Information Rights Management

• US 20090319529A1
• Filed: 06/18/2009
• Published: 12/24/2009
• Est. Priority Date: 06/20/2008
• Status: Abandoned Application

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Stahl, Noah Z., Bartlett, Wendy S., Brooks, Randall S.
• Application Number:
  US12/487,353
• Publication Number:
  US 20090319529A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

In certain embodiments, a method for providing information rights management (IRM) includes receiving, from a user having an associated security access profile, a request to access an object. The object has a corresponding IRM wrapper stored with the object both when the object is stored in a document management system (DMS) database and external to the DMS database, the IRM wrapper including an IRM profile and one or more IRM permission sets. The object also has encrypted data. The method further includes determining whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object and communicating to the user, in response to a determination that the user is authorized to access the object, a decryption key associated with object.

Claims

1. A method for providing information rights management, comprising:

receiving, from a user having an associated security access profile, a request to access an object, the object having;

a corresponding information rights management (IRM) wrapper stored with the object both when the object is stored in a document management system (DMS) database and when the document is stored external to the DMS database, the IRM wrapper comprising;

an IRM profile; and

one or more IRM permission sets; and

encrypted data;

determining whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object; and

communicating to the user, in response to a determination that the user is authorized to access the object, a decryption key associated with object.

2. The method of claim 1, wherein:

the security access profile associated with the user comprises a username associated with the user;

the IRM profile of the IRM wrapper corresponding to the object comprises one or more usernames of users that are authorized to access the object; and

determining whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object comprises determining whether the username associated with the user of the security access profile is one of the one or more usernames of the IRM profile.

3. The method of claim 1, wherein:

the security access profile associated with the user comprises one or more group memberships associated with the user;

the IRM profile of the IRM wrapper corresponding to the object comprises one or more groups of users that are authorized to access the object; and

determining whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object comprises determining whether the one or more group memberships associated with the user of the security access profile correspond to the one of the one or more groups of users that are authorized to access the object of the IRM profile.

4. The method of claim 1, comprising decrypting the encrypted data of the object using the decryption key.

5. The method of claim 1, wherein:

the object is stored in a DMS database storing a plurality of objects;

the object has a corresponding security label.

6. The method of claim 5, comprising:

receiving a request to view links corresponding to the plurality of objects stored in the DMS database;

determining whether the user is authorized to view a link corresponding to the object based on a comparison of the security access profile of the user and the security label corresponding to the object; and

displaying to the user, in response to a determination that the user is authorized to view the link corresponding to the object, the link corresponding to the object such that the user may, by selecting the link corresponding to the object, request to access the object.

7. The method of claim 5, wherein:

the security label corresponding to the object is stored in the DMS database; and

the IRM wrapper corresponding to the object is stored in the DMS database.

8. The method of claim 7, comprising allowing the user, in response to the determination that the user is authorized to access the object, to export the object and the IRM wrapper corresponding to the object from the DMS database such that the object and the IRM wrapper corresponding to the object may be stored in a memory unit external to the DMS database.

9. The method of claim 1, wherein the object is stored in a memory unit external to the DMS database.

10. The method of claim 9, wherein the IRM wrapper corresponding to the object is stored in the memory unit external to the DMS database.

11. The method of claim 1, comprising:

receiving a request to perform a particular action with respect to the object; and

determining, based on a comparison of the requested particular action with a corresponding permission of the one or more permission sets of the IRM wrapper corresponding to the object, whether the user is authorized to perform the particular action with respect to the object.

12. A system for providing information rights management, comprising:

one or more processing units operable to;

receive, from a user having an associated security access profile, a request to access an object, the object having;

a corresponding information rights management (IRM) wrapper stored with the object both when the object is stored in a document management system (DMS) database and when the document is stored external to the DMS database, the IRM wrapper comprising;

an IRM profile; and

one or more IRM permission sets; and

encrypted data;

determine whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object; and

communicate to the user, in response to a determination that the user is authorized to access the object, a decryption key associated with object.

13. The system of claim 12, comprising a DMS database storing a plurality of objects, wherein:

the object is stored in the DMS database; and

the object has a corresponding security label.

14. The method of claim 13, wherein the one or more processing units are operable to:

receive a request to view links corresponding to the plurality of objects stored in the DMS database;

determine whether the user is authorized to view a link corresponding to the object based on a comparison of the security access profile of the user and the security label corresponding to the object; and

display to the user, in response to a determination that the user is authorized to view the link corresponding to the object, the link corresponding to the object such that the user may, by selecting the link corresponding to the object, request to access the object.

15. The system of claim 13, wherein:

the security label corresponding to the object is stored in the DMS database; and

the IRM wrapper corresponding to the object is stored in the DMS database.

16. The system of claim 15, wherein the one or more processing units are operable to allow the user, in response to the determination that the user is authorized to access the object, to export the object and the IRM wrapper corresponding to the object from the DMS database such that the object and the IRM wrapper corresponding to the object may be stored in a memory unit external to the DMS database.

17. The system of claim 12, comprising a memory unit external to the DMS database, wherein the object is stored in the memory unit external to the DMS database.

18. The system of claim 17, wherein the IRM wrapper corresponding to the object is stored in the memory unit external to the DMS database.

19. The system of claim 12, wherein the one or more processing units are operable to:

receive a request to perform a particular action with respect to the object; and

determine, based on a comparison of the requested particular action with a corresponding permission of the one or more permission sets of the IRM wrapper corresponding to the object, whether the user is authorized to perform the particular action with respect to the object.

20. Software for providing information rights management, the software embodied in a computer-readable medium and operable when executed to perform operations comprising:

receiving, from a user having an associated security access profile, a request to access an object, the object having;

a corresponding information rights management (IRM) wrapper stored with the object both when the object is stored in a document management system (DMS) database and when the document is stored external to the DMS database, the IRM wrapper comprising;

an IRM profile; and

one or more IRM permission sets; and

encrypted data;

determining whether the user is authorized to access the object based on a comparison of the security access profile of the user and the IRM profile of the IRM wrapper corresponding to the object; and

communicating to the user, in response to a determination that the user is authorized to access the object, a decryption key associated with object.