{"id":89121,"date":"2020-07-18T19:42:16","date_gmt":"2020-07-18T17:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/zashhita-dokumentov-ot-kopirovaniya"},"modified":"2020-07-18T19:42:16","modified_gmt":"2020-07-18T17:42:16","slug":"zashhita-dokumentov-ot-kopirovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/zashhita-dokumentov-ot-kopirovaniya","title":{"rendered":"Protection of documents from copying","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

There are a thousand and one ways to protect electronic documents from unauthorized copying. However, as soon as a document transitions to an analog state (according to GOST R 52292\u20132004<\/a><\/noindex> \"Information Technology. Electronic Information Exchange. Terms and Definitions,\" the concept of an \"analog document\" includes all traditional forms of document representation on analog media: paper, photographic and film, etc. An analog form of representation can be converted into a discrete (electronic) form through various digitization methods<\/i>), the number of ways to protect it from copying drastically decreases, and the cost of their practical implementation also rapidly increases. For example, this is how it might look in a \"proper\" company:<\/p>\n

    \n
  1. Limit the number of locations and technologies used to convert the electronic document into analog.<\/li>\n
  2. Limit the number of places and individuals allowed to access the content of analog documents.<\/li>\n
  3. Equip the places where individuals access the content of the analog document with video recording and visual monitoring tools.<\/li>\n
  4. etc.<\/li>\n<\/ol>\n

    \n\"Protection
    \n     <\/a><\/noindex>
    \nBesides the high cost, using such methods significantly reduces the efficiency of working with documents.<\/p>\n

    A compromise may be to use our product SafeCopy<\/a><\/noindex>.<\/p>\n

    Document Protection Principle<\/h2>\n

    \nWith SafeCopy, a unique copy of the document is created for each recipient, into which hidden markings are introduced using affine transformations. This process may slightly alter the spacing between lines and characters, the slant of the characters, etc. The main advantage of such marking is that it cannot be removed without altering the content of the document. Watermarks can be erased with regular Paint, but this tactic won't work with affine transformations. <\/p>\n

    \"Protection
    \n
    \nCopies are provided to recipients in printed form or as electronic PDFs. In the event of a leak, the recipient can be reliably identified by the unique combination of distortions introduced into each copy. Since the entire text is marked, it's enough to have literally a few paragraphs. The rest of the page may be missing \/ crumpled \/ covered by a hand \/ spilled with coffee (underline the necessary). We have seen it all.<\/p>\n

    What is marking useful for?<\/h2>\n

    \nProtection of Confidential Documents<\/b>. The scenario is described above. In brief: we marked the copies, distributed them to recipients, and are on alert. As soon as a copy of the document appears in unauthorized places, we compare it with all marked copies and quickly identify the owner of the 'appeared copy.' <\/p>\n

    To identify the spy, we sequentially overlay the 'appeared copy' on the copy of each document recipient. The one with the highest pixel match percentage is the spy. But it\u2019s better to see it in a diagram. <\/p>\n

    \"Protection
    \n
    \nThe overlaying of the 'appeared copy' on all marked ones is done automatically, not manually. Marked copies are not stored in the system to avoid consuming hard drive space unnecessarily. The system only keeps a set of unique marking features for each recipient and generates copies instantly.<\/p>\n

    Document Authenticity Verification<\/b>. You can read about the methods of producing protected printing products at Wikipedia<\/a><\/noindex>. Essentially, they involve the creation of forms with various types of markings \u2013 watermarks, special inks, etc. Examples of such products include banknotes, insurance policies, driver's licenses, passports, etc. This type of product cannot be produced on a standard printer. However, you can print a document with affine transformations of the text on it. What does this provide?<\/p>\n

    By printing a form with inconspicuous text marking, you can verify its authenticity simply by the presence of the marking. Meanwhile, the uniqueness of the marking allows not only verification of authenticity but also establishing the specific physical or legal entity to whom the form was issued. If there is no marking or it points to another recipient, then the form is counterfeit.<\/p>\n

    Such marking can be used both independently, for example, for strict reporting forms, and in conjunction with other protection methods, for instance, for passport security.<\/p>\n

    Bringing Offenders to Justice<\/b>. Large leaks cost companies a lot of money. To ensure that the punishment for the offender is not limited to a reprimand, it is necessary to hold them accountable in court. We have patented our method of document protection so that SafeCopy results can be accepted as evidence in court.<\/p>\n

    What marking cannot do?<\/h2>\n

    \nMarking is not a panacea for combating data leaks and protecting document copies. When implementing it in your organization, it\u2019s important to understand three key limitations:<\/p>\n

    Marking protects the document, not its text.<\/b>The text can be memorized and recounted. The text from a marked copy can be rewritten and sent in a messenger. Nothing will protect against these threats. It\u2019s crucial to understand that in a world of total fakes, leaking just part of the document\u2019s text is no more than electronic gossip. For a leak to have value, it must contain data for verifying the authenticity of the leaked information\u2014stamps, signatures, etc. And here, marking will already be useful.<\/p>\n

    Marking does not prohibit the copying and photographing of document copies.<\/b>But if the scans or photos of documents 'surface,' it will help in tracking down the offender. In essence, the protection of copies is preventive in nature. Employees know that they will definitely be identified and punished through photographs and document copies, so they either seek other (more labor-intensive) ways to 'leak' or completely refrain from doing so. <\/p>\n

    Marking determines whose copy was leaked, not who leaked it.<\/b>An example from life\u2014 a document was leaked. Marking showed that the copy belonged to Ivan Neudachnikov (name and surname changed). The security service begins an investigation and finds out that Ivan left the document on his desk, where it was photographed by an intruder. Ivan receives a reprimand, and the security service has a quest to find the guilty among those who visited Neudachnikov's office. Such a quest is non-trivial, but simpler than searching among those who visited all the document's recipients' offices.<\/p>\n

    Mix, but do not shake.<\/h2>\n

    \nIf the marking system is not integrated with other corporate systems, its application will likely be limited to paper documents, which are decreasing over time. Even in this case, the use of marking cannot be considered convenient\u2014it will require manually uploading each document and making copies for it.<\/p>\n

    However, if the marking system is made part of the overall IT and information security landscape, a noticeable synergetic effect becomes apparent. The following integrations are most beneficial:<\/p>\n

    Integration with ECM<\/b>In a Document Management System (DMS), a subset of documents that require labeling is identified. Each time a new user requests such a document from the DMS, they receive a labeled copy.<\/p>\n

    Integration with print management systems<\/b>Print management systems act as a proxy between users' PCs and printers within the organization. They can determine that a document sent for printing requires labeling, for example, based on the presence of a confidentiality label in the file attributes or due to the existence of the file in the corporate repository of confidential documents. In this case, the user who sent the document for printing will receive a labeled copy from the printer tray. In a simpler scenario, a separate virtual printer can be created, directing documents to which labeled copies will come out of the tray. <\/p>\n

    Integration with email<\/b>In many organizations, sending confidential documents via email is prohibited, but these restrictions are often violated. Sometimes due to carelessness, other times due to tight deadlines or direct orders from management. To ensure that information security does not hinder progress and generates revenue for the company, we propose implementing the following scenario that allows for safe internal email distribution while saving on courier document delivery.<\/p>\n

    When sending a document, the user adds a label indicating the need for labeling. In our case, this is a designated email address. The mail server, upon receiving an email with such a label, prepares copies of all attachments for each recipient and sends them instead of the original attachments. A labeling system component is installed on the mail server for this purpose. In the case of Microsoft Exchange, this component acts as a so-called transport agent, which does not interfere with the operation of the mail server.
    \n
    Source:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 1000 \u0438 \u043e\u0434\u0438\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041d\u043e \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0432 \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0413\u041e\u0421\u0422 \u0420 52292\u20132004 \u00ab\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f. \u042d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u043e\u0431\u043c\u0435\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439. \u0422\u0435\u0440\u043c\u0438\u043d\u044b \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f\u00bb, \u043f\u043e\u043d\u044f\u0442\u0438\u0435 \u00ab\u0430\u043d\u0430\u043b\u043e\u0433\u043e\u0432\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u00bb \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0432\u0441\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u043e\u0440\u043c\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u0432\u044b\u0445 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f\u0445: \u0431\u0443\u043c\u0430\u0433\u0435, \u0444\u043e\u0442\u043e-\u0438 \u043a\u0438\u043d\u043e\u043f\u043b\u0435\u043d\u043a\u0435 \u0438 \u0442. \u043f. \u0410\u043d\u0430\u043b\u043e\u0433\u043e\u0432\u0430\u044f \u0444\u043e\u0440\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89122,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89121","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Document Protection from Copying | ProHoster","description":"There are a thousand and one ways to protect electronic documents from unauthorized copying.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/zashhita-dokumentov-ot-kopirovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0449\u0438\u0442\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 1000 \u0438 \u043e\u0434\u0438\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/zashhita-dokumentov-ot-kopirovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-18T17:42:16+00:00","article:modified_time":"2020-07-18T17:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:16:27","updated":"2022-09-27 22:46:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/89121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=89121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/89121\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/89122"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=89121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=89121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=89121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}