RU2395117C2 - Method and system for analysis of printed document for availability of confidential information - Google Patents

Abstract

FIELD: information technologies. ^ SUBSTANCE: in invention it is automatically detected, which is the category of printed document, and unauthorised printing is prevented. In method printed document is analysed for availability of confidential information, system comprises user device, printing device, server of printing control service, converter unit, server of databases, file storage, unit of recognition, server of context analysis and alarm service. ^ EFFECT: provision of information safety, detection of document flows containing confidential information and requiring high extent of control. ^ 2 cl

Description

The invention relates to the field of data transmission networks, and more specifically to a system and method for managing document management and printing processes.

A well-known accounting system for the provision of postal banking services, providing automatic transfer of pensions to current retirement accounts, allows you to enter electronic document management, automation of mutual settlements, reporting and control (patent RU 2100841 G06F 17/60, 1997).

It is also known a device for counting documents containing a guide bar defining a guide surface for transporting documents, right, center and left sensors generating appropriate signals in response to the presence of a part of the document in the corresponding part of the guide surface, digital devices for sampling the signal left or right, or central sensors with obtaining their corresponding representative values and a programmable controller connected to a digital device Orok and programmed to receive the count of documents, control signals for controlling operation of the apparatus, and status signals for monitoring the operation in response to the respective representative values (patent RU 2144697 G07D7 / 04, 2000 YG).

The described analogues are complex and not adapted to solve the problem of determining the average print and copy volumes in the presence of several users.

The closest analogue of the present invention is a document management system containing at least one server connected to a data network, and at least one user device is connected to said data network, while said server is connected to at least with two peripheral devices, said server being connected to at least one device for calculating print volumes and copying at least one device for calculating volumes printing and copying for each peripheral device with at least one sensor of technical wear of the peripheral device, and the server data storage device contains information about the cost of one printed or copied sheet for each of at least two peripheral devices (see patent RU 59857 U1, G06F 12/00, 2006).

The disadvantages of the closest analogue of the present invention include the inability to determine the presence of unauthorized printing.

Providing alerts and preventing unauthorized printing is one of the objectives of the invention. Thus, the aim of the invention is to increase information security.

Data leakage through printing and copying equipment is becoming an increasingly dangerous threat to the company's information security every year.

According to statistics, the costs of organizing paper workflows reach 10% of the total costs of the enterprise: these are not only direct (the cost of consumables, spare parts, maintenance of equipment), but also indirect costs (time of employees to produce documents, downtime of equipment, illiquid balances of these materials in warehouses, etc.).

The above problems are especially relevant for large enterprises with large print volumes.

The most effective means of leakage protection is the use of integrated information products in document management systems, one of which is the proposed invention -ASUPiM (Automated Print Management and Monitoring System), which is the core of KSUPPiK (an integrated system for managing printing and copying processes).

The purpose of the system is to control the contents of the printed document for the presence of confidential information immediately after the fact of printing, to determine the rights of users to print this information and to notify the security department if an unauthorized print session is detected.

Thus, the objectives of the invention are:

1. improving the information security of the enterprise;

2. creating a centralized system for monitoring printing processes in the organization.

The tasks are solved using the proposed integrated system for managing printing processes (KSOPP), which allows you to:

1. control of document printing processes;

2. management of printing processes;

3. fleet management of copy and printer equipment,

4. full maintenance of copy and printer

equipment.

The technical results of the proposed management of printing processes are:

1. ensuring information security;

2. determination of document flows containing confidential information and requiring an increased degree of control;

3. notification by the security service system of the presence of an unauthorized seal;

4. automatic determination of which category the printed document belongs to;

5. Prevention of unauthorized printing. An integrated printing process management system provides automatic control and optimized document management.

The indicated technical results are achieved by implementing a method for analyzing a printed document for the presence of confidential information in it, including the steps of:

sending a command from the user device to the printing device to print a document;

create a document image file;

receipt by the printing device of a command to print a document;

printing the document by the printing device, and after creating the document image file, the resulting image of the document:

send via the server print control services to the converter unit;

save information about him in the database;

using the converter block they convert the image of the document, receiving the text contained in the image;

save the received text to a file as a text image of the document;

the text image of the document is stored in the file storage;

send a text image of the document to the context analysis server;

loading key phrases and their sequential search in the text image of the document without regard to case and morphology;

perform a sequential search of the contents of the text of the document among all documents included in the templates;

determine morphological groups and determine on their basis the probability of the content of confidential information in the text;

in case of detection of confidential information in the said text image of the document, they send a corresponding message to the alarm service at the workplace of an employee of the security department and record the fact in the database.

A method for analyzing a printed document for the presence of confidential information is implemented by a context analysis system for the presence of confidential information in the printed document, the system comprising a user device, a printing device, a print control service server, a converter unit, a database server, file storage, a recognition unit, a server context analysis and signaling service, the user device being connected to a printing device and a print control service server, with of the connections to the database server and the converter unit, connected to the database server, file storage and a detection unit coupled to the context analysis server connected to the file storage service and signaling.

The system is running special software.

The functionality of the servers, blocks and devices that make up the proposed system is ensured by the developed software according to certificates No.2008611915, No.2008611916 and No.2008611917.

The program according to certificate No.2008611915 "The system for monitoring printed documents" is designed to monitor printed documents; organization and analysis of statistics of the print for the periods specified by the user; outputting analysis results in tabular and graphical forms with the possibility of additional data aggregation operations; printing analysis results; preparation of a summary report on the press in the organization for the specified period.

The program according to certificate No.2008611916 “Service for monitoring print queues” allows you to organize the collection of information about printing devices, printing processes in the system, as well as images of printed documents and recording information in a database; collect information from customer services when organizing print monitoring.

The program according to certificate No.2008611917 “Context analysis service server” is intended for full-text search and contextual analysis of data in accordance with the specified parameters of the information sought and user rights to print using file search functions on the Searchlnform platform, as well as organizing communication of client applications of the system based on protocols TCP and UDP.

The system is based on client-server architecture. Differentiation of access rights to the press is carried out using categories of documents. Each category is a set of document templates, united by a common thematic focus. For each user, a set of categories is allowed for printing.

The server side is based on the Searchlnform SDK functionality. The main function of the server part is to evaluate in percentage terms the degree of similarity (relevance) of the contents of this printed document with the contents of the template documents of each category.

Searchlnform server provides for the structuring of disparate information within the enterprise and the creation of a search system and further processing of documents.

Information exchange between the client and server parts is carried out using the standard UDP protocol.

The client part is the notification service (user device), which is installed at the workplace of an employee of the security department and is a resident module, which, when a message is received from the server part, displays a message window.

Identification of the belonging of the printed document to one of the existing categories is the key points of this stage of analysis. If the user does not have the right to print documents of the category to which the printed document belongs to the analysis, a message is sent to the security department by the analysis unit informing about the fact of unauthorized printing.

When implementing the system, the following was used: C # language features on the Framework.NET 2.0 platform using ADO.NET to write working code for programs; C ++ language features using MFC for writing program working code; Microsoft SQL Server 2005 for creating and managing the databases used by the system; Searchlnform Server SDK (Searchlnform server) for direct access to functions that determine the degree of similarity between the contents of a printed document and the contents of pre-created text templates.

The interaction of client and server applications is implemented based on the TCP and UDP network protocols.

This system for analyzing a printed document for the presence of confidential information in it implements a method for analyzing a printed document for the presence of confidential information in it, as follows.

A command is issued to the user device to print the document, while the image of the document is in the printer format (if the user uses the Windows operating system, the file of this image will have the extension * .spl), which will be printed on, it will be sent to the printer itself, and to the print control service server (SpMS block). At the same time, the file name contains the date and time the image of the document was created, its size, identifier and format.

The print control server sends the document image in the printer driver format to the document image conversion unit, while sending to the database server information about which user device the print request was made to, the name of the user who sent the request, and its access rights, name printed document, the time of creating the image of the document in the format of the printer driver. At the same time, all received information is stored on the database server.

In the unit for converting document images (converter unit), the image of the printed document in the format of the printer driver is converted to a cross-platform format for electronic documents (preferably the Portable Document Format (PDF) created by Adobe Systems).

Further, the document converted to PDF receives a new name and enters the file storage, where it is saved.

The document also enters the recognition unit, in which the aforementioned document in PDF format with the contents of the original document in graphic form is converted into a PDF file with the contents of the original document in text form and sent to the context analysis server.

The context analysis server compares the text contained in the file received from the recognition unit with each of the files included in N templates, obtaining the value of coincidence (relevance), expressed as a percentage. The category of the template, the documents of which are most relevant and exceed the acceptable level, is assigned to the analyzed file received from the recognition unit.

A contextual analysis of the contents of a text image of a document on the fact of the availability of confidential information consists of three stages:

preliminary stage, stage of categorization and stage of clustering. These steps are implemented by the context analysis server.

Preliminary Stage:

At this stage, key phrases are downloaded and searched sequentially in the text of the document, not case sensitive. Search at this stage does not take into account morphology. The presence in the text of at least one phrase from the list indicates the unambiguous belonging of the document to the chipboard.

Stage of categorization.

At this stage, a sequential search is made for the contents of the text of the document among all documents included in the templates, and the degree of similarity (relevance) with each of them is determined. Then, the maximum relevance value is determined among the sample from which the threshold value is calculated. Next, the average relevance value within each template is calculated. Exceeding the average relevance value over the threshold value indicates that the document belongs to the category of this template. The decision on the unambiguous belonging to a certain category is made only in the case when the threshold value is exceeded by the average relevance value of one template. In other cases, it is necessary to carry out the clustering stage.

Clusterization Stage.

At this stage, the text of the document is divided into words with the definition of morphological groups and the determination on their basis of the probability of containing confidential information in the text (for example, a list of names, phones, identifiers, etc.).

The context analysis server determines whether the user has the right to print documents of the assigned category and, in the absence of rights, sends a command to the database server to register the event of unauthorized printing, and also issues a corresponding message to the alarm service, which is the workplace of the security department employee.

This method of analyzing a printed document for the presence of confidential information in it can be implemented using a computer-readable storage medium containing a software product that, when executed on an electronic computer, manages a document management system.

Claims (2)

1. The method of analysis of the printed document for the presence of confidential information, which consists in the fact that:
send a command from the user device to the printing device to print a document;
create a document image file;
receive a printing device command to print a document;
produce document printing by a printing device, characterized in that it further comprises the steps of:
after creating the image file of the document, the resulting image of the document is sent via the print control service server to the converter unit;
using the converter block they convert the image of the document, receiving the text contained in the image;
write information about the file to the database;
save the received text in a file as a text image of the document;
the text image of the document is stored in the file storage;
send a text image of the document to the context analysis server;
loading key phrases and their sequential search in the text image of the document without regard to case and morphology;
perform a sequential search of the contents of the text of the document among all documents included in the templates;
determine morphological groups and determine on their basis the probability of the content of confidential information in the text;
in case of detection of confidential information in the said text image of the document, send a corresponding message to the alarm service. 2. A system for analyzing a printed document for confidential information containing a user device, a printing device, a print control server, a converter unit, a database server, a file storage, a recognition unit, a context analysis server and an alarm service, the user device being connected to a printing device and a print control service server connected to a database server and a converter unit connected to a database server, file storage and a distribution unit awareness connected to the context analysis server connected to the file storage and signaling service.