CONTEXT-BASED DATA CLASSIFICATION

• US 20160292445A1
• Filed: 03/18/2016
• Published: 10/06/2016
• Est. Priority Date: 03/31/2015
• Status: Abandoned Application

• Current Assignee: SECUDE AG
• Original Assignee: SECUDE AG
• Inventors: LINDEMANN, Rainer
• Application Number:
  US15/074,103
• Publication Number:
  US 20160292445A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/353 into predefined classes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method of classifying a digital document may include: identifying, by an automated data processor, a request for access to the digital document for a first user; determining user identifying information for the first user; obtaining, by the automated data processor, according to the user identifying information a first user characteristic including organizational affiliation of the first user or a job function of the first user; generating, by the automated data processor, based on the first user characteristic, a digital document classification for the digital document; associating the digital document classification with the digital document, by embedding the document classification in the digital document or logging the document classification in a log identifying the digital document. A user access determination for the digital document may be made according to the associated digital document classification.

Claims

1. A method of classifying a digital document, the method comprising:

identifying, by an automated data processor, a request for access to the digital document for a first user;

determining, by the automated data processor, user identifying information for the first user;

obtaining, by the automated data processor, according to the user identifying information a first user characteristic comprising at least one of an organizational affiliation of the first user and a job function of the first user;

generating, by the automated data processor, based on the first user characteristic, a digital document classification for the digital document;

associating, by the automated data processor, the digital document classification with the digital document, by at least one of;

(1) embedding the document classification in the digital document, and (2) logging the document classification in a log identifying the digital document; and

making a user access determination for the digital document according to the associated digital document classification.

2. The method of claim 1, wherein the method further comprises:

obtaining, by the automated data processor, application identifying information for a programming application associated with generation of the digital document; and

obtaining, by the automated data processor, according to the application identifying information, function identifying information for the programming application,

wherein the generating of the classification is performed according to the function identifying information.

3. The method of claim 1, wherein the obtaining of the function identifying information further comprises determining a software grouping of the programming application.

4. The method of claim 1, wherein the method further comprises:

obtaining, by the automated data processor, as a document attribute, an identification of an organizational unit associated with creation of the digital document,

wherein the generating of the classification is performed according to the document attribute.

5. The method of claim 1, wherein the user characteristic comprises an organizational affiliation of the first user.

6. The method of claim 1, wherein the user characteristic comprises a job function of the first user.

7. The method of claim 1, wherein the user characteristic comprises an authorization assigned to the first user.

8. The method of claim 1, further comprising setting a rights management policy for the digital document according to the document classification.

9. The method of claim 1, further comprising managing document access control for the digital document according to the document classification.

10. The method of claim 1, further comprising controlling a right to share the digital document with additional users according to the document classification.

11. The method of claim 1, further comprising managing data loss prevention for the digital document according to the document classification.

12. The method of claim 1, wherein the digital document is generated using SAP software.

13. The method of claim 1, wherein the first user is a user who created the digital document.

14. The method of claim 1, wherein the first user is a user who first edited the digital document at an organization affiliated with a user attempting to access the digital document.

15. The method of claim 1, wherein the first user is a user attempting to access the digital document.

16. The method of claim 1, further comprising based on the classification, taking the step of one of granting and denying access, to the digital document for a user attempting to access the digital document.

17. The method of claim 1, wherein the method further comprises:

obtaining, by the automated data processor, according to the user identifying information a second user characteristic for the first user,

wherein the generating of the digital document classification is based on the first user characteristic and on the second user characteristic.

18. The method of claim 1, wherein the method further comprises:

assigning, by the automated data processor, a reliability score to at least one of the first user characteristic and the second user characteristic; and

weighting, by the automated data processor, according to the reliability score, the at least one of the first user characteristic and the second user characteristic,

wherein the generating of the digital document classification is based on the weighted at least one of the first user characteristic and the second user characteristic.

19. The method of claim 1, wherein a default reliability score is for the first user characteristic is weighted less than a second reliability score that is generated according to specific information obtained for the first user.

20. The method of claim 1, wherein the method further comprises:

determining that a conflict exists between the first user characteristic and the second user characteristic for the first user; and

selecting a selected score of the first user characteristic and the second user characteristic, the selected score being the score that indicates a higher level in an organizational hierarchy,

wherein the generating of the digital document classification is based on the selected score.

21. The method of claim 1, wherein the first user characteristic is obtained from a classification database data populated for the classification.

22. The method of claim 1, wherein the method further comprises:

obtaining, by the automated data processor, from the first user a user data input indicating sensitivity of the digital document,

wherein the generating of the classification is performed according to the user data input.

23. An automated data processing system for classifying a digital document, the automated data processing system comprising:

a data determiner configured to obtain user identifying information for a first user attempting to access the digital document, and to obtain, according to the user identifying information, a first user characteristic;

a classification generator configured to generate, using the automated data processor, based on the first user characteristic, a digital document classification for the digital document; and

a document manager configured to associate the digital document classification with the digital document, by at least one of;

(1) embedding the digital document classification in the digital document, (2) logging the digital document classification in a log identifying the digital document,

wherein a degree of access to the digital document for a user attempting access is determined according to the digital document classification.

24. A method of classifying a digital document, the method comprising:

identifying, by an automated data processor, a request for access, by a first process, to the digital document;

obtaining, by the automated data processor, application identifying information for a programming application associated with generation of the digital document;

generating, by the automated data processor, based on the application identifying information, a digital document classification for the digital document;

associating, by the automated data processor, the digital document classification with the digital document, by at least one of;

(1) embedding the document classification in the digital document, and (2) logging the document classification in a log identifying the digital document; and

based on the document classification, denying access to the digital document for a user attempting access to the digital document.

25. The method of claim 24, wherein the first user is a user who created the document and the user attempting access is a user different from the first user.

26. The method of claim 24, wherein the user attempting access is the first user.