Secure data access

A computer program product for providing secure data access, the computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
• computer readable program code configured to determine that a file has been created or received;
• computer readable program code configured to determine a fingerprint of the file, wherein the fingerprint is a record of a structure, a content, and communication channels of the file at a first point in time for comparison to the file at a later point in time;
• computer readable program code configured to scan the file to identify keywords and data types;
• computer readable program code configured to automatically assign at least one permitted use related to the file based on the identified keywords and data types, wherein the permitted uses comprises a permitted user and a permitted action;
• computer readable program code configured to store the fingerprint and the permitted use in association with the file;
• computer readable program code configured to determine that the file is being accessed by a user;
• computer readable program code configured to determine whether the user is a permitted user of the file based on an identity of the user;
• computer readable program code configured to transmit an alert to a creator of the file when the user is not a permitted user, wherein the alert notifies the creator of the file that the user is not a permitted user;
• computer readable program code configured to compare the file at the later point in time to the fingerprint of the file when the user is a permitted user, wherein the comparison of the file to the associated fingerprint of the file excludes dynamic metadata, and wherein dynamic metadata comprises descriptive data of the file that regularly changes but does not change content of the file;
• computer readable program code configured to determine a level of confidence of matching for the comparison of the file at the later point in time and the fingerprint;
• computer readable program code configured to determine that the file at the later point in time is in compliance with the fingerprint by determining that the threshold level of confidence is above a predetermined level of confidence;
• computer readable program code configured to determine an action being taken by the user, in response to determining that the file at the later point in time is in compliance with the fingerprint;
• and
• computer readable program code configured to permit the action to occur when the action is a permitted action of the file.

A computer-implemented method for providing secure data access, the method comprising:

• determining, via a computing device processor, that a file has been created or received;
• determining, via a computing device processor, a fingerprint of the file, wherein the fingerprint is a record of a structure, a content, and communication channels of the file at a first point in time for comparison to the file at a later point in time;
• scanning, via a computing device processor, the file to identify keywords and data types;
• automatically assign, via a computing device processor, at least one permitted use related to the file based on the identified keywords and data types, wherein the permitted uses comprises a permitted user and a permitted action;
• storing, in a database, the fingerprint and the permitted use in association with the file;
• determining, via a computing device processor, that the file is being accessed by a user;
• determining, via a computing device processor, whether the user is a permitted user of the file based on an identity of the user;
• transmitting, via a computing device processor, an alert to a creator of the file when the user is not a permitted user, wherein the alert notifies the creator of the file that the user is not a permitted user;
• comparing, via a computing device processor, the file at the later point in time to the fingerprint of the file when the user is a permitted user, wherein the comparison of the file to the associated fingerprint of the file excludes dynamic metadata, and wherein dynamic metadata comprises descriptive data of the file that regularly changes but does not change content of the file;
• determining, via a computing device processor, a level of confidence of matching for the comparison of the file at the later point in time and the fingerprint;
• determining, via a computing device processor, that the file at the later point in time is in compliance with the fingerprint by determining that the level of confidence is above a predetermined threshold level of confidence;
• determining, via a computing device processor, an action being taken by the user, in response to determining that the file at the later point in time is in compliance with the fingerprint;
• and
• permitting the action to occur when the action is a permitted action of the file.