AUTOMATED ACCESS CONTROL FOR RENDERED OUTPUT

• US 20100313239A1
• Filed: 06/09/2009
• Published: 12/09/2010
• Est. Priority Date: 06/09/2009
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Rice, John, Yap, Beng K., Chakra, Al, O'Doherty, Simon P.
• Application Number:
  US12/481,011
• Publication Number:
  US 20100313239A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A content rendering action is detected at a content access control module associated with renderable content stored within a memory associated with the content access control module. A portion of the renderable content is determined to be controlled by an access privilege requirement higher than an access privilege level of a person, a device, or a location associated with the detected content rendering action. The portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the person, the device, or the location associated with the detected content rendering action is automatically redacted.

Claims

1. A method, comprising:

detecting, at a content access control module, a content rendering action associated with renderable content stored within a memory associated with the content access control module;

determining that at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of at least one of a person, a device, and a location associated with the detected content rendering action; and

automatically redacting the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action.

2. The method of claim 1,

where detecting, at the content access control module, the content rendering action associated with the renderable content further comprises detecting a remote access associated with the renderable content via a remote login;

and

where automatically redacting the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action further comprises preventing the remote access to the at least one portion of the renderable content via the remote login to the device that at least one of stores and renders the renderable content.

3. The method of claim 1, further comprising at least one of:

querying a database for an access control list (ACL) that defines the access privilege level for the at least one of the person, the device, and the location associated with the detected content rendering action;

accessing a distribution list associated with the detected content rendering action identifying intended recipients of the renderable content; and

analyzing a list of participants associated with a meeting; and

where determining that the at least one portion of the renderable content is controlled by the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action further comprises determining the access privilege level of the at least one of the person, the device, and the location based upon the at least one of the ACL, the distribution list, and the list of participants.

4. The method of claim 1, further comprising:

querying a database for access control information that defines the access privilege requirements of the at least one portion of the renderable content; and

where determining that the at least one portion of the renderable content is controlled by the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action further comprises determining the access privilege requirement of the at least one portion of the renderable content by;

analyzing the access control information; and

identifying the access privilege requirement of the at least one portion of the renderable content based upon the access control information.

5. The method of claim 1, where automatically redacting the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action further comprises at least one of:

removing the at least one portion of the renderable content from a renderable version of the renderable content;

blanking the at least one portion of the renderable content within the renderable version of the renderable content; and

darkening the at least one portion of the renderable content within the renderable version of the renderable content.

6. The method of claim 1, further comprising:

receiving a request to adjust an amount of renderable content associated with the redacted at least one portion of the renderable content;

determining that an access privilege level of a person associated with the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content authorizes the person to issue the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content; and

automatically adjusting the amount of renderable content associated with the redacted at least one portion of the renderable content in response to determining that the person is authorized to issue the request.

7. The method of claim 1, further comprising:

monitoring a rendered location associated with a display of a resulting portion of the renderable content other than the redacted at least one portion of the renderable content via a radio frequency identifier (RFID) monitoring device;

detecting a person approaching the rendered location via the RFID monitoring device;

determining an identity of the person approaching the rendered location based upon the RFID detection of the person approaching the rendered location;

determining that a second at least one portion of the resulting portion of the renderable content other than the redacted at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of the person approaching the rendered location based upon the determined identity; and

automatically redacting the second at least one portion of the resulting portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the person approaching the rendered location.

8. An apparatus, comprising:

a memory that stores renderable content; and

a content access control module, configured to;

detect a content rendering action associated with the renderable content;

retrieve the renderable content from the memory;

determine that at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of at least one of a person, a device, and a location associated with the detected content rendering action; and

automatically redact the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action.

9. The apparatus of claim 8:

where, in being configured to detect the content rendering action associated with the renderable content, the content access control module is further configured to detect a remote access associated with the renderable content via a remote login; and

where, in being configured to automatically redact the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action, the content access control module is further configured to prevent the remote access to the at least one portion of the renderable content via the remote login.

10. The apparatus of claim 8, further comprising:

a database; and

a memory; and

where the content access control module is further configured to at least one of;

query the database for an access control list (ACL) that defines the access privilege level for the at least one of the person, the device, and the location associated with the detected content rendering action;

access a distribution list within the memory associated with the detected content rendering action identifying intended recipients of the renderable content; and

analyze a list of participants within the memory associated with a meeting; and

where, in being configured to determine that the at least one portion of the renderable content is controlled by the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action, the content access control module is further configured to determine the access privilege level of the at least one of the person, the device, and the location based upon the at least one of the ACL, the distribution list, and the list of participants.

11. The apparatus of claim 8, further comprising:

a database; and

where the content access control module is further programmed to;

query the database for access control information that defines the access privilege requirements of the at least one portion of the renderable content; and

where, in being configured to determine that the at least one portion of the renderable content is controlled by the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the detected content rendering action, the content control access module is further configured to;

analyze the access control information; and

identify the access privilege requirement of the at least one portion of the renderable content based upon the access control information.

12. The apparatus of claim 8, where the content control access module is further configured to:

receive a request to adjust an amount of renderable content associated with the redacted at least one portion of the renderable content;

determine that an access privilege level of a person associated with the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content authorizes the person to issue the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content; and

automatically adjust the amount of renderable content associated with the redacted at least one portion of the renderable content in response to determining that the person is authorized to issue the request.

13. The apparatus of claim 8, where the content control access module is further configured to:

monitor a rendered location associated with a display of a resulting portion of the renderable content other than the redacted at least one portion of the renderable content via a radio frequency identifier (RFID) monitoring device;

detect a person approaching the rendered location via the RFID monitoring device;

determine an identity of the person approaching the rendered location based upon the RFID detection of the person approaching the rendered location;

determine that a second at least one portion of the resulting portion of the renderable content other than the redacted at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of the person approaching the rendered location based upon the determined identity; and

automatically redact the second at least one portion of the resulting portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the person approaching the rendered location.

14. A computer program product comprising a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:

computer readable program code configured to detect a content rendering action associated with the renderable content;

computer readable program code configured to determine that at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of at least one of a person, a device, and a location associated with the content rendering action; and

computer readable program code configured to automatically redact the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the content rendering action.

15. The computer program product of claim 14:

where the computer readable program code configured to detect a content rendering action associated with the renderable content comprises computer readable program code configured to detect a remote access associated with the renderable content via a remote login; and

where, computer readable program code configured to automatically redact the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the content rendering action comprises computer readable program code configured to prevent the remote access to the at least one portion of the renderable content via the remote login.

16. The computer program product of claim 14, further comprising at least one of:

computer readable program code configured to query the database for an access control list (ACL) that defines the access privilege level for the at least one of the person, the device, and the location associated with the content rendering action;

computer readable program code configured to access a distribution list within the memory associated with the content rendering action identifying intended recipients of the renderable content; and

computer readable program code configured to analyze a list of participants within the memory associated with a meeting; and

where, computer readable program code configured to determine that at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of at least one of a person, a device, and a location associated with the content rendering action comprises computer readable program code configured to determine the access privilege level of the at least one of the person, the device, and the location based upon the at least one of the ACL, the distribution list, and the list of participants.

17. The computer program product of claim 14, further comprising:

computer readable program code configured to query the database for access control information that defines the access privilege requirements of the at least one portion of the renderable content; and

where, computer readable program code configured to determine that at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of at least one of a person, a device, and a location associated with the content rendering action comprises;

computer readable program code configured to analyze the access control information; and

computer readable program code configured to identify the access privilege requirement of the at least one portion of the renderable content based upon the access control information.

18. The computer program product of claim 14, where, computer readable program code configured to automatically redact the at least one portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the at least one of the person, the device, and the location associated with the content rendering action comprises at least one of:

computer readable program code configured to remove the at least one portion of the renderable content from a renderable version of the renderable content;

computer readable program code configured to blank the at least one portion of the renderable content within the renderable version of the renderable content; and

computer readable program code configured to darken the at least one portion of the renderable content within the renderable version of the renderable content.

19. The computer program product of claim 14, further comprising:

computer readable program code configured to receive a request to adjust an amount of renderable content associated with the redacted at least one portion of the renderable content;

computer readable program code configured to determine that an access privilege level of a person associated with the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content authorizes the person to issue the request to adjust the amount of renderable content associated with the redacted at least one portion of the renderable content; and

computer readable program code configured to automatically adjust the amount of renderable content associated with the redacted at least one portion of the renderable content in response to determining that the person is authorized to issue the request.

20. The computer program product of claim 14, further comprising:

computer readable program code configured to monitor a rendered location associated with a display of a resulting portion of the renderable content other than the redacted at least one portion of the renderable content via a radio frequency identifier (RFID) monitoring device;

computer readable program code configured to detect a person approaching the rendered location via the RFID monitoring device;

computer readable program code configured to determine an identity of the person approaching the rendered location based upon the RFID detection of the person approaching the rendered location;

computer readable program code configured to determine that a second at least one portion of the resulting portion of the renderable content other than the redacted at least one portion of the renderable content is controlled by an access privilege requirement higher than an access privilege level of the person approaching the rendered location based upon the determined identity; and

computer readable program code configured to automatically redact the second at least one portion of the resulting portion of the renderable content determined to have the access privilege requirement higher than the access privilege level of the person approaching the rendered location.