indicative of the document.

5. A method according to 3 wherein the one or more alert artefacts include non-textual artefacts.

21. A device including:

an input configured to couple the device to a distinct device including an ingestion source;

an output configured to enable release of a document to an information system;

a processor;

a memory module containing computer executable code that, when executed via the processor, configured the device to perform a method including;

receiving, from an ingestion source, via an input coupled to the ingestion source, data indicative of a document;

storing the document in a memory location isolated from the information system;

processing the document based on a predefined security protocol thereby to determine an ingestion procedure for the document;

executing the ingestion procedure;

subject to the execution of the ingestion procedure, selectively releasing a modified version of the document to the information system; and

obtaining approval from a plurality of users prior to the document being released into the information system;

wherein obtaining approval from a plurality of users prior to the document being released into the information system includes;

(i) a first user, who is electronically authenticated based on authentication data uniquely associated with the first user, providing input representing approval by the first user; and

(ii) a second user, who is electronically authenticated based on authentication data uniquely associated with the second user, providing input representing approval by the second user.

22. A device according to claim 21 wherein the first user and the second user each provide their respective inputs representing approval via a single hardware device.

23. A device according to claim 21 wherein the first user provides the input representing approval by the first user via a first hardware device, wherein the method further includes providing an electronic message to the second user, wherein the second user receives the electronic message and provides the input representing approval by the second user via a second hardware device.

24. A device according to claim 23 wherein the electronic message includes data indicative of the document.

25. A device including:

an ingestion source;

an output configured to enable release of a document to an information system;

a processor;

a memory module containing computer executable code that, when executed via the processor, configured the device to perform a method including;

receiving, from an ingestion source, via an input coupled to the ingestion source, data indicative of a document;

storing the document in a memory location isolated from the information system;

processing the document based on a predefined security protocol thereby to determine an ingestion procedure for the document;

executing the ingestion procedure;

subject to the execution of the ingestion procedure, selectively releasing a modified version of the document to the information system; and

obtaining approval from a plurality of users prior to the document being released into the information system;

wherein obtaining approval from a plurality of users prior to the document being released into the information system includes;

(i) a first user, who is electronically authenticated based on authentication data uniquely associated with the first user, providing input representing approval by the first user; and

(ii) a second user, who is electronically authenticated based on authentication data uniquely associated with the second user, providing input representing approval by the second user.

26. A device according to claim 25 wherein the first user and the second user each provide their respective inputs representing approval via a single hardware device.

27. A device according to claim 25 wherein the first user provides the input representing approval by the first user via a first hardware device, wherein the method further includes providing an electronic message to the second user, wherein the second user receives the electronic message and provides the input representing approval by the second user via a second hardware device.

28. A device according to claim 27 wherein the electronic message includes data indicative of the document.