Semantic controls on data storage and access
View Patent ↗Methods and apparatus teach defining an access policy to digital data available on one or more computing devices, including identifying one or more semantic attributes of at least one first digital data set and using the identified attributes to define policy dictating user access privileges. On receipt of a user request to access at least one second digital data set, semantic attributes are compared to the at least one first digital data set and access is allowed or not allowed based on the policy. Semantic attributes are selected from at least one of a closeness attribute, a relatedness attribute, and a semantic vector attribute. Also is taught configuring a policy enforcement agent on the one or more computing devices to undertake the comparing and to allow or not allow access. In turn, computer program products and computing systems for accomplishing the foregoing are provided.
1. In a computing system environment, a method for controlling access privileges to digital data available on one or more computing devices, comprising:
identifying one or more semantic attributes of at least one compressed first digital data set stored on the one or more computing devices, the one or more semantic attributes providing a high-level description of a content of the compressed first digital data set;
associating a policy dictating access privileges to the at least one compressed first digital data set with the identified one or more semantic attributes;
receiving a user request for access privileges to at least one compressed second digital data set stored on the one or more computing devices;
identifying one or more semantic attributes of the at least one compressed second digital data set;
comparing the identified one or more semantic attributes of the at least one compressed second digital data set to the identified one or more semantic attributes of the at least one compressed first digital data set to determine a semantic similarity between the first and second compressed digital data sets; and
based on the comparing, enforcing the policy to allow or not allow the user access privileges to the at least one compressed second digital data set.
2. The method of claim 1 , wherein the one or more semantic attributes of the at least one compressed first digital data set are selected from at least one of a closeness attribute determined by plotting a characteristic digital spectrum of the at least one compressed first digital data set in a multi-dimensional space, a relatedness attribute determined by identifying one or more highest-occurring symbols of the at least one compressed first digital data set, and a semantic vector attribute determined by mapping a state vector for the at least one compressed first digital data set in a multi-dimensional space.
3. The method of claim 1 , further including configuring a policy enforcement agent on the one or more computing devices to undertake the comparing and the allowing or not allowing.
4. The method of claim 1 , wherein the comparing occurs without a user request.
5. The method of claim 1 , further including storing the semantic attributes of the at least one first digital data set on a tangible computer readable medium.
6. The method of claim 1 , further including storing one or more outputted results of the step of comparing on a tangible computer readable medium.
7. The method of claim 1 , further including allowing an overriding of the policy dictating access to the at least one second digital data set.
8. A computer program product available on a non-transitory computer readable medium for loading on a computing device in a computing system environment, the computer program product configured for controlling access privileges to digital data available on a same or a different computing device, comprising executable instructions for configuring a policy enforcement agent to operate on a processor of the said computing device to compare one or more semantic attributes providing a high-level description of a content of at least one compressed original digital data set to a corresponding one or more semantic attributes of at least one current compressed digital data set on the same or a different computing device, and by the policy enforcement agent to enforce a predetermined policy associated with the one or more semantic attributes of the at least one compressed original digital data set to allow or not allow a user request for access privileges to the at least one compressed current digital data set based on the comparing.
9. The computer program product of claim 8 , wherein the at least one semantic attribute of the at least one compressed original digital data set is selected from one or more of a closeness attribute determined by plotting a characteristic digital spectrum of the at least one compressed original digital data set in a multi-dimensional space, a relatedness attribute determined by identifying one or more highest-occurring symbols of the at least one compressed original digital data set, and a semantic vector attribute determined by mapping a state vector for the at least one compressed original digital data set in a multi-dimensional space.
10. The computer program product of claim 8 , further including executable computer readable instructions for receiving a user request for access to the at least one current digital data set and for configuring the comparing without any further input of the user.
11. The computer program product of claim 8 , further including executable computer readable instructions for storing the at least one semantic attribute of the at least one original digital data set on a tangible computer readable medium.
12. The computer program product of claim 8 , further including executable computer readable instructions for storing outputted results of the comparing on a tangible computer readable medium.
13. The computer program product of claim 8 , further including executable computer readable instructions for storing policy enforcement actions taken by the policy enforcement agent.
14. The computer program product of claim 8 , wherein the at least one semantic attribute is maintained for less than the full original digital data set.
15. In a computing system environment, a method of controlling access to digital data available on one or more computing devices, comprising:
configuring a policy enforcement agent on the one or more computing devices;
selecting at least one compressed original file of digital data stored on the one or more computing devices, identifying at least one semantic attribute of the at least one compressed original file, the at least one semantic attribute providing a high-level description of a content of the at least one compressed original file, and storing said semantic template on one or more computing devices;
defining a policy dictating user access privileges to digital data and associating said policy with the at least one semantic attribute of the at least one compressed original file;
receiving a user request for access privileges to at least one compressed current file of digital data stored on the one or more computing devices;
by the policy enforcement agent, comparing at least one semantic attribute of the at least one compressed current file against the at least one semantic attribute of the at least one compressed original file to determine a semantic similarity between the at least one compressed current file and the at least one compressed original file; and
based on the comparing, by the policy enforcement agent, enforcing the policy to allow or not allow the user access privileges to the at least one compressed current file.
16. The method of claim 15 , wherein the at least one semantic attribute of the at least one compressed original file is selected from at least one of a closeness attribute determined by plotting a characteristic digital spectrum of the at least one compressed original file in a multi-dimensional space, a relatedness attribute determined by identifying one or more highest-occurring symbols of the at least one compressed original file, and a semantic vector attribute determined by mapping a state vector for the at least one compressed original file in a multi-dimensional space.
17. The method of claim 15 , wherein the comparing occurs without a user request.
18. The method of claim 15 , further including storing the at least one semantic attribute of the at least one original file on a tangible computer readable medium.
19. The method of claim 15 , further including storing one or more outputted results of the step of comparing on a tangible computer readable medium.
20. The method of claim 15 , further including allowing an overriding of the policy dictating access to the at least one current file.