# US 7,610,315 B2 · System and method of determining and recommending a document control policy for a document > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,610,315 B2 - Document ID: US7610315B2 - Status: Granted - Kind: B2 - Application number: 11/470,533 - Filed: 2006-09-06 - Published: 2008-03-06 - Granted: 2009-10-27 - Earliest claimed: 2006-09-06 - Assignees: Adobe Systems Incorporated - Inventors: Walter Chang; Larry Masinter - Web page: https://patentgrep.com/patent/US7610315B2 ## CPC - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 16/353: into predefined classes - G06F 2221/2145: Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract In general, a genre classification can be determined for a document, the genre classification including multiple terms and corresponding scores indicating confidence levels for the terms with respect to the document. A relevant node in a document control policy ontology can be identified in accordance with the genre classification, and a confidence level for applicability of the relevant node can be assessed based at least in part upon at least one of the scores. A parent node of the relevant node in the document control policy ontology can be selected to stand in for the relevant node if the assessed confidence level for applicability of the relevant node falls below a threshold. At least one document control policy can be recommended to govern access to the document based on the identified or selected relevant node in the document control policy ontology. ## Claims ### Claim 1 A computer-implemented method comprising: determining a genre classification for a document, the genre classification comprising multiple terms and corresponding scores, each score for a term indicating a confidence level for the term with respect to the document; accessing a stored document control policy ontology, the document control policy ontology comprising a hierarchy of nodes that represent document genres and have corresponding document control policies; identifying an entry point node in the hierarchy of nodes of the document control policy ontology by successively comparing the multiple terms in the genre classification with the nodes in the document control policy ontology in order of increasing hierarchical position of the terms until either a matching node in the ontology is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used the identifying comprising, when the document control policy ontology has an underlying classification structure different from a classification structure used for determining the genre classification, identifying a correlation between the different classification structures; assessing a confidence level for applicability of the entry point node based at least in part upon at least one of the scores; inferencing within the document control policy ontology to find a document control policy more conservative than the policy corresponding to the entry point node, the inferencing comprising selecting a parent node of the entry point node in the document control policy ontology to stand in for the entry point node if the assessed confidence level for applicability of the entry point node falls below a threshold, the parent node inheriting at least one document control policy derived from at least the entry point node; and outputting, to a hardware device, a recommendation that identifies at least one document control policy to govern access to the document based on the identified entry point node or the selected parent node in the document control policy ontology. ### Claim 2 (depends on 1) The method of claim 1, wherein the determining comprises classifying the document using a document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts, for document genre classification, the genre classification comprises a subset of the inference chains, and the identifying comprises checking terms associated with levels higher than a lowest level of respective ones of the subset of inference chains. ### Claim 3 (depends on 1) The method of claim 1, further comprising deriving a document control policy for a parent node in the document control policy ontology based on a combination of multiple document control policies associated with child nodes of the parent node in the document control policy ontology, and associating the derived document control policy with the parent node in the document control policy ontology. ### Claim 4 (depends on 3) The method of claim 3, wherein the derived document control policy comprises a derived security policy and a derived retention policy, and deriving the document control policy comprises: combining Boolean values of security policies associated with the child nodes of the parent node to form the derived security policy; and combining identified separate cases, which depend on variables associated with the multiple document control policies associated with child nodes, to form the derived retention policy. ### Claim 5 (depends on 3) The method of claim 3, wherein the deriving comprises deriving a document control policy that aggregates policy components, defaulting to more conservative policy components, from the multiple document control policies associated with the child nodes in the document control policy ontology. ### Claim 6 (depends on 3) The method of claim 3, wherein the deriving comprises recursively deriving document control policies for parent nodes in the document control policy ontology up to a root node; and wherein the deriving and the associating are performed before deployment of the document control policy ontology. ### Claim 7 (depends on 1) The method of claim 1, wherein the outputting comprises outputting, to the hardware device, multiple recommended document control policies and corresponding inference chains from the document control policy ontology. ### Claim 8 (depends on 1) The method of claim 1, further comprising automatically applying a highest ranked document control policy, from multiple recommended document control policies, to the document. ### Claim 9 (depends on 1) The method of claim 1, further comprising: when the term in the highest hierarchical position in the genre classification is reached and the root node is used, outputting to a hardware device a recommendation that identifies at least the document control policy corresponding to the root node to govern access to the document. ### Claim 10 (depends on 1) The method of claim 1, further comprising: generalizing about document genre when the genre classification matches a node in the document control policy ontology that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found. ### Claim 11 A system comprising: a user interface device; a document control component comprising a hierarchical knowledge structure including document control policies, including at least one document control policy inherited by a parent node in accordance with an algebraic maximum of rules associated with child nodes of the parent node; and one or more computers operable to interact with the user interface device and the document control component to determine a genre classification for a document, compare the genre classification with the hierarchical knowledge structure to identify a relevant node among multiple nodes, including the parent node, and recommend at least one document control policy to govern access to the document based on the identified relevant node in the hierarchical knowledge structure, the relevant node identified by successively comparing multiple terms in the genre classification with the hierarchical knowledge structure based on hierarchical positions of the terms until either a matching node in the hierarchical knowledge structure is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used, and when the hierarchical knowledge structure of the document control component differs from a hierarchical knowledge structure used for determining the genre classification, the one or more computers being operable to identify a correlation between the different knowledge structures. ### Claim 12 (depends on 11) The system of claim 11, wherein the one or more computers comprise a sewer operable to interact with the user interface device through a data communication network, and the user interface device is operable to interact with the server as a client. ### Claim 13 (depends on 11) The system of claim 11, wherein the one or more computers comprises one personal computer, and the personal computer comprises the user interface device. ### Claim 14 (depends on 11) The system of claim 11, further comprising: a document genre ontology used for document genre classification, the document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts; an application program interface (API) configured to provide the document control component with access to selected elements in an inference chain in the document genre ontology; wherein the document control component comprises a policy ontology component configured to recommend the at least one document control policy and including an interface through which a policy management component accesses the at least one document control policy for application to the document. ### Claim 15 (depends on 14) The system of claim 14, wherein the policy management component comprises a policy server. ### Claim 16 (depends on 11) The system of claim 11, the one or more computers further operable to derive a document control policy for a parent node in the hierarchical knowledge structure, in the document control component, based on a combination of multiple document control policies associated with child nodes of the parent node in the hierarchical knowledge structure of the document control component; and to associate the derived document control policy with the parent node in the hierarchical knowledge structure of the document control component. ### Claim 17 (depends on 11) The system of claim 11, the one or more computers further operable to output multiple recommended document control policies and corresponding inference chains from the hierarchical knowledge structure in the document control component. ### Claim 18 (depends on 11) The system of claim 11, the one or more computers further operable to automatically apply a highest ranked document control policy, from multiple recommended document control policies, to the document. ### Claim 19 (depends on 11) The system of claim 11, the one or more computers farther operable to perform operations comprising: when the term in the highest hierarchical position in the genre classification is reached and the root node is used, recommending at least the document control policy corresponding to the root node to govern access to the document. ### Claim 20 (depends on 11) The system of claim 11, the one or more computers further operable to perform operations comprising: generalizing about document genre when the genre classification matches a node associated with the hierarchical knowledge structure of the document control component that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found. ### Claim 21 A computer program product, encoded on a machine-readable storage device, configured to cause one or more data processing apparatus to perform operations comprising: receiving a genre classification for a document, the genre classification comprising multiple terms and corresponding scores, each score for a term indicating a confidence level for the term with respect to the document; accessing a stored document control policy ontology, the document control policy ontology comprising a hierarchy of nodes that represent document genres and have corresponding document control policies; identifying an entry point node in the hierarchy of nodes of the document control policy ontology by successively comparing the multiple terms in the genre classification with the nodes in the document control policy ontology in order of increasing hierarchical position of the terms until either a matching node in the ontology is found or the term in the highest hierarchical position of the multiple terms is reached and no matching node is found in which case a document control policy corresponding to a root node is used the identifying comprising, when the document control policy ontology has an underlying classification structure different from a classification structure used for determining the genre classification, identifying a correlation between the different classification structures; assessing a confidence level for applicability of the entry point node based at least in part upon at least one of the scores; inferencing within the document control policy ontology to find a document control policy more conservative than the policy corresponding to the entry point node, the inferencing comprising selecting a parent node of the entry point node in the document control policy ontology to stand in for the entry point node if the assessed confidence level for applicability of the entry point node falls below a threshold, the parent node inheriting at least one document control policy derived from at least the entry point node; and recommending at least one document control policy to govern access to the document based on the identified entry point node or the selected parent node in the document control policy ontology. ### Claim 22 (depends on 21) The computer program product of claim 21, wherein the determining comprises classifying the document using a document genre ontology comprising a hierarchical knowledge structure containing a vocabulary of terms and concepts, and inference chains representing interrelationships between the vocabulary terms and concepts, for document genre classification; the genre classification comprises a subset of the inference chains; and the identifying comprises checking terms associated with levels higher than a lowest level of respective ones of the subset of inference chains. ### Claim 23 (depends on 21) The computer program product of claim 21, the operations further comprising deriving a document control policy for a parent node in the document control policy ontology based on a combination of multiple document control policies associated with child nodes of the parent node in the document control policy ontology; and associating the derived document control policy with the parent node in the document control policy ontology. ### Claim 24 (depends on 23) The computer program product of claim 23, wherein the derived document control policy comprises a derived security policy and a derived retention policy, and deriving the document control policy comprises: combining Boolean values of security policies associated with the child nodes of the parent node to form the derived security policy; and combining identified separate cases, which depend on variables associated with the multiple document control policies associated with child nodes, to form the derived retention policy. ### Claim 25 (depends on 23) The computer program product of claim 23, wherein the deriving comprises deriving a document control policy that aggregates policy components, defaulting to more conservative policy components, from the multiple document control policies associated with the child nodes in the document control policy ontology. ### Claim 26 (depends on 23) The computer program product of claim 23, wherein the deriving comprises recursively deriving document control policies for parent nodes in the document control policy ontology up to a root node; and wherein the deriving and the associating are performed before deployment of the document control policy ontology. ### Claim 27 (depends on 21) The computer program product of claim 21, wherein the recommending comprises outputting multiple recommended document control policies and corresponding inference chains from the document control policy ontology. ### Claim 28 (depends on 21) The computer program product of claim 21, the operations further comprising automatically applying a highest ranked document control policy, from multiple recommended document control policies, to the document. ### Claim 29 (depends on 21) The computer program product of claim 21, the operations further comprising: when the term in the highest hierarchical position in the genre classification is reached and the root node is used, recommending at least the document control policy corresponding to the root node to govern access to the document. ### Claim 30 (depends on 21) The computer program product of claim 21, the operations further comprising: generalizing about document genre when the genre classification matches a node in the document control policy ontology that lacks an associated policy, the generalizing including traversing a link between the matching node and successive parent nodes until an associated policy is found.