System and method of determining and recommending a document control policy for a document

• US 7,610,315 B2
• Filed: 09/06/2006
• Issued: 10/27/2009
• Est. Priority Date: 09/06/2006
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Chang, Walter, Masinter, Larry
• Primary Examiner(s): Vo; Tim T.
• Assistant Examiner(s): Engelskirchen; Jeremy D
• Application Number:
  US11/470,533
• Publication Number:
  US 20080059448A1
• Time in Patent Office: 1,147 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 16/353 into predefined classes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy

Abstract

In general, a genre classification can be determined for a document, the genre classification including multiple terms and corresponding scores indicating confidence levels for the terms with respect to the document. A relevant node in a document control policy ontology can be identified in accordance with the genre classification, and a confidence level for applicability of the relevant node can be assessed based at least in part upon at least one of the scores. A parent node of the relevant node in the document control policy ontology can be selected to stand in for the relevant node if the assessed confidence level for applicability of the relevant node falls below a threshold. At least one document control policy can be recommended to govern access to the document based on the identified or selected relevant node in the document control policy ontology.

Claims

1. A computer-implemented method comprising:

determining a genre classification for a document, the genre classification comprising multiple terms and corresponding scores, each score for a term indicating a confidence level for the term with respect to the document;

accessing a stored document control policy ontology, the document control policy ontology comprising a hierarchy of nodes that represent document genres and have corresponding document control policies;

identifying an entry point node in the hierarchy of nodes of the document control policy ontology by successively comparing the multiple terms in the genre classification with the nodes in the document control policy ontology in order of increasing hierarchical position of the terms until either a matching node in the ontology is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used the identifying comprising, when the document control policy ontology has an underlying classification structure different from a classification structure used for determining the genre classification, identifying a correlation between the different classification structures;

assessing a confidence level for applicability of the entry point node based at least in part upon at least one of the scores;

inferencing within the document control policy ontology to find a document control policy more conservative than the policy corresponding to the entry point node, the inferencing comprising selecting a parent node of the entry point node in the document control policy ontology to stand in for the entry point node if the assessed confidence level for applicability of the entry point node falls below a threshold, the parent node inheriting at least one document control policy derived from at least the entry point node; and

outputting, to a hardware device, a recommendation that identifies at least one document control policy to govern access to the document based on the identified entry point node or the selected parent node in the document control policy ontology.

2. The method of claim 1, wherein the determining comprises classifying the document using a document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts, for document genre classification, the genre classification comprises a subset of the inference chains, and the identifying comprises checking terms associated with levels higher than a lowest level of respective ones of the subset of inference chains.

3. The method of claim 1, further comprising deriving a document control policy for a parent node in the document control policy ontology based on a combination of multiple document control policies associated with child nodes of the parent node in the document control policy ontology, and associating the derived document control policy with the parent node in the document control policy ontology.

4. The method of claim 3, wherein the derived document control policy comprises a derived security policy and a derived retention policy, and deriving the document control policy comprises:

combining Boolean values of security policies associated with the child nodes of the parent node to form the derived security policy; and

combining identified separate cases, which depend on variables associated with the multiple document control policies associated with child nodes, to form the derived retention policy.

5. The method of claim 3, wherein the deriving comprises deriving a document control policy that aggregates policy components, defaulting to more conservative policy components, from the multiple document control policies associated with the child nodes in the document control policy ontology.

6. The method of claim 3, wherein the deriving comprises recursively deriving document control policies for parent nodes in the document control policy ontology up to a root node;

and wherein the deriving and the associating are performed before deployment of the document control policy ontology.

7. The method of claim 1, wherein the outputting comprises outputting, to the hardware device, multiple recommended document control policies and corresponding inference chains from the document control policy ontology.

8. The method of claim 1, further comprising automatically applying a highest ranked document control policy, from multiple recommended document control policies, to the document.

9. The method of claim 1, further comprising:

when the term in the highest hierarchical position in the genre classification is reached and the root node is used,

outputting to a hardware device a recommendation that identifies at least the document control policy corresponding to the root node to govern access to the document.

10. The method of claim 1, further comprising:

generalizing about document genre when the genre classification matches a node in the document control policy ontology that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found.

11. A system comprising:

a user interface device;

a document control component comprising a hierarchical knowledge structure including document control policies, including at least one document control policy inherited by a parent node in accordance with an algebraic maximum of rules associated with child nodes of the parent node; and

one or more computers operable to interact with the user interface device and the document control component to determine a genre classification for a document, compare the genre classification with the hierarchical knowledge structure to identify a relevant node among multiple nodes, including the parent node, and recommend at least one document control policy to govern access to the document based on the identified relevant node in the hierarchical knowledge structure, the relevant node identified by successively comparing multiple terms in the genre classification with the hierarchical knowledge structure based on hierarchical positions of the terms until either a matching node in the hierarchical knowledge structure is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used, and

when the hierarchical knowledge structure of the document control component differs from a hierarchical knowledge structure used for determining the genre classification, the one or more computers being operable to identify a correlation between the different knowledge structures.

12. The system of claim 11, wherein the one or more computers comprise a sewer operable to interact with the user interface device through a data communication network, and the user interface device is operable to interact with the server as a client.

13. The system of claim 11, wherein the one or more computers comprises one personal computer, and the personal computer comprises the user interface device.

14. The system of claim 11, further comprising:

a document genre ontology used for document genre classification, the document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts;

an application program interface (API) configured to provide the document control component with access to selected elements in an inference chain in the document genre ontology;

wherein the document control component comprises a policy ontology component configured to recommend the at least one document control policy and including an interface through which a policy management component accesses the at least one document control policy for application to the document.

15. The system of claim 14, wherein the policy management component comprises a policy server.

16. The system of claim 11, the one or more computers further operable to derive a document control policy for a parent node in the hierarchical knowledge structure, in the document control component, based on a combination of multiple document control policies associated with child nodes of the parent node in the hierarchical knowledge structure of the document control component;

and to associate the derived document control policy with the parent node in the hierarchical knowledge structure of the document control component.

17. The system of claim 11, the one or more computers further operable to output multiple recommended document control policies and corresponding inference chains from the hierarchical knowledge structure in the document control component.

18. The system of claim 11, the one or more computers further operable to automatically apply a highest ranked document control policy, from multiple recommended document control policies, to the document.

19. The system of claim 11, the one or more computers farther operable to perform operations comprising:

when the term in the highest hierarchical position in the genre classification is reached and the root node is used,

recommending at least the document control policy corresponding to the root node to govern access to the document.

20. The system of claim 11, the one or more computers further operable to perform operations comprising:

generalizing about document genre when the genre classification matches a node associated with the hierarchical knowledge structure of the document control component that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found.

21. A computer program product, encoded on a machine-readable storage device, configured to cause one or more data processing apparatus to perform operations comprising:

receiving a genre classification for a document, the genre classification comprising multiple terms and corresponding scores, each score for a term indicating a confidence level for the term with respect to the document;

accessing a stored document control policy ontology, the document control policy ontology comprising a hierarchy of nodes that represent document genres and have corresponding document control policies;

identifying an entry point node in the hierarchy of nodes of the document control policy ontology by successively comparing the multiple terms in the genre classification with the nodes in the document control policy ontology in order of increasing hierarchical position of the terms until either a matching node in the ontology is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used the identifying comprising, when the document control policy ontology has an underlying classification structure different from a classification structure used for determining the genre classification, identifying a correlation between the different classification structures;

assessing a confidence level for applicability of the entry point node based at least in part upon at least one of the scores;

inferencing within the document control policy ontology to find a document control policy more conservative than the policy corresponding to the entry point node, the inferencing comprising selecting a parent node of the entry point node in the document control policy ontology to stand in for the entry point node if the assessed confidence level for applicability of the entry point node falls below a threshold, the parent node inheriting at least one document control policy derived from at least the entry point node; and

recommending at least one document control policy to govern access to the document based on the identified entry point node or the selected parent node in the document control policy ontology.

22. The computer program product of claim 21, wherein the determining comprises classifying the document using a document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts, for document genre classification;

the genre classification comprises a subset of the inference chains; and

the identifying comprises checking terms associated with levels higher than a lowest level of respective ones of the subset of inference chains.

23. The computer program product of claim 21, the operations further comprising deriving a document control policy for a parent node in the document control policy ontology based on a combination of multiple document control policies associated with child nodes of the parent node in the document control policy ontology;

and associating the derived document control policy with the parent node in the document control policy ontology.

24. The computer program product of claim 23, wherein the derived document control policy comprises a derived security policy and a derived retention policy, and deriving the document control policy comprises:

combining Boolean values of security policies associated with the child nodes of the parent node to form the derived security policy; and

combining identified separate cases, which depend on variables associated with the multiple document control policies associated with child nodes, to form the derived retention policy.

25. The computer program product of claim 23, wherein the deriving comprises deriving a document control policy that aggregates policy components, defaulting to more conservative policy components, from the multiple document control policies associated with the child nodes in the document control policy ontology.

26. The computer program product of claim 23, wherein the deriving comprises recursively deriving document control policies for parent nodes in the document control policy ontology up to a root node;

and wherein the deriving and the associating are performed before deployment of the document control policy ontology.

27. The computer program product of claim 21, wherein the recommending comprises outputting multiple recommended document control policies and corresponding inference chains from the document control policy ontology.

28. The computer program product of claim 21, the operations further comprising automatically applying a highest ranked document control policy, from multiple recommended document control policies, to the document.

29. The computer program product of claim 21, the operations further comprising:

when the term in the highest hierarchical position in the genre classification is reached and the root node is used,

recommending at least the document control policy corresponding to the root node to govern access to the document.

30. The computer program product of claim 21, the operations further comprising:

generalizing about document genre when the genre classification matches a node in the document control policy ontology that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found.