System and method for detecting leaked documents on a computer network

Abstract

A system and a method of obtaining a location of a document on a computer network based on a document property. The method may include: receiving at least one basic marker and an encoding function associated with the document property; generating a search term according to the encoding function, based on the at least one basic marker; providing the search term to at least one search engine and obtaining therefrom one or more search results corresponding, where each search result may include one or more references to locations of documents on the computer network; discovering at least one document having the document property from the one or more search results and obtaining a discovered location of the document on the computer network; and performing at least one rule-based action, according to at least one document property of the discovered document.

1 - 14 . (canceled) 
     
     
         15 . A system for obtaining a location of a document on a computer network based on at least one property of the document, the system comprising an encoder module and an auditing module, wherein the encoder module is configured to mark the document with an encoded marker uniquely representing the document property and wherein the auditing module is configured to search the computer network and obtain the location of the document according to the encoded marker. 
     
     
         16 . The system according to  claim 15 , wherein the encoder module is further configured to:
 receive one or more basic markers;   receive an encoding function associated with the document property;   produce an encoded marker based on the one or more basic markers according to the encoding function; and   mark the document with the encoded marker.   
     
     
         17 . The system of  claim 16  wherein the encoding function comprises at least one obfuscation element. 
     
     
         18 . The system of  claim 15 , wherein the auditing module is further configured to:
 receive one or more basic markers;   produce one or more search terms based on the one or more basic markers and according to a decoding function; and   utilize a search engine to obtain one or more search results corresponding to the one or more search terms, wherein at least one search result comprises one or more references to locations of one or more marked documents on the computer network.   
     
     
         19 . The system of  claim 18 , wherein the auditing module is further configured to:
 discover at least one document having the at least one document property from the one or more search results and a respective location on the computer network; and   perform at least one rule-based action, according to at least one document property of the discovered document.   
     
     
         20 . The system according to  claim 16 , wherein the encoder is configured to receive a group of N1 documents having at least one common document property and produce an encoded marker that uniquely represents the at least one common document property, based on one or more basic markers, and wherein the auditor is configured to provide the encoded marker to a search engine as a search term and obtain from the search engine a number N2 of search results, and wherein N2 is limited by the number of copies of documents of the group of N1 documents on the computer network. 
     
     
         21 . A method of obtaining a location of a document on a computer network, the method comprising:
 receiving a group of N1 documents having at least one common document property;   generating an encoded marker, uniquely representing the at least one common document property, based on one or more basic markers;   providing the encoded marker to a search engine as a search term;   obtaining from the search engine a number N2 of search results, wherein N2 is limited by the number of copies of documents of the group of N1 documents on the computer network;   discovering at least one document having document property from the N2 search results and obtaining a respective discovered location of the document on the computer network; and   performing at least one rule-based action, according to at least one document property of the discovered document.