# US 8,543,606 B2 · Method and system for automated security access policy for a document management system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,543,606 B2 - Document ID: US8543606B2 - Status: Granted - Kind: B2 - Application number: 13/709,695 - Filed: 2012-12-10 - Published: 2013-04-18 - Granted: 2013-09-24 - Earliest claimed: 2009-04-08 - Assignees: Titus Inc. - Applicants: Titus Inc. - Inventors: Charles Edouard Pulfer; Benjamin Taylor Whitney; Regi Baby Roy - Web page: https://patentgrep.com/patent/US8543606B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 16/93: Document management systems - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method and system for providing an automated security access policy in a document management system are described. The security policies are applied based on metadata rules. Once a document is added to the document managements system, the metadata rules are evaluated using the metadata of the document. Based on the results of the evaluation security access policies are applied to the document. ## Claims ### Claim 1 A system for automatically creating a security access policy to an electronic document in a document management system, the system comprising: a processor; and a non-transitory computer readable storage medium, having computer readable instructions stored thereon for execution by the processor, causing the processor to: associate metadata with the document, the metadata comprising one or more attributes of the document; the metadata comprising: a contextual metadata, which is inferred from contents of the document; an applied metadata, which is attached to the document by an external program; and a dynamic metadata, which is dynamically retrieved based on external content analysis of the document performed outside of the document management system; configure security access policies to be applied to documents in the document management system, comprising specifying one or more metadata rules operating on the metadata and governing application of security access policies to the documents; and determine the security access policy to be applied to the document to be added to the document management system based on the one or more metadata rules and the metadata associated with the document. ### Claim 2 (depends on 1) The system of claim 1, wherein the computer readable instructions further cause the processor to: create said one or more metadata rules; store said one or more metadata rules in a permissions setting configuration file; and communicate the permissions setting configuration file to the document management system. ### Claim 3 (depends on 2) The system of claim 2, wherein the computer readable instructions further cause the processor to configure a permission configuration web page for said one or more metadata rules. ### Claim 4 (depends on 2) The system of claim 2, wherein the computer readable instructions further cause the processor to store the permissions setting configuration file in an Extensible Markup Language (XML) format. ### Claim 5 (depends on 1) The system of claim 1, wherein the computer readable instructions further cause the processor to provide an attribute comprising a first field containing a name of the attribute and a second field containing a value of the attribute. ### Claim 6 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to specify said one or more metadata rules comprising a target name, a target value, a comparison operation for comparing the target value with the second field of the attribute the first field of which matches the target name. ### Claim 7 (depends on 6) The system of claim 6, wherein the computer readable instructions further cause the processor to specify the security access policy, comprising a permission set to be applied to the document for controlling access to the document based on results of the comparison operation. ### Claim 8 (depends on 7) The system of claim 7, wherein the computer readable instructions further cause the processor to: receive a notification from the document management system regarding adding the document to the document management system; evaluate each metadata rule by performing the comparison operation in said each metadata rule; and for said each metadata rule, apply the permission set to the document. ### Claim 9 (depends on 6) The system of claim 6, wherein the computer readable instructions further cause the processor to specify a compound expression for performing multiple comparisons on the target name and the target value. ### Claim 10 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file size. ### Claim 11 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file name. ### Claim 12 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a file type. ### Claim 13 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a date when a file size has been modified. ### Claim 14 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is a word count for a file or a name of an author of the file. ### Claim 15 (depends on 5) The system of claim 5, wherein the computer readable instructions further cause the processor to provide the name of the attribute, which is selected from the group consisting from a classification level, title, and a customer number for the document. ### Claim 16 (depends on 1) The system of claim 1, wherein the computer readable instructions further cause the processor to change an access control list in the document management system, the access control list including names of users having access to the document along with corresponding levels of access of the users. ### Claim 17 (depends on 1) The system of claim 1, wherein the computer readable instructions further cause the processor to perform an automated content analysis of the document using natural language processing. ### Claim 18 (depends on 1) The system of claim 1, wherein the computer readable instructions further cause the processor to perform an automated content analysis of the document using external database queries. ### Claim 19 (depends on 1) The system of claim 1, wherein the document management system is a file management system. ### Claim 20 (depends on 1) The system of claim 1, wherein the document management system is a Microsoft Share Point document library. ### Claim 21 A method for automatically creating a security access policy to an electronic document in a document management system, the method comprising: using a processor for: associating metadata with the document, the metadata comprising one or more attributes of the document; the metadata comprising: a contextual metadata, which is inferred from contents of the document; an applied metadata, which is attached to the document by an external program; and a dynamic metadata, which is dynamically retrieved based on external content analysis of the document performed outside of the document management system; configuring security access policies to be applied to documents in the document management system, comprising specifying one or more metadata rules operating on the metadata and governing application of security access policies to the documents; and determining the security access policy to be applied to the document to be added to the document management system based on the one or more metadata rules and the metadata associated with the document.