Method and system for automated security access policy for a document management system

• US 8,543,606 B2
• Filed: 12/10/2012
• Issued: 09/24/2013
• Est. Priority Date: 04/08/2009
• Status: Active Grant

• Current Assignee: TITUS Inc.
• Original Assignee: TITUS Inc.
• Inventors: Pulfer, Charles Edouard, Whitney, Benjamin Taylor, Roy, Regi Baby
• Primary Examiner(s): Bullock, Joshua
• Application Number:
  US13/709,695
• Publication Number:
  US 20130097667A1
• Time in Patent Office: 288 Days
• Field of Search: 707783-785, 707/608
• US Class Current: 707/785
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method and system for providing an automated security access policy in a document management system are described. The security policies are applied based on metadata rules. Once a document is added to the document managements system, the metadata rules are evaluated using the metadata of the document. Based on the results of the evaluation security access policies are applied to the document.

Claims

1. A system for automatically creating a security access policy to an electronic document in a document management system, the system comprising:

a processor; and

a non-transitory computer readable storage medium, having computer readable instructions stored thereon for execution by the processor, causing the processor to;

associate metadata with the document, the metadata comprising one or more attributes of the document;

the metadata comprising;

a contextual metadata, which is inferred from contents of the document;

an applied metadata, which is attached to the document by an external program; and

a dynamic metadata, which is dynamically retrieved based on external content analysis of the document performed outside of the document management system;

configure security access policies to be applied to documents in the document management system, comprising specifying one or more metadata rules operating on the metadata and governing application of security access policies to the documents; and

determine the security access policy to be applied to the document to be added to the document management system based on the one or more metadata rules and the metadata associated with the document.

2. The system of claim 1, wherein the computer readable instructions further cause the processor to:

create said one or more metadata rules;

store said one or more metadata rules in a permissions setting configuration file; and

communicate the permissions setting configuration file to the document management system.

3. The system of claim 2, wherein the computer readable instructions further cause the processor to configure a permission configuration web page for said one or more metadata rules.

4. The system of claim 2, wherein the computer readable instructions further cause the processor to store the permissions setting configuration file in an Extensible Markup Language (XML) format.

5. The system of claim 1, wherein the computer readable instructions further cause the processor to provide an attribute comprising a first field containing a name of the attribute and a second field containing a value of the attribute.

6. The system of claim 5, wherein the computer readable instructions further cause the processor to specify said one or more metadata rules comprising a target name, a target value, a comparison operation for comparing the target value with the second field of the attribute the first field of which matches the target name.

7. The system of claim 6, wherein the computer readable instructions further cause the processor to specify the security access policy, comprising a permission set to be applied to the document for controlling access to the document based on results of the comparison operation.

8. The system of claim 7, wherein the computer readable instructions further cause the processor to:

receive a notification from the document management system regarding adding the document to the document management system;

evaluate each metadata rule by performing the comparison operation in said each metadata rule; and

for said each metadata rule, apply the permission set to the document.

9. The system of claim 6, wherein the computer readable instructions further cause the processor to specify a compound expression for performing multiple comparisons on the target name and the target value.

10. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file size.

11. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file name.

12. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file type.

13. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a date when a file size has been modified.

14. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a word count for a file or a name of an author of the file.

15. The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is selected from the group consisting from a classification level, title, and a customer number for the document.

16. The system of claim 1, wherein the computer readable instructions further cause the processor to change an access control list in the document management system, the access control list including names of users having access to the document along with corresponding levels of access of the users.

17. The system of claim 1, wherein the computer readable instructions further cause the processor to perform an automated content analysis of the document using natural language processing.

18. The system of claim 1, wherein the computer readable instructions further cause the processor to perform an automated content analysis of the document using external database queries.

19. The system of claim 1, wherein the document management system is a file management system.

20. The system of claim 1, wherein the document management system is a Microsoft Share Point document library.

21. A method for automatically creating a security access policy to an electronic document in a document management system, the method comprising:

using a processor for;

associating metadata with the document, the metadata comprising one or more attributes of the document;

the metadata comprising;

a contextual metadata, which is inferred from contents of the document;

an applied metadata, which is attached to the document by an external program; and

a dynamic metadata, which is dynamically retrieved based on external content analysis of the document performed outside of the document management system;

configuring security access policies to be applied to documents in the document management system, comprising specifying one or more metadata rules operating on the metadata and governing application of security access policies to the documents; and

determining the security access policy to be applied to the document to be added to the document management system based on the one or more metadata rules and the metadata associated with the document.