Enterprise document classification
AssigneeSophos Limited
InventorAndrew J. Thomas
Life of this patent
Estimating the term…
Abstract
A collection of documents or other files and the like within an enterprise network are labelled according to an enterprise document classification scheme, and then a recognition model such as a neural network or other machine learning model can be used to automatically label other files throughout the enterprise network. In this manner, documents and the like throughout an enterprise can be automatically identified and managed according to features such as confidentiality, sensitivity, security risk, business value, and so forth.
Claims23
A computer program product comprising computer executable code embodied in a non-transitory computer readable medium that, when executing on one or more computing devices, performs the steps of:
- selecting a plurality of documents stored in an enterprise network;
- automatically labeling each of the plurality of documents with a category for sensitivity according to a location, an access control list, and content of each of the plurality of documents, thereby providing a labeled data set;
- configuring a recognition model to identify the category for a new file based on the plurality of documents in the labeled data set;
- locating other documents in the enterprise network different than the plurality of documents;
- associating a label with each of the other files based upon the category for sensitivity selected by the recognition model for each of the other files;
- and
- applying an enterprise policy for sensitivity to each of the other files based upon the category identified in the label, wherein the enterprise policy controls at least one of file access and file movement.
A method comprising:
- selecting a plurality of files stored in an enterprise network;
- labeling each of the plurality of files according to a category selected from two or more predetermined categories, thereby providing a labeled data set;
- configuring a recognition model to identify the category from one of the two or more predetermined categories for a new file based on the plurality of files in the labeled data set;
- locating other files in the enterprise network different than the plurality of files;
- associating a label with each of the other files based upon the category selected for each of the other files from the two or more predetermined categories by the recognition model;
- and
- applying an enterprise policy to each of the other files based upon the category identified in the label.
A system comprising:
- a training system configured to receive a user selection of a plurality of files stored in an enterprise network, to automatically label each of the plurality of files according to a category selected from two or more predetermined categories, thereby providing a labeled data set, and to train a recognition model with machine learning to identify the category for a new file based on the plurality of files in the labeled data set;
- a labeling system configured to locate other files in the enterprise network different than the plurality of files, and to associate a label with each of the other files based upon the category selected by the recognition model for each of the other files from the two or more predetermined categories;
- and
- a threat management facility configured to apply an enterprise policy for the enterprise network to each of the other files based on the category identified in the label.
Dependencies are inferred from the claim text.