US 8,782,734 B2 · Semantic controls on data storage and access

Abstract

Methods and apparatus teach defining an access policy to digital data available on one or more computing devices, including identifying one or more semantic attributes of at least one first digital data set and using the identified attributes to define policy dictating user access privileges. On receipt of a user request to access at least one second digital data set, semantic attributes are compared to the at least one first digital data set and access is allowed or not allowed based on the policy. Semantic attributes are selected from at least one of a closeness attribute, a relatedness attribute, and a semantic vector attribute. Also is taught configuring a policy enforcement agent on the one or more computing devices to undertake the comparing and to allow or not allow access. In turn, computer program products and computing systems for accomplishing the foregoing are provided.

Claims20

Dependent claims

In a computing system environment, a method for controlling access privileges to digital data available on one or more computing devices, comprising:

identifying one or more semantic attributes of at least one compressed first digital data set stored on the one or more computing devices, the one or more semantic attributes providing a high-level description of a content of the compressed first digital data set;
associating a policy dictating access privileges to the at least one compressed first digital data set with the identified one or more semantic attributes;
receiving a user request for access privileges to at least one compressed second digital data set stored on the one or more computing devices;
identifying one or more semantic attributes of the at least one compressed second digital data set;
comparing the identified one or more semantic attributes of the at least one compressed second digital data set to the identified one or more semantic attributes of the at least one compressed first digital data set to determine a semantic similarity between the first and second compressed digital data sets;
and
based on the comparing, enforcing the policy to allow or not allow the user access privileges to the at least one compressed second digital data set.

4 more elements

A computer program product available on a non-transitory computer readable medium for loading on a computing device in a computing system environment, the computer program product configured for controlling access privileges to digital data available on a same or a different computing device, comprising executable instructions for configuring a policy enforcement agent to operate on a processor of the said computing device to compare one or more semantic attributes providing a high-level description of a content of at least one compressed original digital data set to a corresponding one or more semantic attributes of at least one current compressed digital data set on the same or a different computing device, and by the policy enforcement agent to enforce a predetermined policy associated with the one or more semantic attributes of the at least one compressed original digital data set to allow or not allow a user request for access privileges to the at least one compressed current digital data set based on the comparing.

In a computing system environment, a method of controlling access to digital data available on one or more computing devices, comprising:

configuring a policy enforcement agent on the one or more computing devices;
selecting at least one compressed original file of digital data stored on the one or more computing devices, identifying at least one semantic attribute of the at least one compressed original file, the at least one semantic attribute providing a high-level description of a content of the at least one compressed original file, and storing said semantic template on one or more computing devices;
defining a policy dictating user access privileges to digital data and associating said policy with the at least one semantic attribute of the at least one compressed original file;
receiving a user request for access privileges to at least one compressed current file of digital data stored on the one or more computing devices;
by the policy enforcement agent, comparing at least one semantic attribute of the at least one compressed current file against the at least one semantic attribute of the at least one compressed original file to determine a semantic similarity between the at least one compressed current file and the at least one compressed original file;
and
based on the comparing, by the policy enforcement agent, enforcing the policy to allow or not allow the user access privileges to the at least one compressed current file.

4 more elements

Dependencies are inferred from the claim text.

Semantic controls on data storage and access

Life of this patent

Semantic controls on data storage and access

Life of this patent

Abstract

Claims20