Categorizing data to perform access control

摘要

At least one of data, an indication of the data, and metadata associated with the data is received at a first computing system, wherein the data is to be categorized. It is determined that at least part of the data is not to be categorized by the first computing system. In response to a determination that at least part of the data is not to be categorized by the first computing system, it is determined that a second computing system is indicated for categorization of the data and at least one of the data, an indication of the data, and the metadata associated with the data is transmitted from the first computing system to the second computing system.

主权项

1. A system for categorizing data to perform access control, the system comprising:
a first computing system configured to,
receive first data, the first data comprising at least one of a portion of data to be categorized and metadata associated with the data to be categorized;determine that the first data belongs to a first category;in response to determination that the first data belongs to a first category, apply a first access control policy to actions on the data to be categorized;determine that additional categorization of the data to be categorized is needed for one or more actions on the data to be categorized, wherein said making a determination that additional categorization of the data to be categorized is needed for the one or more actions comprises the first computing system being configured to at least one of,
determine that additional categorization of the data by the first computing system would take a length of time greater than a first threshold;determine that additional categorization of the data by the first computing system would use resources of the first computing system greater than a second threshold; anddetermine that the data is associated with a data type; andin response to a determination that additional categorization of the data to be categorized is needed for the one or more actions, issue a request for the second computing system to categorize second data, the second data comprising at least one of a portion of the data to be categorized and metadata associated with the data to be categorized; a second computing system coupled through a network with the first computing system,
the second computing system configured to,receive at least one of the second data and an indication of the second data;determine that the second data belongs to a second category;in response to a determination that the second data belongs to a second category, apply a second access control policy to at least one action of the one or more actions.