Skip to main content

Overview of SDF Features

**SDF(SensitiveDocsFlow)**applies security policies throughout the entire process from the creation, distribution, to storage of the document and can track it.Document-Centric Security Platformis. It is integrated with the client company's business system and API, allowing for the integration of document encryption and policy management features without changing the existing workflow.


1. Document Encryption / Decryption​

Performs encryption and decryption based on access control policies for the document.

Support MethodDescription
DAC(Arbitrary Access Control)The document owner directly assigns permissions for encryption
MAC(Mandatory Access Control)Automatically apply encryption according to the organization's security level policy.
GRADEPerform encryption based on document security classification (confidential, internal use only, etc.)
  • in the client company's business systemREST API CallIt is possible to perform encryption and decryption in one go.
  • When encrypting, security headers are automatically inserted, allowing you to check the protection status of the document at any time.

2. Document Header Information Management​

The encrypted document containsSecurity Policy Metadatais inserted as a header.

  • Insertion Information: Permission level, encryption method, policy ID, processing date and time, etc.
  • Query API: The current security status of the document can be checked in real-time from external systems.
  • Usage Example: Pre-check security level before document access, policy violation document detection

3. Sensitive Information (SFI) Management​

inside the office documentSteganographic File Information for Source TrackingInserts.

  • Insertable Information: TxID(Transaction ID), system name, processing date and time, user information, etc.
  • Query / Delete: You can check or remove hidden information through a dedicated API.
  • Purpose: In case of document leakage, trace back the original source to identify the leakage path.

4. Document Lineage Tracking (InfoLineage)​

When the document is copied or derivedParentDoc IDAutomatically inserts to track the relationship between the original and derived documents.

Original Document (DocID: A)
  ├── Copy 1 (DocID: B, ParentDoc: A)
  │     └── Revision (DocID: D, ParentDoc: B)
  └── Copy 2 (DocID: C, ParentDoc: A)
  • The entire distribution flow of the document can be understood in a tree structure.
  • Utilization for Security Audits and Compliance Responses

5. API Integration​

SDF provides two API frameworks that integrate flexibly with business systems in various environments.

API TypeTargetMain Features
Customer-specific APIIn-house Work SystemEncryption/Decryption, Header Retrieval, Hidden Information Insertion/Retrieval/Deletion, Label Management
Security365 Integration APISecurity365 ServiceSame functionality + authentication check, security level management, and other additional features
  • Designed in a RESTful manner, callable regardless of language/platform.
  • Detailed API specifications areAPI GuidePlease refer to the document.

6. Installation and Configuration Method​

SDF is tailored to the client's environment.Two Deployment Methodssupports.

Composition MethodformSuitable Environment
SDF ContainerSidecar ContainerKubernetes/POD based cloud environment
SDF AppJAR-based applicationExisting on-premises or VM-based server environment
  • SDF Container: Deployed as a sidecar within the business system POD and operates independently.
  • SDF App: Existing Java library (SCSL.jar) compatibility — Maintain existing integration structure without code modification

7. Logs and Monitoring​

All security processing procedures of SDF areEvent Logis recorded and used for operational monitoring and security auditing.

Log TargetRecord content
EKMSKey issuance/viewing, authentication processing history
SKMSEncryption and Decryption Request/Response, Header Processing History
SDF ContainerAPI call, file processing, hidden information insertion history
  • Support for real-time metric collection through Prometheus integration
  • Providing a systematic log classification system based on event codes