System and method remapping identifiers to secure files

A system for processing an incoming document data stream, the system comprising:

• a pre-processor in communication with the incoming data stream, the pre-processor configured to perform the steps of:
• monitoring a document data stream for control file identifiers;
• upon encountering a first control file identifier referring to a first document control file, creating a mapping of the first control file identifier to a new storage location;
• transforming the first control file identifier in the document data stream to a second control file identifier that refers to the new storage location specified by the mapping;
• in the data stream, transforming the first control file identifier to the second control file identifier referring to the new storage location based on the mapping of the first control file identifier;
• copying a remote document control file identified by the first control file identifier, in real time, to a document control file at the new storage location specified by the mapping;
• protecting the document control file by one of a digital signature and other authentication mechanism;
• authenticating the document control file;
• storing the authenticated document control file at the new storage area located within a trusted repository;
• processing the data stream with the second control file identifier, the processing of the data stream comprising:
• determining the validity of data in the document data stream against the protected document control file;
• and
• in response to an indication by the control file and determining that data in the data stream is invalid against the control file removing the data, performing one of the steps of:
• marking the data and sending the data to a processor;
• and
• sending an error response to an originator of the data stream.

A network appliance for use as an XML firewall, the network appliance comprising:

• at least one processor, the at least one processor configured to perform the steps of:
• monitoring a document data stream including transactions in XML format for XML schema file identifiers;
• upon detecting a first XML schema file identifier, transforming the first XML schema file identifier into a second file identifier based on a mapping to a storage location different from a storage location indicated by the first XML schema file identifier;
• obtaining an XML schema file identified by the first XML schema file identifier, copying the XML schema across the firewall and storing the XML schema file, in real time, in said storage location based on the mapping;
• protecting the stored XML schema file by one of a digital signature and other authentication mechanism;
• authenticating the document control file;
• and
• storing the authenticated document control file at the new storage area located within a trusted repository;
• determining whether transactions in the data stream are valid using the protected stored XML schema file;
• and
• in response to indications in the control file and determining that transactions in the data stream are invalid against the XML schema file, the at least one processor performs one of the steps of:
• removing the transaction;
• marking the transaction;
• and
• sending an error response to an originator of the data stream.