US20180373851A1 - Screen shot marking and identification for device security - Google Patents
Screen shot marking and identification for device security Download PDFInfo
- Publication number
- US20180373851A1 US20180373851A1 US16/120,348 US201816120348A US2018373851A1 US 20180373851 A1 US20180373851 A1 US 20180373851A1 US 201816120348 A US201816120348 A US 201816120348A US 2018373851 A1 US2018373851 A1 US 2018373851A1
- Authority
- US
- United States
- Prior art keywords
- watermark
- client device
- user interface
- screenshot
- image
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
- 230000035945 sensitivity Effects 0.000 claims abstract description 64
- 230000000246 remedial effect Effects 0.000 claims abstract description 35
- 238000000034 method Methods 0.000 claims description 25
- 230000006835 compression Effects 0.000 claims description 11
- 238000007906 compression Methods 0.000 claims description 11
- 238000004891 communication Methods 0.000 claims description 9
- 230000003466 anti-cipated effect Effects 0.000 claims description 7
- 230000000007 visual effect Effects 0.000 claims description 7
- 238000004458 analytical method Methods 0.000 description 23
- 238000007726 management method Methods 0.000 description 14
- 230000008569 process Effects 0.000 description 13
- 238000001514 detection method Methods 0.000 description 5
- 230000008520 organization Effects 0.000 description 5
- 238000012545 processing Methods 0.000 description 5
- 230000006870 function Effects 0.000 description 4
- 230000004048 modification Effects 0.000 description 4
- 238000012986 modification Methods 0.000 description 4
- 238000012015 optical character recognition Methods 0.000 description 4
- 238000009877 rendering Methods 0.000 description 4
- 239000000126 substance Substances 0.000 description 4
- 230000001413 cellular effect Effects 0.000 description 3
- 230000003993 interaction Effects 0.000 description 3
- 230000004044 response Effects 0.000 description 3
- 230000011218 segmentation Effects 0.000 description 3
- 238000000926 separation method Methods 0.000 description 3
- 238000012217 deletion Methods 0.000 description 2
- 230000037430 deletion Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 239000000463 material Substances 0.000 description 2
- 230000003068 static effect Effects 0.000 description 2
- 230000008901 benefit Effects 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 230000001010 compromised effect Effects 0.000 description 1
- 230000001771 impaired effect Effects 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000005259 measurement Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 229910052704 radon Inorganic materials 0.000 description 1
- SYUHGPGVQRZVTB-UHFFFAOYSA-N radon atom Chemical compound [Rn] SYUHGPGVQRZVTB-UHFFFAOYSA-N 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
- 238000000844 transformation Methods 0.000 description 1
- 238000013024 troubleshooting Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/16—Program or content traceability, e.g. by watermarking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6281—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database at program execution time, where the protection is within the operating system
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
- H04N1/32—Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
- H04N1/32101—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
- H04N1/32144—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/032—Protect output to user by software means
Definitions
- a business or other organization may implement bring-your-own-device (BYOD) policies that allow employees to use their personal devices to access business resources.
- BYOD policies bring-your-own-device
- the organization can require an individual employee to have certain applications installed on his or her device. These applications can include mobile device management (MDM)-related applications.
- MDM mobile device management
- Some of the BYOD devices have an ability to allow a user to capture a screenshot—a static image capture of visual content being rendered in a display of a client device. Screenshots can include sensitive or proprietary content. As BYOD devices can come from a multitude of different manufacturers and can come preloaded with various operating systems and default configurations, restricting access to hardware or software features that allow users to perform screenshots remains problematic.
- FIG. 1 is a drawing of an example of a client device executing a client application in a networked environment.
- FIG. 2 is a drawing of the client device of FIG. 1 and a screenshot showing content in a display of the client device.
- FIG. 3 is a drawing of the client device of FIG. 1 and a screenshot having an identifiable watermark pattern.
- FIGS. 4-6 show examples of screenshots that are modified in response to an identification of sensitive or propriety content.
- FIG. 7 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment of FIG. 1 .
- FIG. 8 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment of FIG. 1 .
- FIG. 9 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment of FIG. 1 .
- the present disclosure relates to marking screenshots and identifying screenshots that have been marked.
- some devices have an ability to allow a user to capture a screenshot which is a static image capture of visual content being rendered in a display of a client device.
- Screenshots can include sensitive or proprietary content.
- screenshots can include sensitive or proprietary enterprise data.
- BYOD devices can come from a multitude of different manufacturers and can come preloaded with various operating systems and default configurations, restricting access to hardware or software features that allow users to perform screenshots remains problematic. In other words, few mechanisms exist to prevent screenshots without interfering with the performance of the device.
- a device provided by a manufacturer can have an ability to capture a screenshot by holding a physical button located on the device. By disabling the button programmatically, the operation of the device would be impaired because the physical button could be used to turn on or off a display screen or access a home screen.
- a client application executable on a client device can detect screen capture events being performed on a client device where a screenshot is generated.
- the screenshot can include a digital image of the content being shown on a display of the client device when the screen capture event was performed.
- the client application can then analyze the digital image or communicate the digital image to a remote computing environment for analysis.
- the client application or the remote computing environment can then determine whether the screenshot includes visual content presented by a particular client application, such as an enterprise email application or an enterprise document management application.
- a digital image generated by a screen capture event includes visual content presented by the particular client application
- the computing environment or the client application can perform a remedial action, such as blurring or obfuscating potentially sensitive regions of the digital image such that the sensitive regions are illegible, deleting the digital image from local memory of the client device, communicating a notification to an administrator, overlaying a watermark on the digital image, or replacing content in the digital image with predefined content that indicates that the digital image has been modified.
- the client application can encode a watermark pattern in a user interface for rendering on a display.
- the computing environment can generate the watermark pattern so that it is unperceivable to a user of the client device.
- a client application or a computing environment can detect the watermark from screenshots to determine whether the content in the screenshots was presented by or at the request of a particular client application.
- the networked environment 100 can include a computing environment 103 and a client device 106 in communication with one another over a network 109 .
- the network 109 can include, for example, the Internet, intranets, extranets, wide area networks (WANs), local area networks (LANs), wired networks, wireless networks, other suitable networks, or any combination of two or more such networks.
- the networks can include satellite networks, cable networks, Ethernet networks, or telephony networks.
- the computing environment 103 can include, for example, a server computer or any other system providing computing capability. Alternatively, the computing environment 103 can include a plurality of computing devices that are arranged, for example, in one or more server banks or computer banks. The computing environments 103 can include a grid computing resource or any other distributed computing arrangement. The computing devices can be located in a single installation or can be distributed among many different geographical locations. The computing environments 103 can also include or be operated as one or more virtualized computer instances. For purposes of convenience, the computing environment 103 is referred to herein in the singular. Even though the computing environment 103 is referred to in the singular, it is understood that a plurality of computing environments 103 can be employed in the various arrangements as described above.
- a data store 112 can include memory of the computing environment 103 or mass storage resources of the computing environment 103 .
- the data stored in the data store 112 can be associated with the operation of the various applications and functional entities described below.
- the components executed on the computing environment 103 can include, for example, a device management application 115 and a screenshot analysis application 118 .
- the device management application 115 can serve up information to generate network pages or user interface screens in a client application 121 .
- the device management application 115 can provide enterprise information, such as emails, documents, and spreadsheets, to the client device 106 if the client device 106 is enrolled with the device management application 115 .
- the screenshot analysis application 118 can perform remote analysis of screenshots 120 generated on the client device 106 .
- the screenshot analysis application 118 can detect watermarks that are indicative of particular user interface screens of particular client applications 121 that generated a screenshot 120 .
- the screenshot analysis application 118 can determine whether a watermark identified in a screenshot 120 indicates that the screenshot 120 captured information presented by an enterprise email application.
- the screenshot analysis application 118 can determine whether a watermark identified in a screenshot 120 indicates that the screenshot 120 captured information presented by an enterprise document management application.
- the screenshot analysis application 118 is shown as being a component of the computing environment 103 , in some examples, the client application 121 or another service executing on the client device 106 can perform similar functionality.
- a watermark generated for display in a respective user interface can be generated based on an anticipated sensitivity level 127 of the content in the user interface.
- a subsequent user interface can be rendered that includes the body of the email as well as a watermark that indicates that the user interface 133 contains confidential content.
- the watermark conveys a high sensitivity level 127 based on the content being rendered in the respective user interface 133 .
- a watermark that conveys a lower sensitivity level 127 can be generated for rendering.
- the screenshot analysis application 118 can identify sensitive content in screenshots 120 .
- the screenshot analysis application 118 can perform an optical character recognition (OCR) to identify text in the screenshot 120 .
- OCR optical character recognition
- the device management application 115 can determine whether the text includes potentially sensitive or propriety information. For example, if the word “confidential” appears in a body of an email captured in a screenshot 120 , the device management application 115 can determine that the screenshot 120 includes potentially sensitive content.
- the screenshot analysis application 118 can utilize fingerprint matching or Radon transformations to identify whether symbols or images (beyond text) include potentially sensitive or proprietary information.
- a word processing document can include chemical formulae that are propriety to an enterprise.
- the screenshot analysis application 118 can detect the presence of the chemical formulae by comparing the region of the screenshot 120 having the chemical formulae to predefined image data. Assuming a match is found, the device management application 115 can determine whether the screenshot 120 includes potentially sensitive content.
- the data stored in the data store 112 can include, for example, watermark patterns 124 a . . . 124 b , sensitivity levels 127 , and user account data 130 .
- the watermark patterns 124 can include predefined pixel settings and arrangements of pixel settings that are capable of identification by the screenshot analysis application 118 .
- the client application 121 renders a particular one of the watermark patterns 124 in a user interface 133 shown on a display 136 of the client device 106 . If a screenshot 120 is captured of the user interface 133 , the watermark pattern 124 identified from the screenshot 120 can be indicative of the user interface 133 or the client application 121 rendering the user interface 133 .
- the watermark patterns 124 include an arrangement of one or more pixels in the user interface 133 that are modified to have a predefined red, green, blue, or alpha (transparency) value.
- the computing environment 103 can generate the watermark patterns 124 for inclusion in the user interface 133 while being imperceptible to the human eye.
- the computing environment can access a blue background image to be used as a header bar in a user interface 133 .
- the computing environment 103 can slightly alter pixel values, such as red, green, blue, or alpha values, for an arrangement of pixels in the header bar such that a user of the client device 106 would be incapable of visually detecting the presence of a watermark pattern 124 .
- the computing environment 103 can adjust the blue pixel values for pixels in the arrangement to slightly adjust the “blueness” of the pixels. The slight adjustment would not be noticed by a user; however, the computing environment 103 could later identify the pixels in the arrangement after a screenshot 120 has been generated.
- the sensitivity levels 127 can indicate a sensitivity of particular user interface screens, client applications 121 , predefined text, or predefined images.
- a client application 121 can include an email application where a user can send and receive enterprise emails.
- a “help” screen, or a user interface screen that assists the user with how to use the email application can have a lower sensitivity level 127 than a user interface screen that includes content of a confidential email.
- the computing environment 103 can associate text regions identified in a screenshot that use the term “important” with a lower sensitivity level 127 than text regions that include the terms “confidential” or “proprietary.”
- the user account data 130 can include, for example, profile data 139 and screenshot data 142 stored in association with a user account, a user group, or an organization, such as an enterprise.
- Profile data 139 can include information associated with the user, such as a first name, a middle name, a last name, an email address, a username, a password, a personal identification number (PIN), or authentication data.
- profile data 139 can include an authorized sensitivity level 127 . If content identified in a screenshot 120 exceeds the authorized sensitivity level 127 , the computing environment 103 or the client application can delete or sensor the screenshot 120 ; notify an administrator; or perform another suitable remedial action 152 .
- the client device 106 can be representative of one or more client devices 106 that execute instances of the client application 121 .
- the client device 106 can include a processor-based system, such as a computer system, that can include a desktop computer, a laptop computer, a personal digital assistant, a cellular telephone, a smartphone, a set-top box, a music player, a tablet computer system, a game console, or an electronic book reader.
- the client device 106 can include a display 136 that can be a liquid crystal display (LCD) or light emitting diode (LED) display.
- the client device 106 can also be equipped with network interfaces, including a localized network interface, such as a near-field communication (NFC) interface or radio-frequency identification (RFID) interface.
- NFC near-field communication
- RFID radio-frequency identification
- the client device 106 can execute various applications, such as the client application 121 .
- the client application 121 can access network content served up by the computing environment 103 or other servers.
- the client application 121 can also render a user interface 133 on the display 136 .
- the client application 121 can include a dedicated client application or a browser, and the user interface 133 can include an application screen, a network page, or other interface.
- the client device 106 can execute applications beyond the client application 121 such as device management applications, enterprise applications, social networking applications, word processors, spreadsheet applications, or media viewing applications.
- the client device 106 can install and execute an instance of a client application 121 or other service configured to detect screenshot capture events as they are performed in the client device 106 .
- the client application 121 monitors a file directory of the client device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed.
- the client application 121 monitors user gestures or other interactions performed in association with the hardware or software components of the client device 106 . For instance, some client devices 106 are configured to perform a screen capture event as the user swipes his or her palm across the display 136 . The client application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed.
- the client application 121 includes an email application that permits a user to send, receive, and read emails.
- the email application can include various user interface screens, for example, to view an inbox, read a selected email, or perform another function.
- the computing environment 103 can generate a unique watermark pattern 124 for each of the user interfaces 133 and store the unique watermark pattern 124 in the data store 112 .
- the client application 121 can remotely access the generated watermark pattern 124 for rendering on the display 136 .
- the computing environment 103 can cross-reference the watermark pattern 124 against a library of watermark patterns 124 stored in the data store 112 to identify the particular user interface screen being shown on the display 136 when the screen capture event was performed.
- the computing environment 103 can generate a unique watermark pattern 124 for individual client applications 121 that are capable of execution on the client device 106 . If a watermark pattern 124 is detected in a screenshot 120 , the computing environment 103 can cross-reference the watermark pattern 124 against the watermark patterns 124 stored in the data store 112 to identify the client application 121 being shown on the display 136 when the screen capture event was performed.
- the client application 121 can access a corresponding watermark pattern 124 from the data store 112 to encode in the user interface 133 .
- the watermark patterns 124 are included in the user interface 133 while being imperceptible to the human eye.
- the client application 121 or the computing environment can alter an arrangement of pixels in a header bar to slightly modify the color values of the pixels in an arrangement such that a user of the client device 106 would be incapable of visually detecting the presence of the watermark pattern 124 when looking at the user interface 133 .
- the client application 121 or the computing environment 103 can slightly alter an arrangement of pixels in the user interface 133 to modify the alpha value of the pixels in an arrangement such that a user of the client device 106 would be incapable of visually detecting the presence of a watermark pattern 124 .
- the user interface 133 can present a dialog 145 that indicates that a screen capture event has been performed, and the screenshot 120 that resulted from the screen capture event will be analyzed.
- the client application 121 locally analyzes the screenshot 120 generated during the screen capture event.
- the client device 106 communicates the screenshot 120 over the network 109 as screenshot data 142 for remote analysis by the computing environment 103 .
- the client application 121 or the computing environment 103 can analyze the digital image to determine whether content shown in the digital image includes information that is sensitive or proprietary. For example, an administrator can associate subject lines of the emails shown in the email application of FIG. 1 with a low level of sensitivity or a high level of sensitivity by creating sensitivity levels 127 . Assuming the subject lines of the emails have a high level of sensitivity, and the user who performed the screenshot 120 does not have suitable permissions to perform screenshots 120 of highly sensitive materials, the computing environment 103 can identify a remedial action 152 and communicate the remedial action 152 to the client device 106 for local performance.
- the remedial action 152 can include blurring or obfuscating potentially sensitive portions of the digital image, deleting the digital image from local memory of the client device, communicating a notification to an administrator indicating that a screenshot 120 was performed, overlaying a watermark on the generated digital image, or replacing content in the digital image with predefined content that indicates that the digital image has been modified.
- FIG. 2 shown is an example of a user interface 133 of a client application 121 rendered on a display 136 of a client device 106 .
- a screenshot 120 of the user interface 133 rendered in the display 136 of the client device 106 is generated.
- the screenshot 120 includes an image file, such as a Joint Photographic Experts Group (JPEG) file, a portable networks graphic (PNG) file, a graphics interchange format (GIF) file, a tagged image format file (TIFF), portable document format (PDF) file, or other image file type.
- JPEG Joint Photographic Experts Group
- PNG portable networks graphic
- GIF graphics interchange format
- TIFF tagged image format file
- PDF portable document format
- the operating system of the client device 106 facilitates the storage of the screenshot 120 in local memory of the client device 106 or in remote memory where the screenshot 120 is communicated over the network 109 for remote storage.
- the operating system can store the screenshot 120 in a predefined file directory according to a file naming format.
- the screenshot 120 can be stored as “user_name/screenshots/screenshot201502151600.png,” where “user_name” is the user name of an account associated with the client device, “screenshots,” is a directory name, and “screenshot201502151600” is the digital image file of the screenshot 120 .
- the format of the file name of the digital image file can be indicative of a time the screenshot 120 was captured. For example, “201502151600” can indicate that the screenshot 120 was captured on Feb. 15, 2015 at 4:00 PM.
- the client application 121 can monitor the file directory to detect the presence of new screenshots 120 .
- a watermark pattern 124 can include a digital image file, such as a JPEG, PNG, GIF, TIFF, or PDF file, that is overlaid in a particular area of the user interface 133 .
- the client device 106 generates a screenshot 120 using a compression technique. For example, if the screenshot 120 is saved as a JPEG file, the screenshot 120 could have been compressed. Accordingly, the computing environment 103 generates the watermark pattern 124 such that a compression applied to a digital image during storage of the screenshot 120 does not impair a later detection of the watermark pattern 124 . Similarly, the client application 121 encodes the watermark pattern 124 in an area of the user interface 133 such that a compression applied to the digital image during storage of the screenshot 120 does not impair the later detection of the watermark pattern 124 .
- the client device 106 can store the digital image using “lossless” compression where a screenshot 120 of what is shown in the user interface 133 of the client device 106 can be perfectly reconstructed from compressed data.
- the client device 106 can employ lossless compression to save the screenshot 120 as a PNG file. Accordingly, the client application 121 or the computing environment 103 can later identify the watermark pattern 124 despite compression.
- the watermark pattern 124 shown on the display 136 can include a predefined arrangement of pixels that are capable of identification by the screenshot analysis application 118 .
- the shaded pixels shown in the watermark pattern 124 can represent pixels that have a red, green, blue, or alpha value different from surrounding pixels while still being imperceptible to the human eye.
- FIG. 3 shows an enhanced view of the user interface 133 where the watermark pattern 124 is shown as a 2 ⁇ 3 grid of pixels having values (e.g., red, green, blue, or alpha values) different from surrounding pixels.
- the base pixel is denoted as “P” for explanatory purposes.
- the 2 ⁇ 3 grid of pixels in the example watermark pattern 124 of FIG. 3 can be described as:
- the screenshot analysis application 118 can identify a predefined base pixel in the screenshot 120 and analyze the pixels surrounding the base pixel according to the specified watermark pattern 124 .
- the screenshot analysis application 118 can detect a match if the values of the pixels match the watermark pattern 124 .
- the match can identify the particular client application 121 being shown on the display 136 when the screenshot 120 was captured as well as the particular user interface screen being shown by the client application 121 .
- a modification of the color palette of the screenshot 120 such as converting the screenshot 120 to greyscale, colorblind mode, or high contrast, would not prevent detection of the watermark pattern 124 .
- FIG. 4 shown is an example of a user interface 133 of a client application 121 rendered on a display 136 of a client device 106 .
- the digital image of the screenshot 120 is modified to apply a branding 403 marked “CONFIDENTIAL—PROPERTY OF ENTERPRISECO.”
- the client application 121 or the computing environment 103 can apply the branding 403 as a remedial action 152 in response to the screenshot analysis application 118 identifying potentially sensitive or proprietary information in the screenshot 120 .
- the client application 121 can modify the screenshot 120 to include the branding 403 or, in some examples, the client application 121 can communicate the screenshot 120 to the computing environment 103 for modification.
- the client application 121 or the computing environment 103 can replace a modified version of the screenshot 120 with the original screenshot 120 in local memory of the client device 106 .
- the client application 121 or the computing environment 103 can perform other remedial actions 152 .
- the client application 121 or the computing environment 103 can modify a screenshot 120 to include labels 503 a . . . 503 e branded “REMOVED.”
- the screenshot analysis application 118 can identify regions of the screenshot 120 that include text to obfuscate later reading of the text.
- the client application 121 or the computing environment 103 can replace the regions with the labels 503 to protect sensitive information from being disseminated through the screenshot 120 .
- the client application 121 or the computing environment 103 can identify regions of text utilizing OCR.
- the client application 121 or the computing environment 103 can modify a screenshot 120 to apply blurry regions 603 a . . . 603 e to regions of the screenshot 120 that include text or other sensitive or proprietary content.
- FIG. 7 shown is a flowchart that provides one example of the operation of a portion of the networked environment 100 .
- the flowchart of FIG. 7 can be viewed as depicting an example of steps of a method implemented by the computing environment 103 or the client application 121 .
- the separation or segmentation of functionality as discussed herein is presented for illustrative purposes only.
- client applications 121 can be configured to detect screen capture events when they occur and analyze screenshots generated during the screen capture events to identify content shown in the screenshots.
- a client application 121 being executed on the client device 106 when the screen capture event occurs can be identified.
- the particular user interface screen of the client application 121 being shown when the screen capture event can be identified.
- the client application 121 or the computing environment 103 can generate watermark pattern 124 for a user interface screen of a client application 121 and stored in association with an identifier of the user interface screen or the client application 121 in the data store 112 . If the watermark pattern 124 is identified in a screenshot 120 , the client application 121 or the computing environment 103 can cross-reference the watermark pattern 124 in the data store 112 to identify the particular client application 121 or user interface 133 .
- a watermark pattern 124 includes an arrangement of pixels having values offset from a base pixel.
- the client application 121 or the computing environment 103 can identify a base pixel at a suitable (x, y) location of a user interface 133 .
- the client application 121 or the computing environment 103 can adjust values of pixels located at a predefined distance away from the base pixel as an offset from a value of the base pixel. For example, if a base pixel has an alpha value of 1, the client application 121 or the computing environment 103 can modify a pixel located two pixels away to have an alpha value of 3, where the offset from the base pixel is alpha+2.
- a conversion of the screenshot 120 to greyscale, colorblind mode, or high contrast will not prevent detection of the watermark pattern 124 .
- generating the watermark pattern 124 can be performed to maintain the watermark pattern 124 despite image compression that can occur when generating a digital image file for a screenshot 120 .
- the client application 121 or the computing environment 103 can identify a suitable location of the watermark pattern 124 to withstand compression, such as a header or a footer, and apply the watermark pattern 124 in the suitable location.
- the client application 121 or the computing environment 103 can further select the values of the pixels in the watermark pattern 124 as an offset from the base pixel.
- the client application 121 or the computing environment 103 can minimize the offset to make the watermark pattern 124 unnoticeable when shown near the base pixel and other surrounding pixels.
- the computing environment 103 can remotely generate the watermark pattern 124 and store the watermark pattern 124 in the data store 112 .
- the client application 121 locally generates the watermark pattern 124 on the client device 106 .
- the client application 121 or the computing environment 103 can apply the watermark pattern 124 to a user interface 133 .
- the watermark pattern 124 can include an image file overlaid in a respective location of the user interface 133 .
- the watermark pattern 124 can be encoded in a resource in the user interface 133 , such as an image file. For example, an image of a header bar that is used as an asset in an application package file can be modified to include the watermark pattern 124 .
- a first client application 121 can overlay a watermark on the user interface 133 of a second client application 121 .
- a watermark may be placed on another layer on the user interface 133 to overlay the watermark on the document although the enterprise e-mail application has no control over the document viewer.
- a user can select a hyperlink in a document or email to access a network resource, such as a uniform resource locator (URL), using a web browser application or other suitable application.
- a watermark can be placed on another layer on the user interface 133 to overlay the watermark in the web browser application although the application from which the hyperlink was selected has no control over the content being rendered in the display 136 .
- a suitable watermark can be generated to overlay in the web browser application based on the network resource being accessed. For example, if the hyperlink selected by a user matches a predefined corporate intranet site, a watermark can be generated that conveys a high sensitivity level 127 .
- watermarks can be applied to user interfaces 133 of other third-party applications, such as a document viewer application when a document is accessed from an enterprise workspace, or a media player application when a corporate audio or video file is being played.
- the sensitivity level 127 encoded in a watermark can be determined by the client application 121 , and different watermarks can be used based on the sensitivity levels 127 .
- a first RGB pattern or alpha pattern can convey a low sensitivity level 127 while a second pattern can convey a medium sensitivity level, and a third pattern can convey a high sensitivity level 127 , such as a confidential sensitivity level 127 .
- the confidentiality level 127 can be based in part on the client application 121 that launched the currently displayed content. For example, an attachment to a calendar invite can be more likely to contain highly confidential material than the calendar invite itself.
- a watermark that conveys a low sensitivity level 127 can be rendered in a user interface 133 for the calendar invite while a watermark that conveys a high sensitivity level 127 can be rendered in a user interface 133 that displays content of an attachment of the calendar invite.
- the client application 121 can access a corresponding watermark pattern 124 from the data store 112 to apply to the user interface 133 .
- the watermark patterns 124 are included in the user interface 133 while being imperceptible to the human eye.
- an arrangement of pixels in a header bar can be altered to slightly modify the color of pixels in an arrangement such that a user of the client device 106 would be incapable of visually detecting the presence of a watermark pattern 124 .
- an arrangement of pixels in the user interface 133 can be altered to slightly modify the alpha value of pixels in an arrangement such that a user of the client device 106 would be incapable of visually detecting the presence of a watermark pattern 124 .
- the screenshot analysis application 118 can identify the client application 121 or a user interface 133 of the client application 121 shown in the screenshot 120 .
- the client application 121 or the computing environment 103 can detect the performance of a screen capture event during which a digital image file of a screenshot 120 is generated.
- the client application 121 can monitor a file directory of the client device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed.
- the client application 121 monitors user gestures or other interactions performed in association with the hardware or software components of the client device 106 . For instance, some client devices 106 can be configured to perform a screen capture event as the user swipes his or her palm across the display 136 . The client application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed.
- the client application 121 or the computing environment 103 can analyze the screenshot 120 .
- the client application 121 can locally analyze the screenshot 120 generated during the screen capture event.
- the client device 106 can communicate the screenshot 120 over the network 109 as screenshot data 142 for remote analyzation by the computing environment 103 .
- the screenshot 120 is analyzed to determine whether the screenshot 120 includes a watermark pattern 124 .
- the client application 121 can iterate through various screenshots 120 accessible by the client device 106 to analyze each screenshot 120 for the presence of one or more watermark patterns 124 .
- the client application 121 or the computing environment 103 can access the screenshots 120 from a local directory, an application programming interface (API) offered by an operating system or screenshot service, a public or shared folder, a remote folder synced with the client device 106 , a public or private cloud computing environment in communication with the client device 106 , or from a network site or file directory.
- API application programming interface
- a client device 106 can execute a client application 121 although a user interface 133 of the client application 121 is not shown on a display 136 .
- a first client application 121 can execute in a background mode of an operating system of the client device 106 while a second client application 121 executes in a foreground mode, where the user interface 133 of the second client application 121 is actually shown.
- the content of the screenshot 120 can include information that is not sensitive in nature.
- a secure email application having sensitive emails can execute in a background mode while a calculator application is executing in a foreground mode. If a screenshot 120 is generated that shows a user interface 133 of the calculator application as opposed to the secure email application, the client application 121 can abstain from performing a remedial action 152 as the sensitive emails were not compromised.
- step 718 if a determination is made that the screenshot 120 does not include a watermark pattern 124 , the process can proceed to completion where the computing environment 103 and the client application 121 abstain for performing a remedial action 152 . Conversely, the client application 121 or the computing environment 103 can perform one or more remedial actions 152 in step 721 if a determination is made that the screenshot 120 includes a watermark pattern 124 .
- the client application 121 or the computing environment 103 can identify a remedial action 152 based on a sensitivity level 127 defined for a client application 121 identified in the screenshot 120 ; a particular user interface 133 identified in the screenshot 120 ; text, keywords, or phrases identified in the screenshot 120 ; or images in the screenshot 120 .
- a client application 121 can include an email application where a user can send and receive enterprise emails.
- a “help” screen, or a user interface 133 that assists a user with how to use the email application, can have a lower sensitivity level 127 than a user interface 133 that includes content of a confidential email.
- the client application 121 or the computing environment 103 can cross-reference text regions that include the term “important” against sensitivity levels 127 to determine that text regions that use the term “important” have a low sensitivity level 127 .
- the client application 121 or the computing environment 103 can cross-reference text regions that include the terms “confidential” or “proprietary” against sensitivity levels 127 to determine that text regions that use the terms “confidential” or “proprietary” have a high sensitivity level 127 .
- the remedial action 152 can include blurring or obfuscating potentially sensitive portions of the screenshot 120 , deleting the screenshot 120 from local memory of the client device 106 , communicating a notification to an administrator indicating that a screen capture event has been performed, overlaying a label or a watermark on the screenshot 120 , or replacing content in the screenshot 120 with other predefined content, such as content that indicates that the screenshot 120 has been modified to remove sensitive content.
- FIG. 8 shown is a flowchart that provides one example of the operation of a portion of the networked environment 100 .
- the flowchart of FIG. 8 can be viewed as depicting an example of steps of a method implemented by the computing environment 103 or the client application 121 .
- the separation or segmentation of functionality as discussed herein is presented for illustrative purposes only.
- the client application 121 can perform other analysis to determine whether the screenshot 120 includes sensitive content. For example, a “help” screen of a secure document management application may not include sensitive content while an “inbox” screen would include sensitive content. In some examples, a screenshot 120 captured of the “help” screen would not require deletion while a screenshot 120 captured of the “inbox” would require deletion, for example, based on sensitivity levels 127 associated with each of the user interfaces 133 . Further, in some examples, the client application 121 can determine whether screenshots 120 generated by other client applications 121 include sensitive or proprietary content by analyzing the screenshots 120 to determine whether they include sensitive or proprietary content.
- the client application 121 or the computing environment 103 can analyze a screenshot 120 to identify a watermark pattern 124 in the screenshot 120 and to cross-reference the watermark pattern 124 with the data store 112 .
- Cross-referencing can include using characteristics of the watermark pattern 124 to query the data store 112 to identify a corresponding entry that can include an identifier for a client application 121 or an identifier for a particular user interface 133 of the client application 121 .
- the characteristics of the watermark pattern 124 can include, for example, pixel locations of red, green, blue, or alpha values.
- step 806 it is determined whether the screenshot 120 includes a watermark pattern 124 identified from the data store 112 . If so, in step 809 , the client application 121 or the computing environment 103 can identify a sensitivity level 127 based on the client application 121 or the user interface 133 of the client application 121 shown in the screenshot 120 .
- the sensitivity levels 127 can indicate a sensitivity of a particular user interface 133 , such as an “inbox” in a secure email application or a “confidential” folder in a secure document application.
- an administrator can associate a high sensitivity level 127 with a client application 121 where all user interfaces 133 of the client application 121 inherit the high sensitivity level 127 .
- the client application 121 or the computing environment 103 can further process the screenshot 120 to determine whether sensitive or propriety information is shown in the screenshot 120 .
- the client application 121 or the computing environment 103 can analyze the screenshot 120 to identify text in the screenshot 120 . This can include applying OCR techniques to identify regions of text in the screenshot 120 as well as individual characters.
- the client application 121 or the computing environment 103 can identify images, such as icons, symbols or graphics, in the screenshot 120 .
- the process can proceed to 809 to determine whether a sensitivity level 127 has been established for the text or images identified in the screenshot 120 .
- the client application 121 or the computing environment 103 can identify a high sensitivity level 127 for a screenshot 120 if a term in a text region of the screenshot 120 includes “confidential” or “proprietary.” However, the client application 121 or the computing environment 103 can identify a low sensitivity level 127 if the text region includes the term “important.” If an image identified from the screenshot 120 includes characteristics indicating that the image is of a chemical formula, mathematical equation, or other potentially proprietary content, the client application 121 or the computing environment 103 can associate the image identified in the screenshot 120 with a high sensitivity level 127 .
- step 818 it is determined whether the client application 121 , the user interface 133 of the client application 121 , the text in the screenshot 120 , or the images identified in the screenshot 120 have a sensitivity level 127 exceeding a predefined threshold.
- An administrator can establish the predefined threshold as a threshold where a remedial action 152 should be performed. For example, if content in the screenshot 120 has a high sensitivity level 127 , the client application 121 or the computing environment 103 can cause the screenshot 120 to be deleted or censored. If the sensitivity level 127 of the content identified in the screenshot 120 does not exceed a predefined threshold, the process can proceed to step 821 where the screenshot 120 is not altered. Thereafter, the process can end.
- the client application 121 or the computing environment 103 can perform a remedial action 152 .
- the client application 121 or the computing environment 103 can identify a remedial action 152 based on a sensitivity level 127 of the particular client application 121 , the user interface 133 captured in the screenshot 120 , text in the user interface 133 , or images in the user interface 133 .
- the client application 121 or the computing environment 103 can blur or obfuscate regions of the screenshot 120 that have sensitive content.
- the client application 121 or the computing environment 103 can delete the screenshot 120 and communicate an electronic notification to an administrator that indicates that a screen capture event has been performed.
- the electronic notification can include information pertaining to the content identified in the screenshot 120 .
- the client application 121 or the computing environment 103 can overlay a label or a watermark on the screenshot 120 .
- the client application 121 or the computing environment 103 can replace content in the screenshot 120 with other predefined content, such as content that indicates that the screenshot 120 has been modified to remove sensitive content.
- the client application 121 or the computing environment 103 can replace the subject lines of proprietary emails with “REMOVED,” or other suitable label. Thereafter, the process can proceed to end.
- FIG. 9 shown is a flowchart that provides one example of the operation of a portion of the networked environment 100 .
- the flowchart of FIG. 9 can be viewed as depicting an example a method implemented by the computing environment 103 or the client application 121 .
- the separation or segmentation of functionality as discussed herein is presented for illustrative purposes only.
- the client application 121 or the computing environment 103 can detect a screen capture event during which a digital image file of a screenshot 120 is generated.
- the client application 121 can monitor a file directory of the client device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed.
- the client application 121 can monitor user gestures or other interactions performed in association with the hardware or software components of the client device 106 . For instance, some client devices 106 can perform a screen capture event as the user swipes his or her palm across the display 136 . The client application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed.
- a client device 106 can perform a cloud backup of a digital image when the digital image is generated. For example, if a screen capture event is performed, the digital image of the screen capture can automatically be uploaded to cloud storage. Accordingly, in step 906 , a network interface of the client device 106 can be disabled in response to detection of a screen capture event, for example, to prevent the digital image of the screenshot 120 being transferred to another device.
- disabling of the network interface can include disabling a wireless fidelity (WiFi) module, disabling a cellular network module, such as a GSM or CDMA module, or disabling a wired communication network module, such as an Ethernet module, a Firewire module, or a universal serial bus (USB) module.
- WiFi wireless fidelity
- a cellular network module such as a GSM or CDMA module
- wired communication network module such as an Ethernet module, a Firewire module, or a universal serial bus (USB) module.
- the screenshot 120 is analyzed to determine whether the screenshot 120 includes a watermark pattern 124 .
- the client application 121 can iterate through various screenshots 120 accessible by the client device 106 to analyze each screenshot 120 for the presence of one or more watermark patterns 124 .
- the client application 121 or the computing environment 103 can access the screenshots 120 from a local directory, an application programming interface (API) offered by an operating system or screenshot service, a public or shared folder, a remote folder synced with the client device 106 , a public or private cloud computing environment in communication with the client device 106 , or from a network site or file directory.
- API application programming interface
- the process can proceed to step 915 where the network interface disabled in step 906 is enabled and, the process can proceed to completion thereafter.
- the client application 121 or the computing environment 103 can determine whether one or more remedial actions 152 needed to be performed in step 918 if a determination is made that the screenshot 120 includes a watermark pattern 124 at step 909 .
- the client application 121 or the computing environment 103 can determine whether one or more remedial actions 152 are required based on a sensitivity level 127 conveyed by the identified watermark pattern.
- a client application 121 can include an email application where a user can send and receive enterprise emails.
- a “help” screen, or a user interface 133 that assists a user with how to use the email application can have a lower sensitivity level 127 than a user interface 133 that includes confidential or sensitive content. Accordingly, a remedial action 152 may not be required if the screenshot 120 includes the “help” screen. However, one or more remedial actions 152 may be required if the screenshot 120 includes the sensitive or confidential content.
- the process can proceed to 915 to enable the network interface of the client device 106 and, thereafter, the process can proceed to completion. If a remedial action 152 is required, the process can proceed to step 924 where the remedial action 152 can be performed.
- the remedial action 152 can include blurring or obfuscating potentially sensitive portions of the screenshot 120 , deleting the screenshot 120 from local memory of the client device 106 , communicating a notification to an administrator indicating that a screen capture event has been performed, overlaying a label or a watermark on the screenshot 120 , or replacing content in the screenshot 120 with other predefined content, such as content that indicates that the screenshot 120 has been modified to remove sensitive content.
- enabling of the network interface can include enabling the WiFi module, enabling the cellular network module, such as a GSM or CDMA module, or enabling a wired communication network module, such as an Ethernet module, a Firewire module, or a USB module. If a remedial action 152 performed in step 924 includes modifying the image of the screenshot 120 , the modified screenshot 120 can be transmitted using the network interface. Thereafter, the process can proceed to completion.
- each step in the flowcharts of FIGS. 6 and 7 can represent a module or a portion of code that includes computer instructions to implement the specified logical functions.
- the computer instructions can be embodied in the form of source code that includes human-readable statements written in a programming language or machine code that includes machine instructions recognizable by a suitable execution system, such as a processor in a computer system or other system. If embodied in hardware, each step can represent a circuit or a number of interconnected circuits that implement the specified logical functions.
- FIGS. 7, 8, and 9 show a specific order of execution, it is understood that the order of execution can differ from that which is shown. For example, the order of execution of two or more steps can be switched relative to the order shown. Also, two or more steps shown in succession can be executed concurrently or with partial concurrence. Further, in some examples, one or more of the steps shown in the flowcharts can be skipped or omitted. In addition, any number of counters, state variables, warning semaphores, or messages can be added to the logical flow described herein, for purposes of enhanced utility, accounting, performance measurement, or troubleshooting aid. All such variations are within the scope of the present disclosure.
- the computing environment 103 , client device 106 , and other components described herein can each include at least one processing circuit.
- a processing circuit can include one or more processors and one or more storage devices that are coupled to a local interface.
- the local interface can include a data bus with an accompanying address/control bus.
- a storage device for a processing circuit can store data and components that are executable by the one or more processors of the processing circuit.
- the device management application 115 , the screenshot analysis application 118 , and the client application 121 can be stored in one or more storage devices and be executable by one or more processors.
- the data store 112 can be located in the one or more storage devices.
- the device management application 115 , the screenshot analysis application 118 , the client application 121 , and other components described herein can be embodied in the form of hardware, as software components that are executable by hardware, or as a combination of software and hardware. If embodied as hardware, the components described herein can be implemented as a circuit or state machine that employs any suitable hardware technology.
- Such hardware technology includes, for example, one or more microprocessors, discrete logic circuits having logic gates for implementing various logic functions upon an application of one or more data signals, application specific integrated circuits (ASICs) having appropriate logic gates, or programmable logic devices, such as field-programmable gate array (FPGAs) and complex programmable logic devices (CPLDs).
- one or more or more of the components described herein that include software or computer instructions can be embodied in any non-transitory computer-readable medium for use by or in connection with an instruction execution system such as, for example, a processor in a computer system or other system.
- an instruction execution system such as, for example, a processor in a computer system or other system.
- Such a computer-readable medium can contain, store, and maintain the software or computer instructions for use by or in connection with the instruction execution system.
- a computer-readable medium can include a physical media, such as, magnetic, optical, semiconductor, or other suitable media.
- Examples of a suitable computer-readable media include solid-state drives, magnetic drives, flash memory, and storage discs, such as compact discs (CDs).
- CDs compact discs
- any logic or component described herein can be implemented and structured in a variety of ways. For example, one or more components described can be implemented as modules or components of a single application. Further, one or more components described herein can be executed in one computing device or by using multiple computing devices.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Multimedia (AREA)
- Signal Processing (AREA)
- Databases & Information Systems (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Technology Law (AREA)
- Editing Of Facsimile Originals (AREA)
- Image Processing (AREA)
Abstract
Description
- This application is a continuation of and claims the benefit of U.S. patent application Ser. No. 14/848,805, filed Sep. 9, 2015 and entitled “Screenshot Marking and Identification for Device Security,” which is incorporated entirely herein by reference.
- To reduce the costs associated with providing employees or members of an organization with mobile devices, such as smartphones, tablets, or laptop computers, a business or other organization may implement bring-your-own-device (BYOD) policies that allow employees to use their personal devices to access business resources. For an organization to oversee BYOD policies on user devices, the organization can require an individual employee to have certain applications installed on his or her device. These applications can include mobile device management (MDM)-related applications.
- Some of the BYOD devices have an ability to allow a user to capture a screenshot—a static image capture of visual content being rendered in a display of a client device. Screenshots can include sensitive or proprietary content. As BYOD devices can come from a multitude of different manufacturers and can come preloaded with various operating systems and default configurations, restricting access to hardware or software features that allow users to perform screenshots remains problematic.
- Many aspects of the present disclosure can be better understood with reference to the following drawings. The components in the drawings are not necessarily to scale, with emphasis instead being placed upon clearly illustrating the principles of the disclosure. Moreover, in the drawings, like reference numerals designate corresponding parts throughout the several views.
-
FIG. 1 is a drawing of an example of a client device executing a client application in a networked environment. -
FIG. 2 is a drawing of the client device ofFIG. 1 and a screenshot showing content in a display of the client device. -
FIG. 3 is a drawing of the client device ofFIG. 1 and a screenshot having an identifiable watermark pattern. -
FIGS. 4-6 show examples of screenshots that are modified in response to an identification of sensitive or propriety content. -
FIG. 7 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment ofFIG. 1 . -
FIG. 8 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment ofFIG. 1 . -
FIG. 9 is a flowchart illustrating an example of functionality implemented by components that can be executed in the networked environment ofFIG. 1 . - The present disclosure relates to marking screenshots and identifying screenshots that have been marked. As noted above, some devices have an ability to allow a user to capture a screenshot which is a static image capture of visual content being rendered in a display of a client device. Screenshots can include sensitive or proprietary content. For example, screenshots can include sensitive or proprietary enterprise data. As BYOD devices can come from a multitude of different manufacturers and can come preloaded with various operating systems and default configurations, restricting access to hardware or software features that allow users to perform screenshots remains problematic. In other words, few mechanisms exist to prevent screenshots without interfering with the performance of the device.
- For example, a device provided by a manufacturer can have an ability to capture a screenshot by holding a physical button located on the device. By disabling the button programmatically, the operation of the device would be impaired because the physical button could be used to turn on or off a display screen or access a home screen.
- Accordingly, a client application executable on a client device can detect screen capture events being performed on a client device where a screenshot is generated. The screenshot can include a digital image of the content being shown on a display of the client device when the screen capture event was performed. The client application can then analyze the digital image or communicate the digital image to a remote computing environment for analysis. The client application or the remote computing environment can then determine whether the screenshot includes visual content presented by a particular client application, such as an enterprise email application or an enterprise document management application.
- If a digital image generated by a screen capture event includes visual content presented by the particular client application, the computing environment or the client application can perform a remedial action, such as blurring or obfuscating potentially sensitive regions of the digital image such that the sensitive regions are illegible, deleting the digital image from local memory of the client device, communicating a notification to an administrator, overlaying a watermark on the digital image, or replacing content in the digital image with predefined content that indicates that the digital image has been modified.
- The client application can encode a watermark pattern in a user interface for rendering on a display. In some examples, the computing environment can generate the watermark pattern so that it is unperceivable to a user of the client device. However, a client application or a computing environment can detect the watermark from screenshots to determine whether the content in the screenshots was presented by or at the request of a particular client application.
- With reference to
FIG. 1 , shown is an example of anetworked environment 100. Thenetworked environment 100 can include acomputing environment 103 and aclient device 106 in communication with one another over anetwork 109. Thenetwork 109 can include, for example, the Internet, intranets, extranets, wide area networks (WANs), local area networks (LANs), wired networks, wireless networks, other suitable networks, or any combination of two or more such networks. For example, the networks can include satellite networks, cable networks, Ethernet networks, or telephony networks. - The
computing environment 103 can include, for example, a server computer or any other system providing computing capability. Alternatively, thecomputing environment 103 can include a plurality of computing devices that are arranged, for example, in one or more server banks or computer banks. Thecomputing environments 103 can include a grid computing resource or any other distributed computing arrangement. The computing devices can be located in a single installation or can be distributed among many different geographical locations. Thecomputing environments 103 can also include or be operated as one or more virtualized computer instances. For purposes of convenience, thecomputing environment 103 is referred to herein in the singular. Even though thecomputing environment 103 is referred to in the singular, it is understood that a plurality ofcomputing environments 103 can be employed in the various arrangements as described above. - A
data store 112 can include memory of thecomputing environment 103 or mass storage resources of thecomputing environment 103. The data stored in thedata store 112, for example, can be associated with the operation of the various applications and functional entities described below. - The components executed on the
computing environment 103 can include, for example, adevice management application 115 and ascreenshot analysis application 118. Thedevice management application 115 can serve up information to generate network pages or user interface screens in aclient application 121. In some examples, thedevice management application 115 can provide enterprise information, such as emails, documents, and spreadsheets, to theclient device 106 if theclient device 106 is enrolled with thedevice management application 115. - The
screenshot analysis application 118 can perform remote analysis ofscreenshots 120 generated on theclient device 106. In some examples, thescreenshot analysis application 118 can detect watermarks that are indicative of particular user interface screens ofparticular client applications 121 that generated ascreenshot 120. For example, thescreenshot analysis application 118 can determine whether a watermark identified in ascreenshot 120 indicates that thescreenshot 120 captured information presented by an enterprise email application. In another example, thescreenshot analysis application 118 can determine whether a watermark identified in ascreenshot 120 indicates that thescreenshot 120 captured information presented by an enterprise document management application. While thescreenshot analysis application 118 is shown as being a component of thecomputing environment 103, in some examples, theclient application 121 or another service executing on theclient device 106 can perform similar functionality. - Different types of watermarks can also be used to convey
different sensitivity levels 127 for the displayed content. For example, a watermark generated for display in a respective user interface can be generated based on an anticipatedsensitivity level 127 of the content in the user interface. In one example, when a user selects or accesses an email with a “CONFIDENTIAL” tag in the subject line (e.g., for an email inbox), a subsequent user interface can be rendered that includes the body of the email as well as a watermark that indicates that theuser interface 133 contains confidential content. In other words, the watermark conveys ahigh sensitivity level 127 based on the content being rendered in therespective user interface 133. Foruser interfaces 133 that include non-confidential or non-proprietary content, a watermark that conveys alower sensitivity level 127 can be generated for rendering. - Further, in some examples, the
screenshot analysis application 118 can identify sensitive content inscreenshots 120. For example, thescreenshot analysis application 118 can perform an optical character recognition (OCR) to identify text in thescreenshot 120. Using the text, thedevice management application 115 can determine whether the text includes potentially sensitive or propriety information. For example, if the word “confidential” appears in a body of an email captured in ascreenshot 120, thedevice management application 115 can determine that thescreenshot 120 includes potentially sensitive content. - In other examples, the
screenshot analysis application 118 can utilize fingerprint matching or Radon transformations to identify whether symbols or images (beyond text) include potentially sensitive or proprietary information. For example, a word processing document can include chemical formulae that are propriety to an enterprise. Thescreenshot analysis application 118 can detect the presence of the chemical formulae by comparing the region of thescreenshot 120 having the chemical formulae to predefined image data. Assuming a match is found, thedevice management application 115 can determine whether thescreenshot 120 includes potentially sensitive content. - The data stored in the
data store 112 can include, for example,watermark patterns 124 a . . . 124 b,sensitivity levels 127, and user account data 130. The watermark patterns 124 can include predefined pixel settings and arrangements of pixel settings that are capable of identification by thescreenshot analysis application 118. In one example, theclient application 121 renders a particular one of the watermark patterns 124 in auser interface 133 shown on adisplay 136 of theclient device 106. If ascreenshot 120 is captured of theuser interface 133, the watermark pattern 124 identified from thescreenshot 120 can be indicative of theuser interface 133 or theclient application 121 rendering theuser interface 133. - In some examples, the watermark patterns 124 include an arrangement of one or more pixels in the
user interface 133 that are modified to have a predefined red, green, blue, or alpha (transparency) value. In some examples, thecomputing environment 103 can generate the watermark patterns 124 for inclusion in theuser interface 133 while being imperceptible to the human eye. For example, the computing environment can access a blue background image to be used as a header bar in auser interface 133. Thecomputing environment 103 can slightly alter pixel values, such as red, green, blue, or alpha values, for an arrangement of pixels in the header bar such that a user of theclient device 106 would be incapable of visually detecting the presence of a watermark pattern 124. For example, thecomputing environment 103 can adjust the blue pixel values for pixels in the arrangement to slightly adjust the “blueness” of the pixels. The slight adjustment would not be noticed by a user; however, thecomputing environment 103 could later identify the pixels in the arrangement after ascreenshot 120 has been generated. - The
sensitivity levels 127 can indicate a sensitivity of particular user interface screens,client applications 121, predefined text, or predefined images. In one example, aclient application 121 can include an email application where a user can send and receive enterprise emails. A “help” screen, or a user interface screen that assists the user with how to use the email application, can have alower sensitivity level 127 than a user interface screen that includes content of a confidential email. In another example, thecomputing environment 103 can associate text regions identified in a screenshot that use the term “important” with alower sensitivity level 127 than text regions that include the terms “confidential” or “proprietary.” - The user account data 130 can include, for example, profile data 139 and
screenshot data 142 stored in association with a user account, a user group, or an organization, such as an enterprise. Profile data 139 can include information associated with the user, such as a first name, a middle name, a last name, an email address, a username, a password, a personal identification number (PIN), or authentication data. In some examples, profile data 139 can include an authorizedsensitivity level 127. If content identified in ascreenshot 120 exceeds the authorizedsensitivity level 127, thecomputing environment 103 or the client application can delete or sensor thescreenshot 120; notify an administrator; or perform another suitableremedial action 152. - The
client device 106 can be representative of one ormore client devices 106 that execute instances of theclient application 121. Theclient device 106 can include a processor-based system, such as a computer system, that can include a desktop computer, a laptop computer, a personal digital assistant, a cellular telephone, a smartphone, a set-top box, a music player, a tablet computer system, a game console, or an electronic book reader. Theclient device 106 can include adisplay 136 that can be a liquid crystal display (LCD) or light emitting diode (LED) display. Theclient device 106 can also be equipped with network interfaces, including a localized network interface, such as a near-field communication (NFC) interface or radio-frequency identification (RFID) interface. - The
client device 106 can execute various applications, such as theclient application 121. Theclient application 121 can access network content served up by thecomputing environment 103 or other servers. Theclient application 121 can also render auser interface 133 on thedisplay 136. To this end, theclient application 121 can include a dedicated client application or a browser, and theuser interface 133 can include an application screen, a network page, or other interface. Theclient device 106 can execute applications beyond theclient application 121 such as device management applications, enterprise applications, social networking applications, word processors, spreadsheet applications, or media viewing applications. - Next, a general description of the operation of the various components of the
networked environment 100 is provided. To begin, theclient device 106 can install and execute an instance of aclient application 121 or other service configured to detect screenshot capture events as they are performed in theclient device 106. In one example, theclient application 121 monitors a file directory of theclient device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed. In another example, theclient application 121 monitors user gestures or other interactions performed in association with the hardware or software components of theclient device 106. For instance, someclient devices 106 are configured to perform a screen capture event as the user swipes his or her palm across thedisplay 136. Theclient application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed. - In the example of
FIG. 1 , theclient application 121 includes an email application that permits a user to send, receive, and read emails. The email application can include various user interface screens, for example, to view an inbox, read a selected email, or perform another function. In one example, thecomputing environment 103 can generate a unique watermark pattern 124 for each of theuser interfaces 133 and store the unique watermark pattern 124 in thedata store 112. Theclient application 121 can remotely access the generated watermark pattern 124 for rendering on thedisplay 136. When a watermark pattern 124 is detected in ascreenshot 120, thecomputing environment 103 can cross-reference the watermark pattern 124 against a library of watermark patterns 124 stored in thedata store 112 to identify the particular user interface screen being shown on thedisplay 136 when the screen capture event was performed. - In another example, the
computing environment 103 can generate a unique watermark pattern 124 forindividual client applications 121 that are capable of execution on theclient device 106. If a watermark pattern 124 is detected in ascreenshot 120, thecomputing environment 103 can cross-reference the watermark pattern 124 against the watermark patterns 124 stored in thedata store 112 to identify theclient application 121 being shown on thedisplay 136 when the screen capture event was performed. - Depending on the user interface screen to be shown on the
display 136 at a given time, theclient application 121 can access a corresponding watermark pattern 124 from thedata store 112 to encode in theuser interface 133. In some examples, the watermark patterns 124 are included in theuser interface 133 while being imperceptible to the human eye. For example, theclient application 121 or the computing environment can alter an arrangement of pixels in a header bar to slightly modify the color values of the pixels in an arrangement such that a user of theclient device 106 would be incapable of visually detecting the presence of the watermark pattern 124 when looking at theuser interface 133. In another example, theclient application 121 or thecomputing environment 103 can slightly alter an arrangement of pixels in theuser interface 133 to modify the alpha value of the pixels in an arrangement such that a user of theclient device 106 would be incapable of visually detecting the presence of a watermark pattern 124. - Assuming a screenshot capture event has been detected, the
user interface 133 can present adialog 145 that indicates that a screen capture event has been performed, and thescreenshot 120 that resulted from the screen capture event will be analyzed. In one example, theclient application 121 locally analyzes thescreenshot 120 generated during the screen capture event. In another example, theclient device 106 communicates thescreenshot 120 over thenetwork 109 asscreenshot data 142 for remote analysis by thecomputing environment 103. - The
client application 121 or thecomputing environment 103 can analyze the digital image to determine whether content shown in the digital image includes information that is sensitive or proprietary. For example, an administrator can associate subject lines of the emails shown in the email application ofFIG. 1 with a low level of sensitivity or a high level of sensitivity by creatingsensitivity levels 127. Assuming the subject lines of the emails have a high level of sensitivity, and the user who performed thescreenshot 120 does not have suitable permissions to performscreenshots 120 of highly sensitive materials, thecomputing environment 103 can identify aremedial action 152 and communicate theremedial action 152 to theclient device 106 for local performance. - In some embodiments, the
remedial action 152 can include blurring or obfuscating potentially sensitive portions of the digital image, deleting the digital image from local memory of the client device, communicating a notification to an administrator indicating that ascreenshot 120 was performed, overlaying a watermark on the generated digital image, or replacing content in the digital image with predefined content that indicates that the digital image has been modified. - Turning now to
FIG. 2 , shown is an example of auser interface 133 of aclient application 121 rendered on adisplay 136 of aclient device 106. In the example ofFIG. 2 , ascreenshot 120 of theuser interface 133 rendered in thedisplay 136 of theclient device 106 is generated. In various embodiments, thescreenshot 120 includes an image file, such as a Joint Photographic Experts Group (JPEG) file, a portable networks graphic (PNG) file, a graphics interchange format (GIF) file, a tagged image format file (TIFF), portable document format (PDF) file, or other image file type. - In various embodiments, the operating system of the
client device 106 facilitates the storage of thescreenshot 120 in local memory of theclient device 106 or in remote memory where thescreenshot 120 is communicated over thenetwork 109 for remote storage. In some examples, the operating system can store thescreenshot 120 in a predefined file directory according to a file naming format. For example, thescreenshot 120 can be stored as “user_name/screenshots/screenshot201502151600.png,” where “user_name” is the user name of an account associated with the client device, “screenshots,” is a directory name, and “screenshot201502151600” is the digital image file of thescreenshot 120. The format of the file name of the digital image file can be indicative of a time thescreenshot 120 was captured. For example, “201502151600” can indicate that thescreenshot 120 was captured on Feb. 15, 2015 at 4:00 PM. Theclient application 121 can monitor the file directory to detect the presence ofnew screenshots 120. - Referring next to
FIG. 3 , shown is another example of auser interface 133 of aclient application 121 rendered on adisplay 136 of aclient device 106. In the example ofFIG. 3 , theclient application 121 causes awatermark pattern 124 a . . . 124 b to be shown on thedisplay 136 of the client device. In one example, a watermark pattern 124 can include a digital image file, such as a JPEG, PNG, GIF, TIFF, or PDF file, that is overlaid in a particular area of theuser interface 133. - In some examples, the
client device 106 generates ascreenshot 120 using a compression technique. For example, if thescreenshot 120 is saved as a JPEG file, thescreenshot 120 could have been compressed. Accordingly, thecomputing environment 103 generates the watermark pattern 124 such that a compression applied to a digital image during storage of thescreenshot 120 does not impair a later detection of the watermark pattern 124. Similarly, theclient application 121 encodes the watermark pattern 124 in an area of theuser interface 133 such that a compression applied to the digital image during storage of thescreenshot 120 does not impair the later detection of the watermark pattern 124. - In other examples, the
client device 106 can store the digital image using “lossless” compression where ascreenshot 120 of what is shown in theuser interface 133 of theclient device 106 can be perfectly reconstructed from compressed data. For instance, theclient device 106 can employ lossless compression to save thescreenshot 120 as a PNG file. Accordingly, theclient application 121 or thecomputing environment 103 can later identify the watermark pattern 124 despite compression. - The watermark pattern 124 shown on the
display 136 can include a predefined arrangement of pixels that are capable of identification by thescreenshot analysis application 118. In the example ofFIG. 3 , the shaded pixels shown in the watermark pattern 124 can represent pixels that have a red, green, blue, or alpha value different from surrounding pixels while still being imperceptible to the human eye. - The example of
FIG. 3 shows an enhanced view of theuser interface 133 where the watermark pattern 124 is shown as a 2×3 grid of pixels having values (e.g., red, green, blue, or alpha values) different from surrounding pixels. The base pixel is denoted as “P” for explanatory purposes. The 2×3 grid of pixels in the example watermark pattern 124 ofFIG. 3 can be described as: -
- (w−1, h−1) (w, h−1)
- (w−1, h−2) (w, h−2)
- (w−1, h−3) (w, h−3)
where “(w−1, h−3)” is a pixel to the left of the base pixel and down 3 pixels, and so forth. The values of each of the adjusted pixels can be described as: - (p+2) (p−2)
- (p+1) (p−1)
- (p−2) (p+2)
where “p” is a value of the base pixel (e.g., a red, green, blue, or alpha value) and (p+1) is an incremented value of the pixel expressed by, for example,red+ 1,green+ 1, blue+1, oralpha+ 1. The pixel values can also be set to predefined values, since altering the color of isolated pixels would be undetectable to a user.
- The
screenshot analysis application 118 can identify a predefined base pixel in thescreenshot 120 and analyze the pixels surrounding the base pixel according to the specified watermark pattern 124. Thescreenshot analysis application 118 can detect a match if the values of the pixels match the watermark pattern 124. The match can identify theparticular client application 121 being shown on thedisplay 136 when thescreenshot 120 was captured as well as the particular user interface screen being shown by theclient application 121. - As the value of a pixel in the watermark pattern 124 is an offset from a base pixel, a modification of the color palette of the
screenshot 120, such as converting thescreenshot 120 to greyscale, colorblind mode, or high contrast, would not prevent detection of the watermark pattern 124. - Moving on to
FIG. 4 , shown is an example of auser interface 133 of aclient application 121 rendered on adisplay 136 of aclient device 106. In the example ofFIG. 4 , the digital image of thescreenshot 120 is modified to apply abranding 403 marked “CONFIDENTIAL—PROPERTY OF ENTERPRISECO.” Theclient application 121 or thecomputing environment 103 can apply thebranding 403 as aremedial action 152 in response to thescreenshot analysis application 118 identifying potentially sensitive or proprietary information in thescreenshot 120. Theclient application 121 can modify thescreenshot 120 to include thebranding 403 or, in some examples, theclient application 121 can communicate thescreenshot 120 to thecomputing environment 103 for modification. Theclient application 121 or thecomputing environment 103 can replace a modified version of thescreenshot 120 with theoriginal screenshot 120 in local memory of theclient device 106. - In addition to applying the label to the
screenshot 120, theclient application 121 or thecomputing environment 103 can perform otherremedial actions 152. For example, inFIG. 5 , theclient application 121 or thecomputing environment 103 can modify ascreenshot 120 to includelabels 503 a . . . 503 e branded “REMOVED.” In the example ofFIG. 5 , thescreenshot analysis application 118 can identify regions of thescreenshot 120 that include text to obfuscate later reading of the text. Theclient application 121 or thecomputing environment 103 can replace the regions with the labels 503 to protect sensitive information from being disseminated through thescreenshot 120. In some examples, theclient application 121 or thecomputing environment 103 can identify regions of text utilizing OCR. In the example ofFIG. 6 , theclient application 121 or thecomputing environment 103 can modify ascreenshot 120 to applyblurry regions 603 a . . . 603 e to regions of thescreenshot 120 that include text or other sensitive or proprietary content. - Referring next to
FIG. 7 , shown is a flowchart that provides one example of the operation of a portion of thenetworked environment 100. As an alternative, the flowchart ofFIG. 7 can be viewed as depicting an example of steps of a method implemented by thecomputing environment 103 or theclient application 121. The separation or segmentation of functionality as discussed herein is presented for illustrative purposes only. - Various types of
client applications 121, operating systems, or services can be configured to detect screen capture events when they occur and analyze screenshots generated during the screen capture events to identify content shown in the screenshots. In some examples, aclient application 121 being executed on theclient device 106 when the screen capture event occurs can be identified. Further, the particular user interface screen of theclient application 121 being shown when the screen capture event can be identified. - To identify the
client application 121 or the user interface screen of theclient application 121, instep 703, theclient application 121 or thecomputing environment 103 can generate watermark pattern 124 for a user interface screen of aclient application 121 and stored in association with an identifier of the user interface screen or theclient application 121 in thedata store 112. If the watermark pattern 124 is identified in ascreenshot 120, theclient application 121 or thecomputing environment 103 can cross-reference the watermark pattern 124 in thedata store 112 to identify theparticular client application 121 oruser interface 133. - In some examples, a watermark pattern 124 includes an arrangement of pixels having values offset from a base pixel. For example, the
client application 121 or thecomputing environment 103 can identify a base pixel at a suitable (x, y) location of auser interface 133. Theclient application 121 or thecomputing environment 103 can adjust values of pixels located at a predefined distance away from the base pixel as an offset from a value of the base pixel. For example, if a base pixel has an alpha value of 1, theclient application 121 or thecomputing environment 103 can modify a pixel located two pixels away to have an alpha value of 3, where the offset from the base pixel is alpha+2. As the pixels in the watermark pattern 124 have values offset from a value of the base pixel, a conversion of thescreenshot 120 to greyscale, colorblind mode, or high contrast will not prevent detection of the watermark pattern 124. - Further, generating the watermark pattern 124 can be performed to maintain the watermark pattern 124 despite image compression that can occur when generating a digital image file for a
screenshot 120. Theclient application 121 or thecomputing environment 103 can identify a suitable location of the watermark pattern 124 to withstand compression, such as a header or a footer, and apply the watermark pattern 124 in the suitable location. Theclient application 121 or thecomputing environment 103 can further select the values of the pixels in the watermark pattern 124 as an offset from the base pixel. Theclient application 121 or thecomputing environment 103 can minimize the offset to make the watermark pattern 124 unnoticeable when shown near the base pixel and other surrounding pixels. In some examples, thecomputing environment 103 can remotely generate the watermark pattern 124 and store the watermark pattern 124 in thedata store 112. In other examples, theclient application 121 locally generates the watermark pattern 124 on theclient device 106. - In
step 706, theclient application 121 or thecomputing environment 103 can apply the watermark pattern 124 to auser interface 133. In some examples, the watermark pattern 124 can include an image file overlaid in a respective location of theuser interface 133. In other examples, the watermark pattern 124 can be encoded in a resource in theuser interface 133, such as an image file. For example, an image of a header bar that is used as an asset in an application package file can be modified to include the watermark pattern 124. - In some examples, a
first client application 121 can overlay a watermark on theuser interface 133 of asecond client application 121. For example, if a user executes an enterprise e-mail application and opens an attachment using a document viewer, a watermark may be placed on another layer on theuser interface 133 to overlay the watermark on the document although the enterprise e-mail application has no control over the document viewer. As a result, screen captures of sensitive content that are not displayed directly in a proprietary application can be managed when content is accessed in third-party applications. - In another example, a user can select a hyperlink in a document or email to access a network resource, such as a uniform resource locator (URL), using a web browser application or other suitable application. A watermark can be placed on another layer on the
user interface 133 to overlay the watermark in the web browser application although the application from which the hyperlink was selected has no control over the content being rendered in thedisplay 136. A suitable watermark can be generated to overlay in the web browser application based on the network resource being accessed. For example, if the hyperlink selected by a user matches a predefined corporate intranet site, a watermark can be generated that conveys ahigh sensitivity level 127. In other examples, watermarks can be applied touser interfaces 133 of other third-party applications, such as a document viewer application when a document is accessed from an enterprise workspace, or a media player application when a corporate audio or video file is being played. - The
sensitivity level 127 encoded in a watermark can be determined by theclient application 121, and different watermarks can be used based on thesensitivity levels 127. For example, a first RGB pattern or alpha pattern can convey alow sensitivity level 127 while a second pattern can convey a medium sensitivity level, and a third pattern can convey ahigh sensitivity level 127, such as aconfidential sensitivity level 127. Theconfidentiality level 127 can be based in part on theclient application 121 that launched the currently displayed content. For example, an attachment to a calendar invite can be more likely to contain highly confidential material than the calendar invite itself. As a result, a watermark that conveys alow sensitivity level 127 can be rendered in auser interface 133 for the calendar invite while a watermark that conveys ahigh sensitivity level 127 can be rendered in auser interface 133 that displays content of an attachment of the calendar invite. - Depending on the user interface screen to be shown on the
display 136 at a given time, theclient application 121 can access a corresponding watermark pattern 124 from thedata store 112 to apply to theuser interface 133. In some examples, the watermark patterns 124 are included in theuser interface 133 while being imperceptible to the human eye. For example, an arrangement of pixels in a header bar can be altered to slightly modify the color of pixels in an arrangement such that a user of theclient device 106 would be incapable of visually detecting the presence of a watermark pattern 124. In another example, an arrangement of pixels in theuser interface 133 can be altered to slightly modify the alpha value of pixels in an arrangement such that a user of theclient device 106 would be incapable of visually detecting the presence of a watermark pattern 124. When the watermark pattern 124 is applied to theuser interface 133, thescreenshot analysis application 118 can identify theclient application 121 or auser interface 133 of theclient application 121 shown in thescreenshot 120. - Next, in
step 709, theclient application 121 or thecomputing environment 103 can detect the performance of a screen capture event during which a digital image file of ascreenshot 120 is generated. In one example, theclient application 121 can monitor a file directory of theclient device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed. In another example, theclient application 121 monitors user gestures or other interactions performed in association with the hardware or software components of theclient device 106. For instance, someclient devices 106 can be configured to perform a screen capture event as the user swipes his or her palm across thedisplay 136. Theclient application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed. - In
step 712, theclient application 121 or thecomputing environment 103 can analyze thescreenshot 120. In one example, theclient application 121 can locally analyze thescreenshot 120 generated during the screen capture event. In another example, theclient device 106 can communicate thescreenshot 120 over thenetwork 109 asscreenshot data 142 for remote analyzation by thecomputing environment 103. - In
step 715, thescreenshot 120 is analyzed to determine whether thescreenshot 120 includes a watermark pattern 124. In one example, theclient application 121 can iterate throughvarious screenshots 120 accessible by theclient device 106 to analyze eachscreenshot 120 for the presence of one or more watermark patterns 124. Theclient application 121 or thecomputing environment 103 can access thescreenshots 120 from a local directory, an application programming interface (API) offered by an operating system or screenshot service, a public or shared folder, a remote folder synced with theclient device 106, a public or private cloud computing environment in communication with theclient device 106, or from a network site or file directory. - As can be appreciated, a
client device 106 can execute aclient application 121 although auser interface 133 of theclient application 121 is not shown on adisplay 136. For example, afirst client application 121 can execute in a background mode of an operating system of theclient device 106 while asecond client application 121 executes in a foreground mode, where theuser interface 133 of thesecond client application 121 is actually shown. Accordingly, even if a screen capture event is detected on theclient device 106, the content of thescreenshot 120 can include information that is not sensitive in nature. For example, a secure email application having sensitive emails can execute in a background mode while a calculator application is executing in a foreground mode. If ascreenshot 120 is generated that shows auser interface 133 of the calculator application as opposed to the secure email application, theclient application 121 can abstain from performing aremedial action 152 as the sensitive emails were not compromised. - Accordingly, in
step 718, if a determination is made that thescreenshot 120 does not include a watermark pattern 124, the process can proceed to completion where thecomputing environment 103 and theclient application 121 abstain for performing aremedial action 152. Conversely, theclient application 121 or thecomputing environment 103 can perform one or moreremedial actions 152 instep 721 if a determination is made that thescreenshot 120 includes a watermark pattern 124. - In some examples, the
client application 121 or thecomputing environment 103 can identify aremedial action 152 based on asensitivity level 127 defined for aclient application 121 identified in thescreenshot 120; aparticular user interface 133 identified in thescreenshot 120; text, keywords, or phrases identified in thescreenshot 120; or images in thescreenshot 120. In one example, aclient application 121 can include an email application where a user can send and receive enterprise emails. A “help” screen, or auser interface 133 that assists a user with how to use the email application, can have alower sensitivity level 127 than auser interface 133 that includes content of a confidential email. In another example, theclient application 121 or thecomputing environment 103 can cross-reference text regions that include the term “important” againstsensitivity levels 127 to determine that text regions that use the term “important” have alow sensitivity level 127. In yet another example, theclient application 121 or thecomputing environment 103 can cross-reference text regions that include the terms “confidential” or “proprietary” againstsensitivity levels 127 to determine that text regions that use the terms “confidential” or “proprietary” have ahigh sensitivity level 127. - In some embodiments, the
remedial action 152 can include blurring or obfuscating potentially sensitive portions of thescreenshot 120, deleting thescreenshot 120 from local memory of theclient device 106, communicating a notification to an administrator indicating that a screen capture event has been performed, overlaying a label or a watermark on thescreenshot 120, or replacing content in thescreenshot 120 with other predefined content, such as content that indicates that thescreenshot 120 has been modified to remove sensitive content. - Turning now to
FIG. 8 , shown is a flowchart that provides one example of the operation of a portion of thenetworked environment 100. As an alternative, the flowchart ofFIG. 8 can be viewed as depicting an example of steps of a method implemented by thecomputing environment 103 or theclient application 121. The separation or segmentation of functionality as discussed herein is presented for illustrative purposes only. - In addition to performing a
remedial action 152 based solely on theparticular client application 121 oruser interface 133 identified in thescreenshot 120, theclient application 121 can perform other analysis to determine whether thescreenshot 120 includes sensitive content. For example, a “help” screen of a secure document management application may not include sensitive content while an “inbox” screen would include sensitive content. In some examples, ascreenshot 120 captured of the “help” screen would not require deletion while ascreenshot 120 captured of the “inbox” would require deletion, for example, based onsensitivity levels 127 associated with each of theuser interfaces 133. Further, in some examples, theclient application 121 can determine whetherscreenshots 120 generated byother client applications 121 include sensitive or proprietary content by analyzing thescreenshots 120 to determine whether they include sensitive or proprietary content. - Starting with
step 803, theclient application 121 or thecomputing environment 103 can analyze ascreenshot 120 to identify a watermark pattern 124 in thescreenshot 120 and to cross-reference the watermark pattern 124 with thedata store 112. Cross-referencing can include using characteristics of the watermark pattern 124 to query thedata store 112 to identify a corresponding entry that can include an identifier for aclient application 121 or an identifier for aparticular user interface 133 of theclient application 121. The characteristics of the watermark pattern 124 can include, for example, pixel locations of red, green, blue, or alpha values. - In
step 806, it is determined whether thescreenshot 120 includes a watermark pattern 124 identified from thedata store 112. If so, instep 809, theclient application 121 or thecomputing environment 103 can identify asensitivity level 127 based on theclient application 121 or theuser interface 133 of theclient application 121 shown in thescreenshot 120. Thesensitivity levels 127 can indicate a sensitivity of aparticular user interface 133, such as an “inbox” in a secure email application or a “confidential” folder in a secure document application. In some examples, an administrator can associate ahigh sensitivity level 127 with aclient application 121 where alluser interfaces 133 of theclient application 121 inherit thehigh sensitivity level 127. - Referring back to step 806, if the watermark pattern 124 is not identified in the
data store 112, theclient application 121 or thecomputing environment 103 can further process thescreenshot 120 to determine whether sensitive or propriety information is shown in thescreenshot 120. For example, instep 812, theclient application 121 or thecomputing environment 103 can analyze thescreenshot 120 to identify text in thescreenshot 120. This can include applying OCR techniques to identify regions of text in thescreenshot 120 as well as individual characters. Further, instep 815, theclient application 121 or thecomputing environment 103 can identify images, such as icons, symbols or graphics, in thescreenshot 120. - Next, the process can proceed to 809 to determine whether a
sensitivity level 127 has been established for the text or images identified in thescreenshot 120. For example, theclient application 121 or thecomputing environment 103 can identify ahigh sensitivity level 127 for ascreenshot 120 if a term in a text region of thescreenshot 120 includes “confidential” or “proprietary.” However, theclient application 121 or thecomputing environment 103 can identify alow sensitivity level 127 if the text region includes the term “important.” If an image identified from thescreenshot 120 includes characteristics indicating that the image is of a chemical formula, mathematical equation, or other potentially proprietary content, theclient application 121 or thecomputing environment 103 can associate the image identified in thescreenshot 120 with ahigh sensitivity level 127. - In
step 818, it is determined whether theclient application 121, theuser interface 133 of theclient application 121, the text in thescreenshot 120, or the images identified in thescreenshot 120 have asensitivity level 127 exceeding a predefined threshold. An administrator can establish the predefined threshold as a threshold where aremedial action 152 should be performed. For example, if content in thescreenshot 120 has ahigh sensitivity level 127, theclient application 121 or thecomputing environment 103 can cause thescreenshot 120 to be deleted or censored. If thesensitivity level 127 of the content identified in thescreenshot 120 does not exceed a predefined threshold, the process can proceed to step 821 where thescreenshot 120 is not altered. Thereafter, the process can end. - However, if the
sensitivity level 127 of the content identified in thescreenshot 120 exceeds a predefined threshold, instep 824, theclient application 121 or thecomputing environment 103 can perform aremedial action 152. In some examples, theclient application 121 or thecomputing environment 103 can identify aremedial action 152 based on asensitivity level 127 of theparticular client application 121, theuser interface 133 captured in thescreenshot 120, text in theuser interface 133, or images in theuser interface 133. - For example, the
client application 121 or thecomputing environment 103 can blur or obfuscate regions of thescreenshot 120 that have sensitive content. In other examples, theclient application 121 or thecomputing environment 103 can delete thescreenshot 120 and communicate an electronic notification to an administrator that indicates that a screen capture event has been performed. In some examples, the electronic notification can include information pertaining to the content identified in thescreenshot 120. In some examples, theclient application 121 or thecomputing environment 103 can overlay a label or a watermark on thescreenshot 120. In yet other examples, theclient application 121 or thecomputing environment 103 can replace content in thescreenshot 120 with other predefined content, such as content that indicates that thescreenshot 120 has been modified to remove sensitive content. For example, theclient application 121 or thecomputing environment 103 can replace the subject lines of proprietary emails with “REMOVED,” or other suitable label. Thereafter, the process can proceed to end. - Moving on to
FIG. 9 , shown is a flowchart that provides one example of the operation of a portion of thenetworked environment 100. As an alternative, the flowchart ofFIG. 9 can be viewed as depicting an example a method implemented by thecomputing environment 103 or theclient application 121. The separation or segmentation of functionality as discussed herein is presented for illustrative purposes only. - In
step 903, theclient application 121 or thecomputing environment 103 can detect a screen capture event during which a digital image file of ascreenshot 120 is generated. In one example, theclient application 121 can monitor a file directory of theclient device 106 where snapshots are traditionally stored to identify the presence of new digital images, indicating that a screen capture event has been performed. In another example, theclient application 121 can monitor user gestures or other interactions performed in association with the hardware or software components of theclient device 106. For instance, someclient devices 106 can perform a screen capture event as the user swipes his or her palm across thedisplay 136. Theclient application 121 can detect the swipe gesture performed on the display, indicating that a screen capture event has been performed. - In some situations, a
client device 106 can perform a cloud backup of a digital image when the digital image is generated. For example, if a screen capture event is performed, the digital image of the screen capture can automatically be uploaded to cloud storage. Accordingly, instep 906, a network interface of theclient device 106 can be disabled in response to detection of a screen capture event, for example, to prevent the digital image of thescreenshot 120 being transferred to another device. In some examples, disabling of the network interface can include disabling a wireless fidelity (WiFi) module, disabling a cellular network module, such as a GSM or CDMA module, or disabling a wired communication network module, such as an Ethernet module, a Firewire module, or a universal serial bus (USB) module. - In
step 909, thescreenshot 120 is analyzed to determine whether thescreenshot 120 includes a watermark pattern 124. In one example, theclient application 121 can iterate throughvarious screenshots 120 accessible by theclient device 106 to analyze eachscreenshot 120 for the presence of one or more watermark patterns 124. Theclient application 121 or thecomputing environment 103 can access thescreenshots 120 from a local directory, an application programming interface (API) offered by an operating system or screenshot service, a public or shared folder, a remote folder synced with theclient device 106, a public or private cloud computing environment in communication with theclient device 106, or from a network site or file directory. - Accordingly, if a determination is made that the
screenshot 120 does not include a watermark pattern 124, the process can proceed to step 915 where the network interface disabled instep 906 is enabled and, the process can proceed to completion thereafter. Alternatively, instep 918, theclient application 121 or thecomputing environment 103 can determine whether one or moreremedial actions 152 needed to be performed instep 918 if a determination is made that thescreenshot 120 includes a watermark pattern 124 atstep 909. - In some examples, the
client application 121 or thecomputing environment 103 can determine whether one or moreremedial actions 152 are required based on asensitivity level 127 conveyed by the identified watermark pattern. For example, aclient application 121 can include an email application where a user can send and receive enterprise emails. A “help” screen, or auser interface 133 that assists a user with how to use the email application, can have alower sensitivity level 127 than auser interface 133 that includes confidential or sensitive content. Accordingly, aremedial action 152 may not be required if thescreenshot 120 includes the “help” screen. However, one or moreremedial actions 152 may be required if thescreenshot 120 includes the sensitive or confidential content. - In
step 921, if aremedial action 152 is not required, the process can proceed to 915 to enable the network interface of theclient device 106 and, thereafter, the process can proceed to completion. If aremedial action 152 is required, the process can proceed to step 924 where theremedial action 152 can be performed. In some embodiments, theremedial action 152 can include blurring or obfuscating potentially sensitive portions of thescreenshot 120, deleting thescreenshot 120 from local memory of theclient device 106, communicating a notification to an administrator indicating that a screen capture event has been performed, overlaying a label or a watermark on thescreenshot 120, or replacing content in thescreenshot 120 with other predefined content, such as content that indicates that thescreenshot 120 has been modified to remove sensitive content. - The process then proceeds to 915 to enable the network interface of the
client device 106. In some examples, enabling of the network interface can include enabling the WiFi module, enabling the cellular network module, such as a GSM or CDMA module, or enabling a wired communication network module, such as an Ethernet module, a Firewire module, or a USB module. If aremedial action 152 performed instep 924 includes modifying the image of thescreenshot 120, the modifiedscreenshot 120 can be transmitted using the network interface. Thereafter, the process can proceed to completion. - The flowcharts of
FIGS. 7, 8, and 9 show examples of the functionality and operation of implementations of components described herein. The components of thenetworked environment 100 described herein can be embodied in hardware, software, or a combination of hardware and software. If embodied in software, each step in the flowcharts ofFIGS. 6 and 7 can represent a module or a portion of code that includes computer instructions to implement the specified logical functions. The computer instructions can be embodied in the form of source code that includes human-readable statements written in a programming language or machine code that includes machine instructions recognizable by a suitable execution system, such as a processor in a computer system or other system. If embodied in hardware, each step can represent a circuit or a number of interconnected circuits that implement the specified logical functions. - Although the flowcharts of
FIGS. 7, 8, and 9 show a specific order of execution, it is understood that the order of execution can differ from that which is shown. For example, the order of execution of two or more steps can be switched relative to the order shown. Also, two or more steps shown in succession can be executed concurrently or with partial concurrence. Further, in some examples, one or more of the steps shown in the flowcharts can be skipped or omitted. In addition, any number of counters, state variables, warning semaphores, or messages can be added to the logical flow described herein, for purposes of enhanced utility, accounting, performance measurement, or troubleshooting aid. All such variations are within the scope of the present disclosure. - The
computing environment 103,client device 106, and other components described herein can each include at least one processing circuit. Such a processing circuit can include one or more processors and one or more storage devices that are coupled to a local interface. The local interface can include a data bus with an accompanying address/control bus. - A storage device for a processing circuit can store data and components that are executable by the one or more processors of the processing circuit. In some examples, the
device management application 115, thescreenshot analysis application 118, and theclient application 121 can be stored in one or more storage devices and be executable by one or more processors. Also, thedata store 112 can be located in the one or more storage devices. - The
device management application 115, thescreenshot analysis application 118, theclient application 121, and other components described herein can be embodied in the form of hardware, as software components that are executable by hardware, or as a combination of software and hardware. If embodied as hardware, the components described herein can be implemented as a circuit or state machine that employs any suitable hardware technology. Such hardware technology includes, for example, one or more microprocessors, discrete logic circuits having logic gates for implementing various logic functions upon an application of one or more data signals, application specific integrated circuits (ASICs) having appropriate logic gates, or programmable logic devices, such as field-programmable gate array (FPGAs) and complex programmable logic devices (CPLDs). - Also, one or more or more of the components described herein that include software or computer instructions can be embodied in any non-transitory computer-readable medium for use by or in connection with an instruction execution system such as, for example, a processor in a computer system or other system. Such a computer-readable medium can contain, store, and maintain the software or computer instructions for use by or in connection with the instruction execution system.
- A computer-readable medium can include a physical media, such as, magnetic, optical, semiconductor, or other suitable media. Examples of a suitable computer-readable media include solid-state drives, magnetic drives, flash memory, and storage discs, such as compact discs (CDs). Further, any logic or component described herein can be implemented and structured in a variety of ways. For example, one or more components described can be implemented as modules or components of a single application. Further, one or more components described herein can be executed in one computing device or by using multiple computing devices.
- The examples described above are merely examples of implementations to set forth for a clear understanding of the principles of the disclosure. Many variations and modifications can be made to the examples described above without departing substantially from the spirit and principles of the disclosure. All such modifications and variations are intended to be included herein within the scope of this disclosure.
Claims (20)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US16/120,348 US20180373851A1 (en) | 2015-09-09 | 2018-09-03 | Screen shot marking and identification for device security |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/848,805 US10068071B2 (en) | 2015-09-09 | 2015-09-09 | Screen shot marking and identification for device security |
US16/120,348 US20180373851A1 (en) | 2015-09-09 | 2018-09-03 | Screen shot marking and identification for device security |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/848,805 Continuation US10068071B2 (en) | 2015-09-09 | 2015-09-09 | Screen shot marking and identification for device security |
Publications (1)
Publication Number | Publication Date |
---|---|
US20180373851A1 true US20180373851A1 (en) | 2018-12-27 |
Family
ID=58190071
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/848,805 Active 2036-03-31 US10068071B2 (en) | 2015-09-09 | 2015-09-09 | Screen shot marking and identification for device security |
US16/120,348 Abandoned US20180373851A1 (en) | 2015-09-09 | 2018-09-03 | Screen shot marking and identification for device security |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/848,805 Active 2036-03-31 US10068071B2 (en) | 2015-09-09 | 2015-09-09 | Screen shot marking and identification for device security |
Country Status (1)
Country | Link |
---|---|
US (2) | US10068071B2 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109828810A (en) * | 2018-12-28 | 2019-05-31 | 北京达佳互联信息技术有限公司 | Screen shots intercept method, watermark adding method, device, equipment and medium |
US10789339B1 (en) * | 2019-05-20 | 2020-09-29 | Alibaba Group Holding Limited | Copyright protection based on hidden copyright information |
Families Citing this family (45)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9740860B2 (en) * | 2015-02-26 | 2017-08-22 | Kairos Social Solutions, Inc. | Device, system, and method of preventing unauthorized recording of visual content displayed on an electronic device |
US10068071B2 (en) * | 2015-09-09 | 2018-09-04 | Airwatch Llc | Screen shot marking and identification for device security |
US10733478B2 (en) * | 2016-08-31 | 2020-08-04 | Facebook, Inc. | Systems and methods for processing media content that depict objects |
US10419511B1 (en) * | 2016-10-04 | 2019-09-17 | Zoom Video Communications, Inc. | Unique watermark generation and detection during a conference |
US10425445B2 (en) * | 2016-12-15 | 2019-09-24 | Interwise Ltd | Deception using screen capture |
CN107292180B (en) * | 2017-05-27 | 2019-07-05 | 北京北信源软件股份有限公司 | A kind of screen watermark handling method and device |
US10482284B1 (en) * | 2017-07-25 | 2019-11-19 | Symantec Corporation | Identifying, marking and erasing sensitive information in screen captures for data loss prevention |
US20190108355A1 (en) * | 2017-10-09 | 2019-04-11 | Digital Guardian, Inc. | Systems and methods for identifying potential misuse or exfiltration of data |
CN107679419B (en) * | 2017-10-17 | 2020-07-14 | 南通纤麦家纺科技有限公司 | Screen capturing method and device |
KR102010245B1 (en) * | 2017-11-23 | 2019-08-13 | 주식회사 테르텐 | Program for disablling watermark process during screen capture operation |
WO2019161530A1 (en) * | 2018-02-22 | 2019-08-29 | Citrix Systems, Inc. | Providing security to mobile devices via image evaluation operations that electronically analyze image data received from cameras of the mobile devices |
WO2019180327A1 (en) * | 2018-03-19 | 2019-09-26 | Daniel Mauduit | Method of securing transfer and managing data, on internet or analogous network, across a data exchange portal or platform. |
AU2019262611B2 (en) * | 2018-05-04 | 2022-01-13 | Citrix Systems, Inc. | Systems and methods for adding watermarks using an embedded browser |
US20210200900A1 (en) * | 2018-07-10 | 2021-07-01 | Intutive Surgical Operations, Inc. | Systems and methods for censoring confidential information |
US11347893B2 (en) | 2018-08-28 | 2022-05-31 | Visa International Service Association | Methodology to prevent screen capture of sensitive data in mobile apps |
US20210312080A1 (en) * | 2018-08-28 | 2021-10-07 | Visa International Service Association | Methodology to obfuscate sensitive information in mobile application background snapshot |
US10762231B2 (en) | 2018-10-30 | 2020-09-01 | Citrix Systems, Inc. | Protecting screenshots of applications executing in a protected workspace container provided in a mobile device |
US11450069B2 (en) | 2018-11-09 | 2022-09-20 | Citrix Systems, Inc. | Systems and methods for a SaaS lens to view obfuscated content |
US11748522B2 (en) * | 2019-07-12 | 2023-09-05 | Peanut Butter and Jelly TV L.L.C. | Systems, devices, and methods for prevention of recording content |
CN110825289A (en) * | 2019-10-31 | 2020-02-21 | 北京字节跳动网络技术有限公司 | Method and device for operating user interface, electronic equipment and storage medium |
US11727146B2 (en) * | 2019-11-26 | 2023-08-15 | Jpmorgan Chase Bank, N.A. | Systems and methods for privacy-preserving summarization of digital activity |
US11544415B2 (en) | 2019-12-17 | 2023-01-03 | Citrix Systems, Inc. | Context-aware obfuscation and unobfuscation of sensitive content |
US11539709B2 (en) | 2019-12-23 | 2022-12-27 | Citrix Systems, Inc. | Restricted access to sensitive content |
US11582266B2 (en) | 2020-02-03 | 2023-02-14 | Citrix Systems, Inc. | Method and system for protecting privacy of users in session recordings |
EP3881202B1 (en) * | 2020-02-06 | 2022-01-26 | Google LLC | Verifying display of third party content at a client device |
US11361113B2 (en) | 2020-03-26 | 2022-06-14 | Citrix Systems, Inc. | System for prevention of image capture of sensitive information and related techniques |
CN111461955A (en) * | 2020-03-31 | 2020-07-28 | 上海德易车信息科技有限公司 | Method and device for automatically increasing digital blind watermark in screenshot, electronic equipment and storage medium |
US10990856B1 (en) | 2020-06-03 | 2021-04-27 | Netskope, Inc. | Detecting image-borne identification documents for protecting sensitive information |
US10949961B1 (en) * | 2020-06-03 | 2021-03-16 | Netskope, Inc. | Detecting screenshot images for protecting against loss of sensitive screenshot-borne data |
US10867073B1 (en) | 2020-06-03 | 2020-12-15 | Netskope, Inc. | Detecting organization image-borne sensitive documents and protecting against loss of the sensitive documents |
WO2022041163A1 (en) | 2020-08-29 | 2022-03-03 | Citrix Systems, Inc. | Identity leak prevention |
US11930240B2 (en) | 2020-11-11 | 2024-03-12 | Motorola Mobility Llc | Media content recording with sensor data |
CN114691061A (en) | 2020-12-29 | 2022-07-01 | 摩托罗拉移动有限责任公司 | Personal content managed during extended display screen recording |
CN114691060A (en) * | 2020-12-29 | 2022-07-01 | 摩托罗拉移动有限责任公司 | Personal content managed during device screen recording |
CN115048009A (en) * | 2021-02-26 | 2022-09-13 | 京东方科技集团股份有限公司 | Dialog interface intercepting method and device, computer equipment and storage medium |
RU2758666C1 (en) * | 2021-03-25 | 2021-11-01 | Публичное Акционерное Общество "Сбербанк России" (Пао Сбербанк) | Method and system for protection of digital information displayed on the screen of electronic apparatuses using dynamic digital tags |
CN113139163B (en) * | 2021-04-15 | 2023-05-26 | 上海上讯信息技术股份有限公司 | Method and device for generating watermark information on application program interface |
CN113382083B (en) * | 2021-06-30 | 2022-12-23 | 建信金融科技有限责任公司 | Webpage screenshot method and device |
US11475158B1 (en) | 2021-07-26 | 2022-10-18 | Netskope, Inc. | Customized deep learning classifier for detecting organization sensitive data in images on premises |
US11734397B2 (en) * | 2021-12-01 | 2023-08-22 | International Business Machines Corporation | Hallmark-based image capture prevention |
CN114218622A (en) * | 2021-12-21 | 2022-03-22 | 爱尔卓资讯有限公司 | Equipment screen information protection method based on remote control |
CN114596188A (en) * | 2022-02-22 | 2022-06-07 | 北京百度网讯科技有限公司 | Watermark detection method, model training method, device and electronic equipment |
TWI810101B (en) * | 2022-10-27 | 2023-07-21 | 南亞塑膠工業股份有限公司 | Disklink system |
US12045441B1 (en) * | 2023-02-28 | 2024-07-23 | Motorola Mobility Llc | Automated screen shot capture of primary content |
CN116841424B (en) * | 2023-08-28 | 2024-02-09 | 华能信息技术有限公司 | Screen capture monitoring method and system |
Citations (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030012401A1 (en) * | 2001-04-25 | 2003-01-16 | Sharma Ravi K. | Encoded reference signal for digital watermarks |
US20040247120A1 (en) * | 2003-06-03 | 2004-12-09 | Yu Hong Heather | Methods and apparatus for digital content protection |
US20060212705A1 (en) * | 2005-03-17 | 2006-09-21 | Interdigital Technology Corporation | Wireless communication method and apparatus for generating, watermarking and securely transmitting content |
US20110214107A1 (en) * | 2010-03-01 | 2011-09-01 | Experitest, Ltd. | Method and system for testing graphical user interfaces |
US20110314550A1 (en) * | 2010-06-22 | 2011-12-22 | Microsoft Corporation | Watermark to identify leak source |
US20120169762A1 (en) * | 2010-12-30 | 2012-07-05 | International Business Machines Corporation | Protecting screen information |
US20120174232A1 (en) * | 2011-01-04 | 2012-07-05 | Dharawat Parikshit H | Mechanism for embedding device identification information into graphical user interface objects |
US20120255029A1 (en) * | 2011-04-04 | 2012-10-04 | Markany Inc. | System and method for preventing the leaking of digital content |
US8429745B1 (en) * | 2011-09-23 | 2013-04-23 | Symantec Corporation | Systems and methods for data loss prevention on mobile computing systems |
US20140007246A1 (en) * | 2012-06-28 | 2014-01-02 | Fortinet, Inc. | Data leak protection |
US8655011B2 (en) * | 2000-12-21 | 2014-02-18 | Digimarc Corporation | Content identification and electronic tickets, coupons and credits |
US20140150114A1 (en) * | 2012-11-28 | 2014-05-29 | Anand Sinha | Visual securement of sensitive data |
US20140169616A1 (en) * | 2012-12-13 | 2014-06-19 | Microsoft Corporation | Watermarking screen capture content |
US8826452B1 (en) * | 2012-01-18 | 2014-09-02 | Trend Micro Incorporated | Protecting computers against data loss involving screen captures |
US20140247961A1 (en) * | 2011-10-11 | 2014-09-04 | Fasoo.Com Co., Ltd | Apparatus and method for displaying watermark on a screen |
US8844059B1 (en) * | 2011-02-15 | 2014-09-23 | Symantec Corporation | Method and apparatus for preventing data loss through screen capture |
US20140366159A1 (en) * | 2013-06-08 | 2014-12-11 | Microsoft Corporation | Continuous digital content protection |
US20150169896A1 (en) * | 2013-12-17 | 2015-06-18 | Inwellcom Technology Co., Ltd. | File management system and method |
US20150215492A1 (en) * | 2014-01-29 | 2015-07-30 | Voir Inc. | Using a Security Feature with a Digital Image File |
US20160171242A1 (en) * | 2007-08-17 | 2016-06-16 | Mcafee, Inc. | System, method, and compuer program product for preventing image-related data loss |
US20160253772A1 (en) * | 2015-02-27 | 2016-09-01 | The Sixth Flag, Inc. | Secure content and document watermarking |
US20160285893A1 (en) * | 2015-03-24 | 2016-09-29 | International Business Machines Corporation | System and method for enhanced display-screen security and privacy |
US20170017648A1 (en) * | 2015-07-15 | 2017-01-19 | Chappy, Inc. | Systems and methods for screenshot linking |
US9582482B1 (en) * | 2014-07-11 | 2017-02-28 | Google Inc. | Providing an annotation linking related entities in onscreen content |
US10068071B2 (en) * | 2015-09-09 | 2018-09-04 | Airwatch Llc | Screen shot marking and identification for device security |
-
2015
- 2015-09-09 US US14/848,805 patent/US10068071B2/en active Active
-
2018
- 2018-09-03 US US16/120,348 patent/US20180373851A1/en not_active Abandoned
Patent Citations (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8655011B2 (en) * | 2000-12-21 | 2014-02-18 | Digimarc Corporation | Content identification and electronic tickets, coupons and credits |
US20030012401A1 (en) * | 2001-04-25 | 2003-01-16 | Sharma Ravi K. | Encoded reference signal for digital watermarks |
US20040247120A1 (en) * | 2003-06-03 | 2004-12-09 | Yu Hong Heather | Methods and apparatus for digital content protection |
US20060212705A1 (en) * | 2005-03-17 | 2006-09-21 | Interdigital Technology Corporation | Wireless communication method and apparatus for generating, watermarking and securely transmitting content |
US20160171242A1 (en) * | 2007-08-17 | 2016-06-16 | Mcafee, Inc. | System, method, and compuer program product for preventing image-related data loss |
US20110214107A1 (en) * | 2010-03-01 | 2011-09-01 | Experitest, Ltd. | Method and system for testing graphical user interfaces |
US20110314550A1 (en) * | 2010-06-22 | 2011-12-22 | Microsoft Corporation | Watermark to identify leak source |
US20120169762A1 (en) * | 2010-12-30 | 2012-07-05 | International Business Machines Corporation | Protecting screen information |
US20120174232A1 (en) * | 2011-01-04 | 2012-07-05 | Dharawat Parikshit H | Mechanism for embedding device identification information into graphical user interface objects |
US8844059B1 (en) * | 2011-02-15 | 2014-09-23 | Symantec Corporation | Method and apparatus for preventing data loss through screen capture |
US20120255029A1 (en) * | 2011-04-04 | 2012-10-04 | Markany Inc. | System and method for preventing the leaking of digital content |
US8429745B1 (en) * | 2011-09-23 | 2013-04-23 | Symantec Corporation | Systems and methods for data loss prevention on mobile computing systems |
US20140247961A1 (en) * | 2011-10-11 | 2014-09-04 | Fasoo.Com Co., Ltd | Apparatus and method for displaying watermark on a screen |
US8826452B1 (en) * | 2012-01-18 | 2014-09-02 | Trend Micro Incorporated | Protecting computers against data loss involving screen captures |
US20140007246A1 (en) * | 2012-06-28 | 2014-01-02 | Fortinet, Inc. | Data leak protection |
US20140150114A1 (en) * | 2012-11-28 | 2014-05-29 | Anand Sinha | Visual securement of sensitive data |
US20140169616A1 (en) * | 2012-12-13 | 2014-06-19 | Microsoft Corporation | Watermarking screen capture content |
US20140366159A1 (en) * | 2013-06-08 | 2014-12-11 | Microsoft Corporation | Continuous digital content protection |
US20150169896A1 (en) * | 2013-12-17 | 2015-06-18 | Inwellcom Technology Co., Ltd. | File management system and method |
US20150215492A1 (en) * | 2014-01-29 | 2015-07-30 | Voir Inc. | Using a Security Feature with a Digital Image File |
US9582482B1 (en) * | 2014-07-11 | 2017-02-28 | Google Inc. | Providing an annotation linking related entities in onscreen content |
US20160253772A1 (en) * | 2015-02-27 | 2016-09-01 | The Sixth Flag, Inc. | Secure content and document watermarking |
US20160285893A1 (en) * | 2015-03-24 | 2016-09-29 | International Business Machines Corporation | System and method for enhanced display-screen security and privacy |
US20170017648A1 (en) * | 2015-07-15 | 2017-01-19 | Chappy, Inc. | Systems and methods for screenshot linking |
US10068071B2 (en) * | 2015-09-09 | 2018-09-04 | Airwatch Llc | Screen shot marking and identification for device security |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109828810A (en) * | 2018-12-28 | 2019-05-31 | 北京达佳互联信息技术有限公司 | Screen shots intercept method, watermark adding method, device, equipment and medium |
US10789339B1 (en) * | 2019-05-20 | 2020-09-29 | Alibaba Group Holding Limited | Copyright protection based on hidden copyright information |
US10909223B2 (en) | 2019-05-20 | 2021-02-02 | Advanced New Technologies Co., Ltd. | Copyright protection based on hidden copyright information |
Also Published As
Publication number | Publication date |
---|---|
US10068071B2 (en) | 2018-09-04 |
US20170068829A1 (en) | 2017-03-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20180373851A1 (en) | Screen shot marking and identification for device security | |
US20210173610A1 (en) | Selective screen sharing | |
US11704384B2 (en) | Secure document sharing | |
US10701069B2 (en) | Online identity verification platform and process | |
WO2020248955A1 (en) | Content sharing method and electronic device | |
CN107423629B (en) | Method and system for file information output anti-disclosure and tracing | |
CN107239713B (en) | Sensitive content data information protection method and system | |
TWI522814B (en) | Method,computer program product and computer system for consent-based sharing online photographs | |
US11704764B2 (en) | Method and system for generating watermark on the basis of graphic, terminal, and medium | |
KR101756288B1 (en) | Document security system | |
US10764860B2 (en) | Monitoring resource access | |
CN105117122A (en) | Terminal screenshot method and terminal | |
US11301710B2 (en) | Managing camera actions | |
US9344450B2 (en) | Detecting phishing of a matrix barcode | |
US10952087B2 (en) | Detecting resource access | |
US8485428B1 (en) | Systems and methods for providing security information about quick response codes | |
US8490861B1 (en) | Systems and methods for providing security information about quick response codes | |
CN104933375A (en) | Method and system for protecting electronic display document | |
CN103699314B (en) | Realize the method and terminal of handwriting | |
US8677503B2 (en) | Mechanism for embedding device identification information into graphical user interface objects | |
US10482284B1 (en) | Identifying, marking and erasing sensitive information in screen captures for data loss prevention | |
CN111783119B (en) | Form data security control method, form data security control device, electronic equipment and storage medium | |
JPWO2017130335A1 (en) | Image processing apparatus, image processing method, and program | |
CN112905971A (en) | Method and device for processing information | |
WO2021012502A1 (en) | Screenshot information control method, device, computer apparatus, and storage medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: ADVISORY ACTION MAILED |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |