Enterprise document classification
AssigneeSophos Limited
InventorAndrew J. Thomas
Life of this patent
Estimating the term…
Abstract
A collection of documents or other files and the like within an enterprise network are labelled according to an enterprise document classification scheme, and then a recognition model such as a neural network or other machine learning model can be used to automatically label other files throughout the enterprise network. In this manner, documents and the like throughout an enterprise can be automatically identified and managed according to features such as confidentiality, sensitivity, security risk, business value, and so forth.
Claims20
A computer program product comprising computer executable code embodied in a non-transitory computer readable medium that, when executing on one or more computing devices, performs the steps of:
- selecting a plurality of documents stored in an enterprise network;
- labeling each of the plurality of documents with a business value, thereby providing a labeled data set;
- configuring a recognition model with the labeled data set to score the business value for a new document based on a file location of the new document in the enterprise network, an organization role of a user in an access control list associated with the new document, and content of the new document;
- selecting a document in the enterprise network other than the plurality of documents in the labeled data set to use as the new document;
- scoring the business value of the new document with the recognition model;
- and
- applying an enterprise policy to the new document based upon the business value, wherein the enterprise policy controls at least one of document access and document movement.
A method comprising:
- selecting a plurality of files stored in an enterprise network;
- labeling each of the plurality of files with a business value, thereby providing a labeled data set;
- configuring a recognition model with the labeled data set to score the business value for a new file based on a file location of the new file in the enterprise network, an organization role of a user in an access control list associated with the new file, and content of the new file;
- selecting a document in the enterprise network other than the plurality of files in the labeled data set to use as the new file;
- scoring the business value of the new file with the recognition model;
- and
- applying an enterprise policy to the new file based upon the business value.
A system comprising:
- a training system configured to receive a user selection of a plurality of files stored in an enterprise network and to label each of the plurality of files with a business value, thereby providing a labeled data set, to train a recognition model with machine learning to estimate a business value for a new file based on at least one of:
- an organizational role associated with a folder where a corresponding one of the plurality of files is located, a corresponding organizational role of one or more users associated with each of the plurality of files, a list of permissions for use of the corresponding one of the plurality of files, and content of the corresponding one of the plurality of files;
- a labeling system configured to locate other files in the enterprise network different than the plurality of files, to estimate the business value for each of the other files, and to label each of the other files with a label indicating an estimated business value;
- and
- a threat management facility configured to apply an enterprise policy for the enterprise network to each of the other files based on the estimated business value.
Dependencies are inferred from the claim text.