Method for allowing data classification in inflexible software development environments

1. A method for enabling data modification, classification and enforcement of information rights management (IRM) capabilities in standard isolated software applications, comprising:

a) installing an add-on code on a terminal device of a user that runs said standard application, said add-on code is adapted to interact with a virtual keyboard used by said standard application, to form a custom virtual keyboard to which the features of classifying data item(s) and/or of modifying the content of said data item are added, without changing the natural environment, the user is normally used to; and

b) creating the custom virtual keyboard that includes a designed user interface (UI) interfacing objects, for adding inputs that are associated with classification and modification in said data item in the form of a hidden tag to the content of said data item, wherein modifications in the content of the data item include adding a disclaimer, adding invisible marking tagging characters/objects, content marking, watermarking, or hidden signatures.

2. A method according to claim 1 , further comprising upon consuming the classified or modified data item by the standard application, seeking said hidden tag and making a decision regarding further processing of said data item, according to a predetermined protection policy.

3. A method according to claim 1 , further comprising embedding a dedicated code into the inherent code of the virtual keyboard, for tracking the characters that the user inputs and detecting keywords or strings of the typed data item that are indicative that the content of the data item should be classified.

4. A method according to claim 1 , further comprising rebounding data items for which no hidden tag is found back to the sender, along with a request for classification.

5. A method according to claim 1 , further comprising automatically encrypting the data item, in response to its classification.

6. A method according to claim 1 , wherein the interfacing objects are virtual buttons, checkboxes and icons for providing inputs that are associated with classification and modification in the data item.

7. A method according to claim 1 , wherein the hidden tag is a character having a transparent font of a very small font presented at the bottom of the message body.

8. A method according to claim 1 , wherein the protection policy includes blocking one or more operations that can be made with the classified data item.

9. A method according to claim 1 , further comprising:

a) showing an accessibility button hovering over input areas on screen;

b) allowing the user clicking said accessibility button using a UI which allows said user to select an appropriate classification for his composed content and adding visible or hidden markings to the composed content, based on his selection.

10. A method according to claim 1 , wherein a security product is used to enforce a desired security policy by allowing a secured data item to reach its destination only after said security product runs a security policy, based on the classification made.

11. A method according to claim 10 , wherein the security product is selected from the group of:

a Cloud Access Security Broker (CASB);

a Data Loss Prevention module (DLP);

a mail server policy.

12. A method according to claim 10 , wherein the security policy includes encryption, tagging or blocking operations.

13. A system for enabling data modification, classification and enforcement of information rights management (IRM) capabilities in standard isolated software applications, comprising:

a) a user's terminal device that runs said standard application, on which an add-on code is installed, said add-on code is adapted to interact with the virtual keyboard used by said standard application, to form a custom virtual keyboard to which the features of classifying data item(s) and/or of modifying the content of said data item are added, without changing the natural environment, the user is normally used to; and

b) a designed user interface (UI) for displaying a custom virtual keyboard including interfacing objects, for classifying said data item by allowing said user adding inputs that are associated with classification and modification in said data item in the form of a hidden tag that is added to the content of said data item, wherein modifications in the data item include adding a disclaimer, adding invisible marking tagging characters/objects, content marking, watermarking, or hidden signatures; and

c) a computerized device running a security module, for seeking the hidden tag and making a decision regarding further processing of said data item, according to a predetermined protection policy.

14. A system according to claim 13 , in which further processing of the data item includes converting said data item into a secured data item, before being consumed by a user or destination.

15. A system according to claim 13 , in which the security module includes a dedicated code adapted to:

a) track the characters that the user inputs and detect keywords or strings of the typed data item that are indicative that the content of the data item should be classified;

b) rebound data items for which no hidden tag is found back to the sender, along with a request for classification.