| A daunting task in any organization is the management of confidential material in the digital age. If one distributes a digital document via email or within an internal network, it is easily leaked by numerous mechanisms: one can store a document on a thumb drive, forward an email, and copy and paste text. If these are prevented one can always capture the user's screen and steal that bitmap file. The threat is not limited to an insider seeking to leak confidential information; malicious code can also capture a user's screen or memory. Ideally, one would like to distribute a confidential document to a group and be guaranteed control over its dissemination and use. Limiting the specific machines or users able to view the document, limiting the time frame during which a document is readable would also be a desired property. Such self-destructing email is difficult to implement because it typically requires cooperation of a users computer, including the use of customized software or a patched operating system.;Existing secure document management solutions mandate custom e-mail applications, which restrict the user and also the application must trust the client. They also require OS tweaking, forcing specific OS version and complications with upgrades/fixes etc.;The chief innovation behind BLINK system we designed is the rendering of documents as multimedia objects, specifically raster images, so that they can be decrypted outside of the domain of the computer.;BLINK is a system for secure communication using documents encrypted in the pixel domain, which are then decrypted by a hardware device embedded in a video cable, that alters the video signal between a computer and display. BLINK allows a document to be decrypted on-screen while remaining encrypted within a computer, preventing the forwarding, screen capture or copying and pasting of a sensitive file. The primary application is secure document delivery over electronic mail, without restricting the software or operating system of the users. |
