Security classification based on user interaction

• US 8,448,258 B2
• Filed: 01/28/2011
• Issued: 05/21/2013
• Est. Priority Date: 01/28/2011
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Abuelsaad, Tamer E., Handy-Bosma, John H., Ravin, Yael, Morrison, William D.
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US13/016,677
• Publication Number:
  US 20120198564A1
• Time in Patent Office: 844 Days
• Field of Search: None
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

An embodiment of the invention includes a method and system for content management. More specifically, the system includes a user interface for receiving content from a user and a data repository connected to the user interface for storing the content. The user interface also receives a request to access the content from the user. A program processor is connected to the data repository, wherein the program processor determines whether the content includes a security classification. A communications module is connected to the program processor, wherein the communications module sends an alert to the user interface when the content does not include a security classification. The alert includes a request to assign a security classification to the content.

Claims

1. A method for content management, including:

receiving content from a user;

storing the content in a data repository;

identifying a request to access the content from the user;

determining with a program processor whether the content includes a security classification;

sending an alert to the user with a communications module when the content does not include a security classification, the alert including a request to assign a security classification to the content; and

validating an assigned security classification with the program processor, said validating including comparing a date that the assigned security classification was established with a date that the content was last updated.

2. The method according to claim 1, further including permitting access to the content when the content includes a security classification.

3. The method according to claim 2, further including, when the content does not include a security classification, at least one of:

denying access to the content by the user; and

denying access to the content by non-users.

4. The method according to claim 2, further including, when the content does not include a security classification, denying access to the content after at least one of:

a threshold number of requests to access the content from the user is reached;

a threshold number of requests to access the content from non-users is reached; and

a threshold number of requests to access the content from the user and non-users is reached.

5. The method according to claim 1, wherein the request to access the content from the user includes a request to modify the content.

6. The method according to claim 1, further including, in response to the request to access the content from the user, sending a message to the user when the content includes a security classification, the message including a request to verify the security classification.

7. The method according to claim 6, further including at least one of:

denying access to the content by the user until the security classification is verified by the user; and

denying access to the content by non-users until the security classification is verified by the user.

8. The method according to claim 1, further including:

receiving a request to modify the content from the user after said storing of the content in the data repository; and

sending to the user one of a request to assign a security classification to the content and a request to update the security classification of the content.

9. The method according to claim 1, wherein the data repository is included in a cloud computing system.

10. A method for content management, including:

receiving content from a user;

storing the content in a data repository;

identifying a request to access the content from the user;

determining with a program processor whether the content includes a security classification;

sending an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content;

sending a message to the user when the content includes a security classification, the message including a request to verify the security classification; and

validating an assigned security classification with the program processor, said validating including comparing a date that the assigned security classification was established with a date that the content was last updated.

11. The method according to claim 10, further including:

permitting access to the content when the content includes a security classification; and

when the content does not include a security classification, at least one of;

denying access to the content by the user, and

denying access to the content by non-users.

12. The method according to claim 10, further including, when the content does not include a security classification, denying access to the content after at least one of:

a threshold number of requests to access the content from the user is reached;

a threshold number of requests to access the content from non-users is reached; and

a threshold number of requests to access the content from the user and non-users is reached.

13. A system for content management, including:

a data repository for storing content;

a user interface connected to said data repository, said user interface receives content from a user and receives a request to access the content from the user;

a program processor connected to said data repository, said program processor determines whether the content includes a security classification and validates an assigned security classification by comparing a date that the assigned security classification was established with a date that the content was last updated; and

a communications module connected to said program processor, said communications module sends an alert to said user interface when the content does not include a security classification, the alert including a request to assign a security classification to the content.

14. The system according to claim 13, further including a security module connected to said data repository, said security module permits access to the content when the content includes a security classification.

15. The system according to claim 14, wherein said security module at least one of:

denies access to the content by the user when the content does not include a security classification; and

denies access to the content by non-users when the content does not include a security classification.

16. The system according to claim 14, wherein said security module, when the content does not include a security classification, denies access to the content after at least one of:

a threshold number of requests to access the content from the user is reached;

a threshold number of requests to access the content from non-users is reached; and

a threshold number of requests to access the content from the user and non-users is reached.

17. The system according to claim 13, wherein the request to access the content from the user includes a request to modify the content.

18. The system according to claim 13, wherein said communications module, in response to the request to access the content from the user, sends a message to said user interface when the content includes a security classification, the message including a request to verify the security classification.

19. The system according to claim 18, further including a security module connected to said data repository, said security module at least one of:

denies access to the content by the user until the security classification is verified by the user; and

denies access to the content by non-users until the security classification is verified by the user.

20. The system according to claim 13, wherein said user interface receives a request to modify the content from the user after the content is stored in said data repository, and

wherein said communications module sends a second alert to the user interface, the second alert including a request to assign a security classification to the content and a request to update the security classification of the content.

21. The system according to claim 13, wherein the data repository is included in a cloud computing system.

22. A computer program product for content management, said computer program product including:

a non-transitory computer readable storage medium;

first program instructions to receive content from a user;

second program instructions to store the received content in a data repository;

third program instructions to identify a request to access the content from the user;

fourth program instructions to determine whether the content includes a security classification;

fifth program instructions to send an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content; and

sixth program instructions to validate an assigned security classification, said validating including comparing a date that the assigned security classification was established with a date that the content was last updated,

said first program instructions, said second program instructions, said third program instructions, said fourth program instructions, said fifth program instructions, and said sixth program instructions are stored on said computer readable storage medium.