Document Security Management System UniDES

A Data-Aware, Classification-Based Document Protection Solution

Contact Now

Product Overview

UniDES is a next-generation document security management system designed to safeguard sensitive enterprise information throughout its entire lifecycle. Built around advanced technologies such as transparent encryption/decryption, content-based sensitivity detection, and fine-grained access control, UniDES delivers robust protection without compromising usability.

The system leverages high-strength encryption algorithms to enable:

Intelligent transparent encryption

Context-aware dynamic decryption

File content inspection and classification

These capabilities allow UniDES to precisely control user permissions for operations such as reading, saving, copying, and screen capturing documents.

By enforcing policy-driven, real-time protection on electronic files, UniDES prevents the leakage of core business assets while maintaining a seamless user experience. This ensures that security and productivity are effectively balanced, providing enterprises with full-lifecycle protection for all types of electronic documents.

Key Capabilities

File Encryption and Decryption
Document Classification and Sensitivity Level Management
Access Permission Management
Secure File Sharing and External Distribution
Offline Access Control for Encrypted Files
File Encryption and Decryption
UniDES provides a variety of encryption modes to meet the security needs of different workplace scenarios, including:

Transparent Encryption – Seamless to the user, applied in the background

Intelligent Encryption – Triggered based on content sensitivity or classification

Read-Only Encryption – Restricts editing, copying, or printing operations
To prevent data leakage via email, UniDES performs sensitivity detection on file attachments sent through email clients or webmail. If a file is identified as sensitive, the system can automatically enforce encryption prior to transmission, ensuring secure external communication.
Additionally, UniDES offers SDK-based integration, enabling third-party platforms and applications to embed document security capabilities into their own workflows.
Document Classification and Sensitivity Level Management
UniDES supports document sensitivity level management by assigning security classifications to documents and mapping them to user or department clearance levels.

By default, employees can only access documents matching their assigned clearance level.
Users with higher clearance levels may be granted permission to modify document classifications as needed.

For users with lower clearance, classification changes require approval, ensuring strict and auditable access control.

This flexible policy-based approach helps organizations enforce least privilege principles and maintain tight control over confidential information, while supporting operational agility.
Access Permission Management
Once a user is granted access to a document, their actions are restricted based on the document’s assigned permissions (e.g., view-only, no copy, no print), effectively preventing unauthorized operations or privilege misuse.
The system adheres to the principle of least privilege, ensuring that users are only granted the minimum permissions necessary to perform their roles.
Secure File Sharing and External Distribution
Only users with the appropriate permissions can initiate external file sharing with encryption enabled. Recipients must verify their identity before they are allowed to access the encrypted file.
For special use cases, the system also supports an approval-based workflow where users can request to share the file in plaintext, subject to policy controls and administrative review.
Offline Access Control for Encrypted Files
When the endpoint is disconnected from the network (e.g., traveling or remote work), only devices that have been pre-authorized for offline access are allowed to open and use encrypted files.

Terminals without offline access rights must go through an approval process to obtain temporary offline permissions.

Without such approval, encrypted files cannot be accessed in offline mode, ensuring sensitive data remains protected even outside the corporate network.

Advantages

File-Specific Encryption
Each file is protected with a unique, randomly generated encryption key, ensuring that even if one file is compromised, others remain secure. This significantly mitigates the risk of brute-force attacks.
Granular Sensitivity Control
Supports multi-key architecture and document classification-based access control, enabling strict separation of documents across departments, user groups, devices, and individuals.
Business-Aligned Encryption Modes
Encryption and decryption modes are designed to align with real-world business scenarios and workflows, ensuring security measures adapt to enterprise needs rather than disrupt operations.
Flexible Approval Workflows
Approval processes are triggered based on document sensitivity levels. The system automatically matches appropriate workflows for decryption requests, sensitivity level changes, and access permission modifications.
Secure Yet User-Friendly
Security without disruption — UniDES does not alter employee work habits or reduce productivity. Administrators have real-time visibility into the location and status of all encrypted files, along with full audit trails.