System, method, apparatus and computer programs for securely using public services for private or enterprise purposes

A system to process content for an enterprise, comprising:

• at least one data processor;
• at least one non-transitory computer readable memory connected with the at least one data processor, the memory storing software program instructions that are executable by the at least one data processor;
• and
• at least one interface to a data communications network, where execution of the software program instructions by the at least one data processor controls the system to review at an enterprise monitor, using at least one enterprise policy, content that is to be sent to a public service via said at least one interface and the data communications network to determine if the content comprises secure data, where the content comprises unsecured, publically viewable content at the public service and the secure data that is not publically viewable content and that is viewable only by a client associated with the enterprise;
• where execution of the software program instructions by the at least one data processor further controls the system, in response to identifying that the content comprises secure data, to modify the content by applying a transformation to the secure data and tokenizing the content to be sent to the public service via said at least one interface such that as a result of the transformation a presence of secure data will be visually imperceptible when the content is rendered at the public service, and
• where execution of the software program instructions by the at least one data processor further controls the system, in response to the client associated with the enterprise accessing the public service to retrieve the content, to identify the presence of the tokenized content and to reverse the transformation to make the secure data viewable at the client associated with the enterprise;
• wherein in response to identifying secure content in some particular portion of the content, execution of the software program instructions by the at least one data processor further controls the system to store the portion of the content that corresponds to the secure content in a computer-readable digital data storage medium that is accessible only within the enterprise and to steganographically embed in a container a link back to the portion of the secure content that is stored in the computer-readable digital data storage medium, where a presence of the link within the container becomes substantially imperceptible when the content is rendered at the public service, and to send from the enterprise to the public service the content including the unsecured content and the container having the steganographically embedded link.