Method and apparatus for automatically administrating access rights for confidential information

摘要

A method and apparatus for automatically administrating access rights for confidential information is disclosure. In one embodiment, access rights are established for at least one user group. Each user group is identified by at least one authentication attribute. In response to verification information from a user requesting access to the confidential information that is stored at a, the verification information is compared with the at least one attribute for the each user group to generate a comparison result. Access to the confidential information by a second computerized device is controlled based on the comparison result and the access rights.

主权项

1. A computer implemented method for administering access to one or more documents in accordance with an access rights policy, comprising:
responsive to an initial attempt, by a user of a remote computerized device, to access a document containing information subject to restrictions on access for a finite time period, determining whether the time period has expired; if the finite time period has expired, granting access for the user to view the document at the remote computerized device; and if the time period has not yet expired,
treating the user initially as an unprovisioned user by prompting the user to enter an email address;determining whether a domain specified in the entered email address corresponds to a group of users entitled to access the document from a remote computerized device; andif the domain specified does correspond to a group of users entitled to access the document from a remote computerized device,
granting access for the user to view the document at the remote computerized device; andthereafter treating the user as a provisioned user by automatically granting the user, without prompting, subsequent access to the document and any other document subject to restrictions on access according to the access rights policy.