Content Management System Policy Manager for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Information Rights Management (IRM) systems are 'lightweight' and unaware of the content source, leading to inconsistent access control and updates across different systems, as they are typically separately integrated from Content Management Systems (CMS), resulting in unauthorized access to documents even after user status changes.
Innovation Solution
Integrating a CMS with IRM systems to centrally manage access policies and permissions, ensuring that all content copies are secured and updated in real-time, regardless of location, by using a content management system as the 'true owner' of artifacts, which enforces access controls through sealing policies and licenses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If lightweight IRM systems are used independently of CMS, then system complexity is reduced and ease of operation is improved, but access control reliability deteriorates and unauthorized access occurs
Solution Approach 1:
The patent merges IRM functionality with CMS by implementing a policy manager within the CMS that integrates access control policies directly into the content management system. This integration ensures that IRM policies are automatically applied to all content without requiring separate lightweight IRM systems, thereby maintaining ease of operation while improving access control reliability through unified management.
Solution Approach 2:
The CMS is enhanced to perform multiple functions including content management, access control policy enforcement, and rights management. The policy manager enables the CMS to universally handle both content operations and security policies, eliminating the need for separate specialized systems and ensuring consistent access control across all content regardless of location.
2Device complexity
If CMS and IRM systems are separately integrated, then device complexity is reduced, but access control reliability deteriorates due to inconsistent updates
Solution Approach 1:
The patent combines CMS and IRM functions into a unified system where the policy manager is an integral component of the CMS. This merging ensures that access control policies are automatically updated and applied in real-time as content is created, modified, or accessed, eliminating the inconsistencies that arise from separate system integrations while maintaining manageable system complexity.
Solution Approach 2:
The policy manager implements continuous feedback mechanisms that monitor content lifecycle events and automatically adjust access control policies accordingly. When content is created, modified, or accessed, the system receives feedback and updates permissions in real-time, ensuring consistent and reliable access control without requiring complex separate integration systems.
3Device complexity
If manual administration is used for access policies, then device complexity is reduced, but productivity deteriorates due to time-consuming updates
Solution Approach 1:
The policy manager enables the CMS to automatically manage access control policies without requiring manual administration. The system self-service functionality includes automatic policy application to new content, real-time permission updates based on user status changes, and automated enforcement of access rights, thereby significantly improving productivity while maintaining relatively simple system architecture.
Solution Approach 2:
The system performs preliminary actions by pre-defining access control policies and permissions that are automatically applied when content is created or when user status changes occur. This preliminary configuration eliminates the need for manual policy creation and update during operation, improving productivity while keeping the system architecture simple and manageable.
Data Source
AI summary
Systems, methods and apparatuses (i.e., utilities) for use in managing access to and use of artifacts (e.g., word or pdf documents, jpegs, and the like) and any copies thereof in an enterprise/cross-enterprise environment. The utility may include a content management system for storing the artifacts and managing use of the artifacts and an information rights management system for use in sealing the artifacts, validating users and granting licenses for use of the artifacts at the directive of the content management system.