James D Nisbet

US Patent:

7523301, Apr 21, 2009

Filed:

Sep 24, 2004

Appl. No.:

10/949545

Inventors:

James Donald Nisbet - Menlo Park CA, US
James Christopher Wiese - Dublin CA, US
David Alexander Reizes - Menlo Park CA, US
Stephen Crosby Hoyt - Palo Alto CA, US

Assignee:

RSA Security - Bedford MA

International Classification:

G06F 11/30

US Classification:

713153, 726 4, 726 11, 726 12, 726 13, 713154, 715752, 715205, 715229, 706 47, 706 60, 707 8, 707 9, 707 10

Abstract:

Monitored content is analyzed to determine full and partial matches to previously classified content. Monitored content matching previously classified public content is classified as public, even if the monitored content is also found to match previously classified private content. In other words, public classification “overrides” potentially private classification. Monitored content matching only previously classified private content is classified as private. All remaining otherwise unclassified monitored content is classified as unknown. Monitored content is analyzed with respect to a session. If any content in a session is private, then the session is classified as private. If all content in a session is public, then the session is classified as public. Otherwise, the session is classified as unknown. In a related aspect, a set of policies are searched for a first match in part according to the classification, and a designated action taken if the first match is found.

US Patent:

7954151, May 31, 2011

Filed:

Sep 24, 2004

Appl. No.:

10/949552

Inventors:

James Donald Nisbet - Menlo Park CA, US
James Christopher Wiese - Dublin CA, US
David Alexander Reizes - Menlo Park CA, US
Stephen Crosby Hoyt - Palo Alto CA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 11/00

US Classification:

726 22, 713154

Abstract:

Monitored content is classified to determine partial matches with fragments of documents. A set of redundant keys, or sliding sectional fingerprints, are computed for every possible alignment of the documents with respect to the monitored content. The keys are stored in repositories according to the classification of the corresponding documents. Sectional fingerprints are computed for the monitored content, and the repositories are searched. If a match is found in a repository corresponding to public content, then the monitored data section is classified as public. If a match is found only in a repository corresponding to private content, then the data section is classified as private. Otherwise, the data section is classified as unknown. In a related aspect, a set of policies are searched for a first match in part according to the classifications of the monitored data sections, and a designated action taken if the first match is found.

US Patent:

8365247, Jan 29, 2013

Filed:

Jun 30, 2009

Appl. No.:

12/495491

Inventors:

James Wiese - San Ramon CA, US
James Nisbet - Menlo Park CA, US
Mark Weng Soon Wah - Raleigh NC, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 7/02
G06F 17/30

US Classification:

726 2, 707698, 707747, 713176, 713180, 713181, 726 13

Abstract:

Electronic circuitry includes an input/output (I/O) interface, memory which stores a set of database fingerprints generated from records of a database, and an analyzing circuit coupled to the I/O interface and the memory. The analyzing circuit is constructed and arranged to derive a set of sample tokens from electronic data under test (e. g. , an email, an electronic document, etc. ), and form a set of sample fingerprints from the set of sample tokens. Each sample fingerprint is based on a sample token of the set of sample tokens. The analyzing circuit is further constructed and arranged to output a result signal based on a comparison between the set of sample fingerprints and the set of database fingerprints. The result signal provides an indication of whether the electronic data under test includes particular information from the database.

US Patent:

7516492, Apr 7, 2009

Filed:

Sep 24, 2004

Appl. No.:

10/949539

Inventors:

James Donald Nisbet - Menlo Park CA, US
James Christopher Wiese - Dublin CA, US
David Alexander Reizes - Menlo Park CA, US
Stephen Crosby Hoyt - Palo Alto CA, US

Assignee:

RSA Security Inc. - Bedford MA

International Classification:

G06F 11/30

US Classification:

726 27, 726 4, 707 1, 707 2, 707 3, 707 10, 709203, 709230, 709224, 709221, 709206, 717136

Abstract:

In one embodiment, documents accessible via a designated public account are classified as public. In another embodiment, documents accessible according to a designated public access control list are classified as public. In some embodiments, all documents not classified as public are classified as private. Content in the public documents is linguistically analyzed, resulting in a set of keys for use in subsequent full and partial content matching. The keys and associated file names are stored in a public-content identification repository. Similarly, content in the private documents is linguistically analyzed, and the results are stored in a private-content identification repository. Subsequently, full and partial content matching is performed on monitored content according to information in the public and private repositories. In a related aspect, monitored content found to correspond to private content is selectively flagged during electronic transmission or optionally prevented from distribution according to a set of defined monitoring policies.