| 摘要 |
A method of controlling access to data comprises: <SL> <LI>a) wrapping data content and at least one information control flow policy in a software wrapper 22; <LI>b) interrogating a second platform for compliance with a trusted platform specification 24; <LI>c) on successful interrogation of the second platform 26a, sending the software wrapper to the second platform; <LI>d) unwrapping the wrapped data content within the trusted environment on the second platform for use. </SL> Furthermore the information flow control policy may control how the data is subsequently used (e.g. sending, printing, saving, copying, displaying, deleting etc.) on the second platform. In one embodiment the information flow control policy may be communicated to the operating system of the second platform 34. In a second embodiment a software wrapper is described which comprises a header section, a data content, a key record section and includes at least one information flow control policy.
|
