Patent ID: 8468595
Filing Date: 2013-06-18
Classification: G06F,H04L

Abstract:
1. A computer-implemented method performed at an endpoint computer of a document management system for evaluating raw data prior to modification of the raw data, the method comprising: receiving a predefined security policy by a local policy engine at the endpoint computer from a central policy service at a server; inserting injection code a hooking point in a dynamic link library by a code injector executing on the endpoint computer into an application executing on the endpoint; executing the injection code by the endpoint computer in response to the application execution at an execution address entry; receiving raw content set for encryption; creating a communication pipe from the injection code to an analysis application executing on the endpoint computer in a context of the application execution; copying the raw content to the analysis application by way of the communication pipe; if the raw content comprises a document, then checking whether a record of the document is in a black list; if the record does not exist, then determining whether the document contains sensitive information by applying a matching technique, and if the document is determined to contain sensitive information, then creating a record for the document and adding the record to the black list; and if the record exists, then using the predefined security policy to determine an appropriate action command before the document is exported out of the endpoint computer.