Preventing Sensitive Data Leaks from Company Communications

This patent describes a system that watches for unsent drafts of company communications, checks their content for sensitive data based on your current situation, and can block them or warn you if they seem risky.

What it covers

This patent is about stopping sensitive information from accidentally leaving a company. It works by monitoring user devices that are connected to a company's communication system. The system first figures out your 'user context' – things like where you are or what device you're using. Based on this context, it picks a specific 'data loss prevention' (DLP) policy. This policy looks for certain actions, like creating a new, unsent draft of an email or message. When you create such a draft, the system analyzes its content to see if it contains sensitive information. If the content is deemed risky according to the policy, the system can take action, such as showing you a warning, preventing you from sending it, or even blocking access to the draft itself.

What it doesn't cover

• —Preventing data loss for communications that have already been sent
• —Policies that are not dynamic or do not change based on user context
• —Systems that do not analyze the content of the communication draft
• —Actions taken on communications that are not pre-transmission drafts
• —Monitoring communications on devices not accessing an enterprise platform

The clever bit

The innovation lies in making data loss prevention 'dynamic' and 'user-context-based.' Instead of applying a single, rigid rule to everyone all the time, the system adapts its vigilance based on who you are, where you are, and what device you're using, making security smarter and less intrusive.

Why it matters

In today's world, companies handle vast amounts of sensitive data. This patent addresses the critical need to prevent accidental data leaks, which can lead to significant financial and reputational damage. By dynamically adjusting security policies based on user context, it offers a more intelligent approach to data loss prevention than static, one-size-fits-all solutions.

Real-world examples

• 1.Enterprise email clients with built-in DLP
• 2.Corporate instant messaging platforms
• 3.Cloud-based productivity suites with security monitoring
• 4.Software that scans unsent documents for sensitive information