IRM Service Automating DRM Policy Application
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage solutions face challenges in automatically applying digital rights management (DRM) policies to files, leading to potential unauthorized access and sharing of sensitive enterprise content, as users often find current DRM technologies cumbersome and thus avoid using them.
Innovation Solution
An information rights management (IRM) service associated with remote storage areas automatically applies DRM policies to files on client devices and during sharing, ensuring files are stored and shared with the appropriate security measures in place, using a content policy that specifies protection and sharing permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IRM or DRM technologies are applied to protect sensitive enterprise content, then data security is improved, but user interaction complexity increases making the process tedious and complicated
Solution Approach 1:
The system performs preliminary actions by automatically applying IRM/DRM policies to files during upload or storage operations, before the user needs to access or share the file. This pre-configuration of security measures eliminates the need for users to manually configure complex DRM settings when they need to protect sensitive content, thus maintaining security while reducing operational complexity.
Solution Approach 2:
The system enables self-service by allowing files to automatically receive appropriate IRM/DRM protection based on pre-defined policies associated with file types, folders, or users. The automation system independently determines and applies the correct security measures without requiring user intervention, making the security process as simple as regular file upload while ensuring reliable protection.
2Manufacturing precision
If manual user intervention is required to apply IRM or DRM policies, then policy application accuracy is improved, but productivity decreases due to additional user interaction required
Solution Approach 1:
The system incorporates feedback mechanisms where the automation system monitors file operations, user roles, and policy conditions to dynamically determine the appropriate IRM/DRM protection level. This feedback-driven approach ensures that the correct policies are automatically applied based on real-time system state, maintaining high policy application accuracy while eliminating manual intervention steps that would reduce productivity.
Solution Approach 2:
The system changes parameters such as file type, user role, and storage location to automatically determine which IRM/DRM policy should be applied. By using these parameter changes as triggers for automatic policy application, the system achieves both accurate policy enforcement (matching the right policy to the right file) and high productivity (automated process without manual steps).
Data Source
AI summary
Examples of the present disclosure relate to providing policy-protected file access. Some examples involve a configuration profile that includes a credential. The credential permits access to a policy-protected file. Once installed, the configuration profile causes the second credential to be accessible by a file management application of the client device, but inaccessible by a user of the client device. A file management application provides access to the policy-protected file based on the second credential.