Information aggregation, processing and distribution system

• US 7,437,408 B2
• Filed: 06/10/2003
• Issued: 10/14/2008
• Est. Priority Date: 02/14/2000
• Status: Expired due to Fees

• Current Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Original Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Inventors: Scott, William D., Schwartz, Michael I., Auten, Charles W., Flesher, Kevin E., Tolley, Richard G., Franklin, Keith
• Primary Examiner(s): Hu; Jinsong
• Application Number:
  US10/459,388
• Publication Number:
  US 20040111639A1
• Time in Patent Office: 1,953 Days
• Field of Search: 709/204, 709/205, 709/217, 709/218, 709/219, 709/231, 709/232, 705/7
• US Class Current: 709/204
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 63/302 gathering intelligence information for situation awareness or reconnaissance

Abstract

A utility is provided for managing exchanges of information within a context involving multiple users, for example, multi-user network collaboration. The invention enables automatic enforcement of a policy regarding sensitive information. The policy may be negotiated among the users and expressed as multiple rule sets that govern access to a use of sensitive information. The utility also logs activities involving sensitive information to ensure compliance with the policy. These logs can be audited by a third party or automatically processed for audit compliance by the utility. In this manner, an environment of trust is created which encourages fruitful collaboration.

Claims

1. A method for use in managing access to and release of information in a collaborative environment, comprising the steps of:

establishing a collaborative environment for collaboration among multiple network users, said collaborative environment including network structure for use in enabling a collaboration with respect to collaboration subject matter including sensitive information subject to a policy regarding handling thereof relative to particular ones of said network users, said policy being implemented by allowing access by one of said users to an altered version of said subject matter to facilitated collaboration and protect said sensitive information in accordance with said policy, said collaborative environment further including a computer-based tool for monitoring activities involving said collaboration subject matter;

first operating said computer-based tool to identify an activity involving said sensitive information;

second operating said computer-based tool to establish a log entry, separate from said collaboration subject matter, for said activity identifying a user associated with said activity and a nature of said activity, said log entry allowing, for auditing of operation of said network structure to verify, handling of said sensitive information in accordance with policy, wherein said activity comprises a request to access a document including said sensitive information; and

third operating said computer-based tool to automatically, substantially free from any contemporaneous user control, to create an altered version of said document that is altered with respect to said item of sensitive information.

2. A method as set forth in claim 1, wherein said identified activity involves one of transfer of and attempted access to a portion of said sensitive information.

3. A method as set forth in claim 1, wherein said computer-based tool is further operative for auditing compliance with said policy based on pre-established audit rules.

4. A method for use in managing access to and release of information in a collaborative environment, comprising the steps of:

establishing a network structure for handling information relative to multiple users of the network structure, said information including sensitive information subject to a policy regarding handling thereof;

storing rules defining said policy;

first operating a computer-based tool to monitor operation of said network structure to identify an activity concerning an item of said sensitive information involving a particular user;

in response to said monitoring, second operating said computer-based tool to access at least one of said rules associated with particular user; and

third operating said computer-based tool to control operation of said network structure based on said at least one of said rules so as to automatically handle said activity concerning said item of sensitive information in accordance with said policy, wherein said activity comprises a request by said particular user to access a document including said item of sensitive information and said step of third operating comprises using said computer-based tool to automatically, substantially free from any contemporaneous user control, create an altered version of said document that is altered with respect to said item of sensitive information so that said particular user can access said altered version of said document to facilitated collaboration and protect said sensitive information is protected in accordance with said policy.