METHOD AND SYSTEM FOR AUTOMATED SECURITY ACCESS POLICY FOR A DOCUMENT MANAGEMENT SYSTEM

• US 20100262577A1
• Filed: 03/29/2010
• Published: 10/14/2010
• Est. Priority Date: 04/08/2009
• Status: Active Grant

• Current Assignee: TITUS Inc.
• Original Assignee: TITUS Inc.
• Inventors: WHITNEY, Benjamin Taylor, ROY, Regi Baby, PULFER, Charles Edouard
• Granted Patent: US 8,332,350 B2
• Time in Patent Office: Days
• US Class Current: 707/608
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method and system for providing an automated security access policy in a document management system are described. The security policies are applied based on metadata rules. Once a document is added to the document managements system, the metadata rules are evaluated using the metadata of the document. Based on the results of the evaluation security access policies are applied to the document.

Claims

1. A computerized method for automatically providing a security access policy to an electronic document in a document management system, the method comprising:

(a1) associating metadata with the document, the metadata comprising one or more attributes of the document;

(b1) configuring security access policies to be applied to documents in the document management system, including specifying one or more metadata rules governing application of security access policies to the documents; and

(c1) determining the security access policy to be applied to the document to be added to the document management system based on said one or more metadata rules and the metadata associated with the document.

2. The method of claim 1, wherein the step (b1) comprises:

(a2) creating said one or more metadata rules, comprising configuring a permission configuration web page;

(b2) storing said one or more metadata rules in a permissions setting configuration file; and

(c2) communicating the permissions setting configuration file to the document management system.

3. The method of claim 1, wherein the step (a1) comprises providing the attribute comprising a first field containing a name of the attribute and a second field containing a value of the attribute.

4. The method of claim 3, wherein the step (b1) comprises specifying said one or more metadata rules comprising a target name, a target value, a comparison operation for comparing the target value with the second field of the attribute the first field of which matches the target name, and the security access policy, comprising a permission set to be applied to the document for controlling access to the document based on results of the comparison operation.

5. The method of claim 3, comprising providing the name of the attribute selected from the group consisting of file size, file name, file type, date modified, word count, and author.

6. The method of claim 4, wherein the step (c1) comprises:

(a6) receiving a notification from the document management system regarding adding the document to the document management system;

(b6) evaluating each metadata rule by performing the comparison operation in said each metadata rule; and

(c6) for said each metadata rule, applying the permission set to the document.

7. The method of claim 6, wherein the step (c6) comprises changing an access control list in the document management system, the access control list including names of users having access to the document along with corresponding levels of access of the users.

8. The method of claim 4, wherein the specifying said one or more metadata rules comprises specifying a compound expression for performing multiple comparisons on the target name and the target value.

9. The method of claim 2, wherein the step (b2) comprises storing the permissions setting configuration file in an Extensible Markup Language (XML) format.

20. The method of claim 1, wherein the specifying comprises specifying metadata including one or more of a contextual metadata that is inferred from contents of the document, an applied metadata that is attached to the document by an external program, and a dynamic metadata that is dynamically retrieved based on content analysis performed outside the document management system.

10. A computer readable storage medium, having a computer readable program code instructions stored thereon, which, when executed by a computer, perform the following steps:

(a10) associating metadata with a document, the metadata comprising one or more attributes of the document;

(b10) configuring security access policies to be applied to documents in a document management system, including specifying one or more metadata rules governing application of security access policies to the documents; and

(c10) determining a security access policy to be applied to the document to be added to the document management system based on said one or more metadata rules and the metadata associated with the document.

11. A system for automatically providing a security access policy to an electronic document in a document management system, the system comprising:

a processor, and a computer readable storage medium having computer readable instructions stored thereon, which, when executed by the processor, form the following;

(a11) a metadata storage module, storing metadata associated with the document, the metadata comprising one or more attributes of the document;

(b11) a security policy configuration module, configuring security access policies to be applied to documents in the document management system, including specifying one or more metadata rules governing application of security access policies to the documents; and

(c11) a security policy determination module, determining the security access policy to be applied to the document to be added to the document management system based on said one or more metadata rules and the metadata associated with the document.

12. The system of claim 11, wherein the security policy configuration module (b11) comprises:

(a12) a policy handler module, creating said one or more metadata rules, comprising configuring a permission configuration web page;

(b12) a permissions setting configuration file, storing said one or more metadata rules; and

(c12) a policy configuration control module, communicating the permissions setting configuration file to the document management system.

13. The system of claim 11, wherein the attribute of the document comprises a first field containing a name of the attribute and a second field containing a value of the attribute.

14. The system of claim 13, wherein said one or more metadata rules comprises a target name, a target value, a comparison operation for comparing the target value with the second field of the attribute the first field of which matches the target name, and the security access policy, comprising a permission set to be applied to the document for controlling access to the document based on results of the comparison operation

15. The system of claim 13, wherein the name of the attribute is selected from the group consisting of file size, file name, file type, date modified, word count, and author.

16. The system of claim 14, wherein the security policy determination module (c11) comprises:

(a16) a dispatcher module, receiving a notification from the document management system regarding adding the document to the document management system;

(b16) a metadata rule evaluator module, evaluating each metadata rule by performing the comparison operation in said each metadata rule; and

(c16) a permission processor module, applying, for each said metadata rule, the permission set to the document.

17. The system of claim 16, wherein the permission processor module (c16) comprises computational means for changing an access control list in the document management system, the access control list including names of users having access to the document along with respective levels of access of the users.

18. The system of claim 14, wherein said one or more metadata rules comprises a compound expression for performing multiple comparisons on the target name and the target value.

19. The system of claim 11, wherein the document management system is a Microsoft Share Point document library.