Security classification applying social norming

• US 8,813,255 B2
• Filed: 01/28/2011
• Issued: 08/19/2014
• Est. Priority Date: 01/28/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Abuelsaad, Tamer E., Handy-Bosma, John H., Ravin, Yael, Morrison, William D.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US13/016,596
• Publication Number:
  US 20120198568A1
• Time in Patent Office: 1,299 Days
• Field of Search: 726 1- 4, 726 27- 30, 713165-167
• US Class Current: 726/30
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management

Abstract

An embodiment of the invention provides a method for security classification applying social norming. More specifically, content is received from a user via an interface; and, a data repository connected to the interface stores the content. A portal connected to the data repository identifies an attempt to access the content from a non-user. A program processor connected to the portal determines whether the content includes a security classification. When the content does not include a security classification, a communications module connected to the program processor sends an alert to the user. The alert includes a request to assign a security classification to the content. When the content includes a security classification, the communications module sends a message to the user, wherein the message includes a request to verify the security classification.

Claims

1. A method for content management, said method including:

receiving content from a user;

storing the received content in a data repository;

identifying an attempt to access the content from a non-user;

determining whether the content includes a security classification;

sending an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content;

generating a list of users, the list of users only including users that have sent content to be stored in the data repository and have not assigned a security classification to the content to be stored in the data repository, wherein the list of users excludes users that have sent content to be stored in the data repository and have assigned a security classification to the content to be stored in the data repository; and

sending the list to at least one of the users'"'"' peers, the users'"'"' supervisors, and the users.

2. The method according to claim 1, further including permitting access to the content by the non-user when the content includes a security classification.

3. The method according to claim 2, further including denying access to the content by the non-user when the content does not include a security classification.

4. The method according to claim 2, further including, when the content does not include a security classification, at least one of denying access to the content by the non-user and hiding the content from the non-user after a threshold number of attempts to access the content is reached.

5. The method according to claim 1, further including permitting access to the content by the non-user when the content does not include a security classification and the non-user is a requester, wherein the requester at least one of has a threshold security clearance level and has been previously granted access to second content of the user.

6. The method according to claim 1, further including hiding presence of the content from the non-user in the data repository when the content does not include a security classification.

7. The method according to claim 1, further including sending a message to the user when the content includes a security classification, the message including a request to verify the security classification in response to the attempt to access the content by the non-user.

8. The method according to claim 7, further including at least one of denying access to the content by the non-user and hiding the content from the non-user until the security classification is verified by the user.

9. The method according to claim 1, further including defining at least one select non-user, wherein the alert is only sent to the user when the attempt to access the content is made by the select non-user.

10. The method according to claim 1, further including validating an assigned security classification, said validating including comparing a date that the assigned security classification was established with a date that the content was last updated.

11. A method for content management, said method including:

receiving content from a user;

storing the received content in a data repository;

identifying an attempt to access the content from a non-user;

determining whether the content includes a security classification;

defining at least one select non-user;

sending an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content, wherein the alert is only sent to the user when the attempt to access the content is made by the select non-user; and

sending a message to the user when the content includes a security classification, the message including a request to verify the security classification.

12. The method according to claim 11, further including:

generating a list of users that have sent content to be stored in the data repository and have not assigned a security classification to the content to be stored in the data repository; and

permitting access to the list to at least one of the users'"'"' peers, the users'"'"' supervisors, and the users.

13. A system for content management, said system including:

an interface for receiving content from a user;

a data repository connected to said interface for storing the received content;

a portal connected to said data repository, said portal identifies an attempt to access the content by a non-user;

a program processor connected to said portal, said program processor determines whether the content includes a security classification; and

a communications module connected to said program processor, said communications module sends an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content, the alert notifying the user that others cannot access the content until a security classification is assigned to the content, said communications module only sends the alert to the user when the attempt to access the content is made by a select non-user.

14. The system according to claim 13, further including a security module connected to said portal, said security module permits access to the content by the non-user when the content includes a security classification.

15. The system according to claim 14, wherein said security module denies access to the content by the non-user when the content does not include a security classification.

16. The system according to claim 14, wherein said security module, when the content does not include a security classification, at least one of denies access to the content by the non-user and hides the content from the non-user after a threshold number of attempts to access the content is reached.

17. The system according to claim 13, further including a security module connected to said portal, said security module permits access to the content by the non-user when the content does not include a security classification and the non-user is a requester, wherein the requester at least one of has a threshold security clearance level and has been previously granted access to second content of the user.

18. The system according to claim 13, wherein said portal hides a presence of the content from the non-user in said data repository when the content does not include a security classification.

19. The system according to claim 13, wherein said communications module sends a message to the user when the content includes a security classification, the message including a request to verify the security classification in response to the attempt to access the content by the non-user.

20. The system according to claim 19, further including a security module connected to said portal, said security module at least one of denies access to the content by the non-user and hides the content from the non-user until the security classification is verified by the user.

21. The system according to claim 13, wherein said program processor validates an assigned security classification by comparing a date that the assigned security classification was established with a date that the content was last updated.

22. The system according to claim 13, wherein said program processor:

generates a list of users that have sent content to be stored in said data repository and have not assigned a security classification to the content to be stored in said data repository; and

permits access to the list to at least one of the users'"'"' peers, the users'"'"' supervisors, and the users.

23. A computer program product for content management, said computer program product including:

a non-transitory computer readable storage medium;

first program instructions to receive content from a user;

second program instructions to store the received content in a data repository;

third program instructions to identify an attempt to access the content from a non-user;

fourth program instructions to determine whether the content includes a security classification;

fifth program instructions to send an alert to the user when the content does not include a security classification, the alert including a request to assign a security classification to the content, the alert notifying the user;

that others cannot access the content until a security classification is assigned to the content, and

that a non-user has attempted to access the content;

sixth program instructions to generating a list of users that have sent content to be stored in the data repository and have not assigned a security classification to the content to be stored in the data repository; and

seventh program instructions to send the list to the users'"'"' peers, the users'"'"' supervisors, and the users,

said first program instructions, said second program instructions, said third program instructions, said fourth program instructions, said fifth program instructions, said sixth program instructions, and said seventh program instructions are stored on said computer readable storage medium.