Method for providing information security protocols to an electronic calendar

• US 4,881,179 A
• Filed: 03/11/1988
• Issued: 11/14/1989
• Est. Priority Date: 03/11/1988
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Vincent, James P.
• Primary Examiner(s): Harkcom, Gary V.
• Assistant Examiner(s): Nguyen, Phu K.
• Application Number:
  US07/166,572
• Time in Patent Office: 613 Days
• Field of Search: 340/756, 364/521, 364/518, 364/522, 368/41, 368/28, 380/4, 380/55, 380/59
• US Class Current: 358/1.14
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: Y10S 715/963 Calendar or scheduling

Abstract

A method of controlling the unauthorized disclosure of classified data that is used to describe an event that has been calendared in an electronic calendaring application of an interactive information handling system in which the calendar owner assigns a security classification to an event as it is being calendared. The classification assigned is pre-established by an information security protocol that is either unique to the calendar function or a more comprehensive information security system for the organization. The security classes are pre-established by the system. When the calendar data is presented in a format that allows event descriptions to be readable such as when a day calendar is viewable on the display terminal or in a printed copy, an overall security lable is displayed and printed out when the display is converted to hard copy. The period covered by the security label generally corresponds to the period that is selected for viewing. The security classification displayed is the highest security class of any of the event descriptions that are displayed. Data structures are established for each calendar entry which store the data in the system. These data structures are scanned to determine the overall classification that is displayed for the day calendar. Since a readable security classification label is automatically applied, regardless of whether the calendar presentation is on the display screen or in hard copy, all of the requirements of the established information security system are met and the electronic calendaring application need not be treated as an exception to the information security system. The method allows each calendar user on the system that has an assigned permission level to view classified event descriptions at or below his or her assigned security level with a security label automatically displayed or printed.

Claims

1. A method for controlling the security of sensitive information entered into an individual electronic calendar by a user of an interactive information handling system having a display device and a keyboard when a day-calendar portion of said calendar containing a plurality of calendared events is displayed, said method comprising the following combination of sequential steps,

(A) entering one of a plurality of pre-established security classifications into said system at the time that each said event is being calendared,

(B) automatically developing a security label whenever said day-calendar portion is displayed, said label reflecting the highest security classification assigned to said plurality of events entered on said day-calendar portion, and

(C) displaying said security label with said day-calendar portion when said portion is displayed.

2. The method recited in claim 1 in which said terminal includes a printer and said step of displaying includes the further step of,

(a) printing said security label with said printer, on a copy of said day-portion of said calendar that has been printed by said printer.

3. The method recited in claim 1 in which said step of entering includes the further step of,

(A) keying in a text description of each said event with said keyboard, and

(B) displaying said text description on said display device.

4. The method recited in claim 3 in which said step of keying in said text description includes the further step of,

(A) keying in a start and end time for said each said event that is being calendared.

5. The method recited in claim 4 including the further step of,

(A) storing calendar event data including said start and end time, said text description, and said entered security classification for each said calendared event, and in which said step of automatically developing said security label includes the further step of,

(B) referencing said stored calendared event data.

6. A method for controlling the security of sensitive information that is included in the descriptions of calendared events that have been entered by individual users, who are calendar owners, into an electronic calendaring application of an interactive information handling system in which each said user has an interactive terminal including a display device and a keyboard for obtaining access to day-calendar portions of his calendar and the calendar of at least one other selected user of the system, said method comprising the following combination of sequential steps,

(A) entering one of a plurality of pre-established security classifications into said system at the time that an event is being calendared which designates the security level of the data that describes the event, and

(B) displaying a security label that is automatically developed whenever one of said portions of a calendar maintained by said system, which includes one or more of said calendared events, is displayed, said label indicating a security classification that reflects the highest security classification assigned to said one or more said calendared events being displayed.

7. The method recited in claim 6 further including the step of,

(A) a first said user requesting to view the events calendared by a second said user for a specified time period, and said step of displaying includes the further step of,

(B) displaying the requested events on the display device of said first user'"'"'s terminal.

8. The method recited in claim 7 including the further steps of,

(A) assigning said first user one of a plurality of access permission levels, and

(B) censoring any said calendar event data that would be displayed by said step of displaying if said first user has not been assigned the required access permission for said event.

9. The method recited in claim 6 in which said step of displaying includes a further step of,

(A) censoring selected said calendar events that would normally be displayed to a calendar owner in response to a request by said calendar owner to display a copy of his own calendar with events having designated security classifications censored.

10. The method recited in claim 9 in which said step includes the further step of,

(A) displaying a screen to said owner to permit said owner to indicate to said system said selected said calendared events to be censored on said requested copy.