Compliance processing of rights managed data

• US 20070056046A1
• Filed: 08/17/2006
• Published: 03/08/2007
• Est. Priority Date: 08/18/2005
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Leetch, Bruce, Andruss, William, Claudatos, Christopher, Porter, Jeffrey
• Granted Patent: US 8,079,091 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

Performing compliance processing is disclosed. An indication is received that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the restriction. It is ensured that the content can be accessed without the restriction to perform the compliance processing.

Claims

1. A method of performing compliance processing, comprising:

receiving an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the restriction; and

ensuring the content can be accessed without the restriction to perform the compliance processing.

2. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes performing an at least partly automated negotiation between a first entity associated with the access restriction and a second entity associated with the compliance processing.

3. A method as recited in claim 2, wherein the first entity comprises a rights management system and the second entity comprises a compliance system.

4. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes agreeing to enforce the access restriction with respect to an end-user recipient of the content.

5. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes receiving a version of the content without the access restriction.

6. A method as recited in claim 5, wherein the version comprises one of at least two versions of the content sent by a sender of the content, and the sender sends the content with the access restriction to an end-user recipient.

7. A method as recited in claim 5, wherein ensuring the content can be accessed without the restriction to perform the compliance processing further includes receiving one or more rules for accessing the content to be enforced with respect to an end-user recipient of the content, and enforcing the rules with respect to a forwarded version of the content sent to the end-user recipient.

8. A method as recited in claim 1, wherein the indication is received prior to allowing an end-user recipient of the content to receive, access, or use the content

9. A method as recited in claim 8, wherein the end user is allowed to receive, access, or use the content when the content is determined to be compliant.

10. A method as recited in claim 1, wherein the content is associated with a plurality of access keys, and at least one of the access keys can be used by a compliance system to access the content without the restriction and another one of the keys can be used by an end-user recipient of the content to access the content subject to the access restriction.

11. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes determining whether the content can be accessed without the restriction to perform the compliance processing.

12. A method as recited in claim 11, wherein if it is determined the content cannot be accessed without the restriction, the content is blocked.

13. A method as recited in claim 11, wherein determining whether the content can be accessed without the restriction to perform the compliance processing includes determining one or more of the following:

whether the content is encrypted, whether the content is controlled by rights management, whether the content is of a known type, whether the content is a restricted type, whether the sender of the content negotiates access to the content for compliance processing, whether a specified access key can be used to by pass an access restriction of the content, and whether an access restriction of the content can be passed for compliance processing.

14. A method as recited in claim 11, wherein determining whether the content can be accessed without the restriction to perform the compliance processing includes performing one or more of the following:

examining a header associated with the content, measuring randomness of the data in the content to determine whether the content is encrypted, and analyzing a profile of the content.

15. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes determining whether a previously received access key can be used to access the content.

16. A method as recited in claim 1, wherein ensuring the content can be accessed without the restriction to perform the compliance processing includes obtaining from a key server an access key that can be used to pass the access restriction.

17. A method as recited in claim 16, wherein a sender of the content uses an encryption key obtained from the key server to encrypt the content for enforcement of the access restriction.

18. A method as recited in claim 1, wherein the access restriction specifies one or more of the following:

one or more users that can access the content, how the content can be used, and when the content can be accessed.

19. A method as recited in claim 1, wherein the compliance processing includes performing one or more of the following:

controlling the content, indexing the content, searching the content, archiving the content, retrieving the content, displaying the content, rendering the content, analyzing the content, scanning the content, analyzing the content to perform single instance store, analyzing the content for a virus or a malware, and verifying the content complies with one or more rules or regulatory restrictions.

20. A system for performing compliance processing, comprising:

a communication interface configured to receive an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the restriction; and

a processor configured to ensure the content can be accessed without the restriction to perform the compliance processing.

21. A computer program product for performing compliance processing, the computer program product being embodied in a computer readable medium and comprising computer instructions for:

receiving an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the restriction; and

ensuring the content can be accessed without the restriction to perform the compliance processing.