Educating users and enforcing data dissemination policies

• US 8,880,989 B2
• Filed: 01/30/2012
• Issued: 11/04/2014
• Est. Priority Date: 01/30/2012
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Tanzer, Brett A., Sankaranarayanan, Vidyaraman, Ayres, Lynn C., Kashi, Asaf
• Primary Examiner(s): RIES, LAURIE ANNE
• Application Number:
  US13/361,501
• Publication Number:
  US 20130198618A1
• Time in Patent Office: 1,009 Days
• Field of Search: 715/202, 715/255
• US Class Current: 715/202
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 40/134 Hyperlinking
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

An authoring component determines the sensitivity of an authored document and generates a user interface conveying contextual educational information about data dissemination policies that apply to the document. The user interface also provides user input mechanisms that allow the user to provide inputs affect the enforcement of a given data dissemination policy on the document.

Claims

1. A computer-implemented method of disseminating a document, the method comprising:

providing a user interface display, of an authoring application, to facilitate user generation of a new document;

receiving user inputs through the user interface display of the authoring application that provide document content for the document;

determining that the document is a sensitive document that is subject to a data dissemination policy; and

modifying the user interface display of the authoring application, while the document is being displayed, to provide a description of why the document is subject to the data dissemination policy.

2. The computer-implemented method of claim 1 wherein modifying the user interface display comprises:

generating an instruction display that renders information to the user, while simultaneously displaying the document content authored by the user in the document, instructing how the document content can be modified to comply with the data dissemination policy.

3. The computer-implemented method of claim 2 wherein modifying the user interface display comprises:

generating an action display describing an action that will be taken because the document does not comply with the data dissemination policy.

4. The computer-implemented method of claim 3 wherein modifying the user interface display comprises:

displaying a user input mechanism that receives a user input modifying the action.

5. The computer-implemented method of claim 4 wherein displaying a user input mechanism comprises:

displaying an override user input mechanism, actuable to override the action.

6. The computer-implemented method of claim 4 wherein displaying a user input mechanism comprises:

displaying a remedial user input mechanism, actuable to bring the document into compliance with the data dissemination policy.

7. The computer-implemented method of claim 4 wherein displaying a user input mechanism comprises:

displaying a feedback user input mechanism, receiving feedback that the sensitivity determination is inaccurate.

8. The computer-implemented method of claim 1 wherein modifying the user interface display comprises showing a portion of the document content, using a visual cue, that gives rise to the determination that the document content is sensitive.

9. The computer-implemented method of claim 1 wherein determining that the document is a sensitive document comprises:

analyzing the document content, while receiving the user inputs through the user interface display of the authoring application, to identify sensitive content in the document.

10. The computer-implemented method of claim 1 wherein determining that the document is a sensitive document comprises:

analyzing metadata corresponding to the document to identify metadata tags that label the document as a sensitive document.

11. The computer-implemented method of claim 1 wherein determining that the document is a sensitive document comprises:

analyzing a location where the document is to be stored to determine whether the location indicates that the document is a sensitive document.

12. The computer-implemented method of claim 1 wherein determining that the document is a sensitive document comprises:

analyzing an author and recipients of the document to determine whether the document is a sensitive document.

13. The computer-implemented method of claim 1 wherein receiving user inputs to provide document content comprises:

receiving textual inputs to author an electronic mail message.

14. The computer-implemented method of claim 13 wherein determining that the document is sensitive comprises:

analyzing an attachment to the electronic mail message to identify the attachment as a sensitive document.

15. The computer-implemented method of claim 1 wherein receiving user inputs to provide document content comprises at least one of:

receiving spreadsheet inputs to author a spreadsheet document; and

receiving word processing inputs to author a word processing document.

16. The computer-implemented method of claim 1 wherein determining that the document is a sensitive document occurs while receiving the user inputs through the user interface display of the authoring application that provide the document content for the document.

17. An authoring system for authoring a document, comprising:

an authoring component that runs an authoring application;

a user interface component, receiving user inputs that provide document content to author the document using the authoring application run by the authoring component;

a sensitivity determination component analyzing the document, as the document is being authored, to determine whether the document is a sensitive document subject to a dissemination policy, the authoring application generating a user interface display using the user interface component that displays the document content, a description of why the sensitive document is sensitive, and an instruction of how to comply with the dissemination policy, wherein the description, the instruction, and the document content provided by the user through the user interface component are simultaneously displayed in the user interface display of the authoring application; and

a computer processor, being a functional component of the authoring system and activated by the authoring component and the sensitivity determination component to facilitate authoring the document and determining whether the document is sensitive.

18. The authoring system of claim 17 wherein the authoring application generates the user interface display with a user input mechanism that receives user input to modify how the authoring system processes the document under the dissemination policy.

19. The authoring system of claim 18 wherein the authoring application generates the user interface display with an override user input mechanism actuable to override the dissemination policy, and an instruction display displaying instructions that the override will be reviewed by a person other than the user.

20. A computer-implemented method of disseminating a document, the method comprising:

displaying a user interface of an authoring application, the user interface having a first display portion that receives user inputs from a user that provide document content to author a document;

determining based on the document content, while the user is interacting with the authoring application, that the document is a sensitive document that is subject to a security policy; and

while the document content is being displayed in the first display portion, modifying the user interface of the authoring application to include;

a second display portion describing why the document is subject to the security policy,

a third display portion instructing the user how the document can be modified to comply with the security policy,

a fourth display portion describing an action that will be taken because the document does not comply with the security policy, and

a fifth display portion displaying a user input mechanism that receives a user input modifying the action by one of;

receiving a remedial input placing the document in compliance with the security policy,

receiving a feedback input indicating that the determination that the document is sensitive is inaccurate, and

receiving an override input overriding the action.