Method and system for analyzing the content of encrypted electronic data
    11.
    发明公开
    Method and system for analyzing the content of encrypted electronic data 审中-公开
    Verfahren und System zur Analyze des Inhaltes vonverschlüsselteelektronischen Daten

    公开(公告)号:EP1026854A3

    公开(公告)日:2005-01-26

    申请号:EP99125246.1

    申请日:1999-12-17

    发明人: Harris, Andrew S.

    IPC分类号: H04L29/06 H04L9/08

    摘要: A system for analyzing the contents of encrypted data without having access to the private cryptographic information necessary for decryption. The system interacts with a Security Provider (SP) having access to the private cryptographic information in such a manner that the system can gain access to a decrypted copy of encrypted data. In this manner, the SP system can delegate to an authorized instantiation of the system the necessary trust to access decrypted data without delegating the necessary trust to access private cryptographic information. All interaction between the SP and the system occurs through an Isolation API which ensures that only authorized instantiations of the system will obtain decrypted data and that the private cryptographic information accessible to the SP will not be revealed. When the system receives an indication of electronic data that is to be distributed or accessed, the system first determines if the data is encrypted. If so, the system interacts with an SP to obtain a decrypted copy of the data, and may provide to the SP an identifier that verifies the identity of the system. The system analyzes the contents of the decrypted copy to determine if the contents are appropriate ( e.g ., whether they contain compromised data). When necessary, the system modifies the decrypted data to remove compromised data or prevents access to or distribution of inappropriate data. In addition, the system can modify the data by adding information ( e.g ., a legal disclaimer or an indication of system approval).

    摘要翻译: 用于分析加密数据的内容而不访问解密所需的专用密码信息的系统。 该系统与具有访问专用加密信息的安全提供者(SP)进行交互,使得系统可以获得对解密的加密数据副本的访问。 以这种方式,SP系统可以将系统的授权实例委托给访问解密数据的必要信任,而不必委托访问私人加密信息的必要信任。 SP和系统之间的所有交互都通过隔离API进行,确保只有授权的系统实例才能获得解密数据,SP可访问的私有密码信息将不会被显示。 当系统接收到要分发或访问的电子数据的指示时,系统首先确定数据是否被加密。 如果是这样,系统与SP交互以获得解密的数据副本,并且可以向SP提供验证系统的身份的标识符。 系统分析解密副本的内容以确定内容是否合适(例如,它们是否包含受损数据)。 必要时,系统会修改解密的数据以消除受损数据,或阻止访问或分发不适当的数据。 此外,系统可以通过添加信息(例如,法律免责声明或系统批准的指示)来修改数据。

    MONITORING ELECTRONIC MAIL MESSAGE DIGESTS
    12.
    发明公开
    MONITORING ELECTRONIC MAIL MESSAGE DIGESTS 审中-公开
    ÜBERWACHUNGVONNACHRICHTENÜBERSICHTENELEKTRONISCHER POST

    公开(公告)号:EP1368719A2

    公开(公告)日:2003-12-10

    申请号:EP01960974.2

    申请日:2001-08-29

    IPC分类号: G06F1/00

    摘要: A method for monitoring electronic mail messages, each mail message comprising header information and a main body, particularly for protection against virus attacks and unsolicited commercial email (UCE). The method comprises generating a summary digest of only the subject line and the message content of the main body, wherein the message content may comprise textual content and/or attached files. The generated summary digest is stored in a memory, and compared with existing summary digests stored in memory. If the number of matches exceeds a threshold value, an alert signal is raised and appropriate action initiated. A timestamp may be stored with each summary digest, together with sender/recipient details and the internet protocol (IP) address of origin, to aid detection of the originator of the message.

    摘要翻译: 一种用于监控电子邮件消息的方法,每个邮件消息包括头信息和主体,特别是用于防止病毒攻击和未经请求的商业电子邮件(UCE)。 该方法包括仅生成主体行和主体的消息内容的摘要摘要,其中消息内容可以包括文本内容和/或附加文件。 生成的摘要摘要存储在内存中,并与存储在内存中的现有摘要摘要进行比较。 如果匹配次数超过阈值,则提醒警报信号并启动适当的动作。 时间戳可以与每个摘要摘要一起存储,连同发件人/接收者详细信息和原始的互联网协议(IP)地址,以帮助检测到消息的发起者。

    Mitigating policy violations through textual redaction
    13.
    发明公开
    Mitigating policy violations through textual redaction 审中-公开
    通过文本编辑器违反政策的衰减

    公开(公告)号:EP2851836A3

    公开(公告)日:2015-04-15

    申请号:EP14185524.7

    申请日:2014-09-19

    IPC分类号: G06F21/62

    摘要: A method of applying a policy comprises receiving a text and applying the policy to the text. If the policy is violated, the method further comprises redacting the text; reapplying the policy to the redacted text. In response to a result of reapplying the policy to the redacted text action is taken as determined by the policy.

    Controlling disclosure of structured data
    14.
    发明公开
    Controlling disclosure of structured data 审中-公开
    大。。。。。

    公开(公告)号:EP2851837A2

    公开(公告)日:2015-03-25

    申请号:EP14185525.4

    申请日:2014-09-19

    IPC分类号: G06F21/62

    摘要: A method of applying a policy to a text comprises searching the text for data having a predefined form; and searching a dataset for additional data associated with any data having the predefined form found in the text. A supplementary search query is generated using said additional data; and the text is searched using the supplementary search query. The policy is then applied based on a result of the search using the supplementary search query.

    摘要翻译: 将策略应用于文本的方法包括:在文本中搜索具有预定格式的数据; 以及在数据集中搜索与文本中找到的具有预定义形式的任何数据相关联的附加数据。 使用所述附加数据生成补充搜索查询; 并使用补充搜索查询来搜索文本。 然后基于使用补充搜索查询的搜索结果来应用该策略。

    Text, character encoding and language recognition
    16.
    发明公开
    Text, character encoding and language recognition 有权
    文字,Zeichencodierung und Sprachenerkennung

    公开(公告)号:EP2506154A3

    公开(公告)日:2013-01-23

    申请号:EP12162469.6

    申请日:2012-03-30

    摘要: A method is disclosed, for recognizing whether some electronic data is the digital representation of a piece of text and, if so, in which character encoding it has been encoded. A fingerprint is constructed from the data, wherein the fingerprint comprises, for each of a plurality of predetermined character encoding schemes, at least one confidence value, representing a confidence that the data was encoded using said character encoding scheme. The fingerprint also comprises a frequency value for each of a subset of byte values, each frequency value representing the frequency of occurrence of a respective byte value in the data. A statistical classification of the data is then performed based on the fingerprint.
    The method may be applied to spam classification.

    摘要翻译: 公开了一种用于识别一些电子数据是否是一段文本的数字表示的方法,如果是,则在其中对其进行了编码的字符编码。 从数据构建指纹,其中对于多个预定字符编码方案中的每一个,指纹包括表示使用所述字符编码方案对数据进行编码的置信度的至少一个置信度值。 指纹还包括字节值子集中的每一个的频率值,每个频率值表示数据中相应字节值出现的频率。 然后根据指纹进行数据的统计分类。 该方法可以应用于垃圾邮件分类。

    A method and system for retrieving a resource
    17.
    发明公开
    A method and system for retrieving a resource 审中-公开
    方法和设备检索信息

    公开(公告)号:EP2290557A3

    公开(公告)日:2011-05-04

    申请号:EP10173963.9

    申请日:2010-08-25

    发明人: Hockey, Alyn

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30861

    摘要: A method for retrieving a resource such as a data file includes determining an email address of a user requesting the retrieval, and checking whether a characteristic condition associated with said resource is satisfied. If the characteristic condition is not satisfied, for example if the size of the resource exceeds a threshold, a message is returned to the user indicating that said request for retrieval of said resource has been received, and the request is placed in a queue. The queue is processed on the basis of a rule, and the resource retrieved when said queue has been sufficiently processed, when the user can be notified by means of the email address that the resource has been retrieved. Also disclosed is a similar process for uploading data files in response to a request.