| 摘要 |
A method includes (1) receiving a request to share a file stored on a secure network with a target, the request identifying the file and the target, (2) performing a location operation to determine whether the target belongs to the secure network, (3) when a result of the location evaluation operation indicates that the target does not belong to the secure network, performing a sensitivity evaluation operation to determine whether the file identified by the request includes sensitive information, and (4) performing an access control operation, the access control operation (i) rejecting the request when both (a) the result of the location evaluation operation indicates that the target does not belong to the secure network, and (b) a result of the sensitivity evaluation operation indicates that the file includes sensitive information, and (ii) otherwise causing a link to access the file to be provided to the target. |
| 主权项 |
1. A method of controlling access to data, the method comprising:
receiving, by processing circuitry, a request to share a file stored on a secure network with a target user, the request identifying the file and the target user; performing, by the processing circuitry, a location evaluation operation to determine whether the target user belongs to the secure network; when a result of the location evaluation operation indicates that the target user does not belong to the secure network, performing, by the processing circuitry, a sensitivity evaluation operation to determine whether the file identified by the request includes sensitive information; and performing, by the processing circuitry, an access control operation, the access control operation (i) rejecting the request when both (a) the result of the location evaluation operation indicates that the target user does not belong to the secure network, and (b) a result of the sensitivity evaluation operation indicates that the file includes sensitive information, and (ii) otherwise causing a link to access the file to be provided to the target user. |
