SYSTEMS AND METHODS FOR DYNAMICALLY APPLYING INFORMATION RIGHTS MANAGEMENT POLICIES TO DOCUMENTS

• US 20180096158A1
• Filed: 06/30/2017
• Published: 04/05/2018
• Est. Priority Date: 10/02/2016
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Murphy, Gerard, Arora, Yugansh, Muchhala, Kunal, Arora, Gaurav, Kueh, Anthony, Singh, Deep
• Granted Patent: US 11,023,606 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

Systems and methods are disclosed herein for dynamically applying information rights management (“IRM”) policies to documents. An example system for dynamically applying IRM policies to documents can include a document repository, a proxy server, and a dynamic IRM wrapping service (also referred to herein as an IRM engine). A user can request a document on the document repository by, for example, attempting to access the document from a user device. The user device can be managed by a management server that enrolls the user device and enforces compliance rules and other policies at the user device. The user'"'"'s request for the document can be received at the proxy server, and the proxy server can then request the document from the document repository.

Claims

1. A system for dynamically applying information rights management (IRM) policies to documents, comprising:

a document repository that stores documents;

a proxy server that receives a request from a user for a document stored on the document repository and retrieves the requested document from the document repository; and

a dynamic IRM wrapping service that intercepts the document retrieved by the proxy server and applies at least one IRM policy to the document,

wherein after the dynamic IRM wrapping service applies the at least one IRM policy to the document, the proxy server sends the IRM-protected document to the requesting user.

2. The system of claim 1, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the request.

3. The system of claim 2, wherein contextual information associated with the request comprises at least one of:

a status of the user making the request, an organizational group associated with the user making the request, a compliance status of a device making the request on behalf of the user, and a geographic location of the user making the request.

4. The system of claim 1, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the document.

5. The system of claim 4, wherein contextual information associated with the document comprises at least one of:

a storage location of the document, a creator of the document, text or images contained within the document, and existing IRM protection associated with the document.

6. The system of claim 1, wherein the dynamic IRM wrapping service applies the at least one IRM policy to the document based on a management policy set by an administrator.

7. The system of claim 1, wherein the at least one IRM policy is compatible with a rights management service (RMS) provided by at least one of MICROSOFT, ORACLE, DELL, or a combination thereof.

8. A method for dynamically applying IRM policies to documents, comprising:

receiving, at a proxy server, a request from a user to retrieve a document stored on a document repository;

retrieving the document from the document repository;

providing the document to a dynamic IRM wrapping service;

applying, by the dynamic IRM wrapping service, at least one IRM policy to the document; and

sending the IRM-protected document to the requesting user from the proxy server.

9. The method of claim 8, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the request.

10. The method of claim 9, wherein contextual information associated with the request comprises at least one of:

a status of the user making the request, an organizational group associated with the user making the request, a compliance status of a device making the request on behalf of the user, and a geographic location of the user making the request.

11. The method of claim 8, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the document.

12. The method of claim 11, wherein contextual information associated with the document comprises at least one of:

a storage location of the document, a creator of the document, text or images contained within the document, and existing IRM protection associated with the document.

13. The method of claim 8, wherein the dynamic IRM wrapping service applies the at least one IRM policy to the document based on a management policy set by an administrator.

14. The method of claim 8, wherein the at least one IRM policy is compatible with a rights management service (RMS) provided by at least one of MICROSOFT, ORACLE, DELL, or a combination thereof.

15. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor, causes the processor to carry out stages for dynamically applying IRM policies to documents, the stages comprising:

receiving, at a proxy server, a request from a user to retrieve a document stored on a document repository;

retrieving the document from the document repository;

providing the document to a dynamic IRM wrapping service;

applying, by the dynamic IRM wrapping service, at least one IRM policy to the document; and

sending the IRM-protected document to the requesting user from the proxy server.

16. The non-transitory, computer-readable medium of claim 15, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the request.

17. The non-transitory, computer-readable medium of claim 16, wherein contextual information associated with the request comprises at least one of:

a status of the user making the request, an organizational group associated with the user making the request, a compliance status of a device making the request on behalf of the user, and a geographic location of the user making the request.

18. The non-transitory, computer-readable medium of claim 15, wherein the dynamic IRM wrapping service applies the at least one IRM policy based, at least in part, on contextual information associated with the document.

19. The non-transitory, computer-readable medium of claim 18, wherein contextual information associated with the document comprises at least one of:

a storage location of the document, a creator of the document, text or images contained within the document, and existing IRM protection associated with the document.

20. The non-transitory, computer-readable medium of claim 15, wherein the dynamic IRM wrapping service applies the at least one IRM policy to the document based on a management policy set by an administrator.