Document Sensitivity Computing Program for Selective Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling access to electronic documents with unstructured data are inadequate as they fail to differentiate access rights based on specific end-users, leading to potential unauthorized use of sensitive information.
Innovation Solution
A document sensitivity computing program generates a value associated with an electronic document based on its content and the end-user attempting access, using structured data and access control lists to classify and manage access rights, enabling selective control and potential redaction or notification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive information is redacted using regular expressions or electronic dictionaries, then security is improved by preventing unauthorized access, but adaptability deteriorates because certain end-users cannot access the information they need
Solution Approach 1:
The patent segments the electronic document into multiple portions based on sensitivity levels and user roles. Different portions of the document are made accessible to different end-users based on their authorization levels, allowing selective access rather than complete redaction. This enables both security (by restricting access to sensitive portions) and adaptability (by allowing authorized users to access relevant information).
Solution Approach 2:
The patent implements dynamic access control where the visibility and accessibility of document portions change based on the identity and authorization level of the accessing end-user. The system dynamically determines which portions to redact and which to display, allowing the same document to be selectively accessed by different users without manual redaction adjustments.
2Reliability
If complete access control is implemented for all end-users, then security is improved, but ease of operation deteriorates due to complex access management
Solution Approach 1:
The patent performs preliminary classification of document portions into sensitivity levels before access occurs. Access control lists are pre-configured with user roles and corresponding access permissions. When an end-user accesses the document, the system automatically applies the pre-defined rules without requiring real-time complex decision-making, thereby maintaining security while simplifying operation.
Solution Approach 2:
The system automatically determines access rights by identifying the end-user and comparing their authorization level against pre-configured access control lists. The redaction and display of document portions occurs automatically without manual intervention, allowing the system to self-manage access control based on user identity and document sensitivity classifications.
Data Source
AI summary
A computer receives an electronic document that includes a group of terms. The computer sends the electronic document to an information extraction program that extracts specific terms from the group of terms. Each of the specific terms that match to a certain extent with one of the attribute values in an electronic dictionary is identified. A value associated with the electronic document is generated based on the specific terms that match, and on an end-user that is attempting to access the electronic document.