Semantic controls on data storage and access

摘要

Methods and apparatus teach defining an access policy to digital data available on one or more computing devices, including identifying one or more semantic attributes of at least one first digital data set and using the identified attributes to define policy dictating user access privileges. On receipt of a user request to access at least one second digital data set, semantic attributes are compared to the at least one first digital data set and access is allowed or not allowed based on the policy. Semantic attributes are selected from at least one of a closeness attribute, a relatedness attribute, and a semantic vector attribute. Also is taught configuring a policy enforcement agent on the one or more computing devices to undertake the comparing and to allow or not allow access. In turn, computer program products and computing systems for accomplishing the foregoing are provided.

主权项

1. In a computing system environment, a method for controlling access privileges to digital data available on one or more computing devices, comprising:
identifying one or more semantic attributes of at least one compressed first digital data set stored on the one or more computing devices, the one or more semantic attributes providing a high-level description of a content of the compressed first digital data set; associating a policy dictating access privileges to the at least one compressed first digital data set with the identified one or more semantic attributes; receiving a user request for access privileges to at least one compressed second digital data set stored on the one or more computing devices; identifying one or more semantic attributes of the at least one compressed second digital data set; comparing the identified one or more semantic attributes of the at least one compressed second digital data set to the identified one or more semantic attributes of the at least one compressed first digital data set to determine a semantic similarity between the first and second compressed digital data sets; and based on the comparing, enforcing the policy to allow or not allow the user access privileges to the at least one compressed second digital data set.