Multi-layer redaction policies in documents stored across a plurality of repositories
Provided are methods and systems for federated redaction of select content in documents stored across multiple repositories. With the presently disclosed technology, multi-layer redaction policies can be defined in either regular expression or with pattern matching. The redaction policies are associated with one or more document classes, and applied to the associated documents in substantially real-time. Further, document governance policies can be defined such that users of certain roles may view certain content in an unredacted form, despite the presence of a redaction policy for the document.
1. A system for redacting at least one asset field from at least one document stored in a document repository, the system comprising:
an application server for processing a plurality of documents, the application server further comprising:
a plurality of repository interfaces, each of the plurality of repository interfaces connecting to a different document repository of a plurality of document repositories and storing a plurality of documents, wherein the application server is configured to:
receive an instruction to retrieve a document stored in a document repository of the plurality of document repositories;
create a logical page in computer memory to recreate the document stored in the document repository;
determine a document class associated with the document stored in the document repository;
receive and apply a redaction policy from a user instructing selection of an arbitrary portion of the document; and
based on the associated document class, apply a plurality of redaction policies to the selected arbitrary portion of the document in the logical page in computer memory and the plurality redaction policies including at least one multi-layer redaction policy, the at least one multi-layer redaction policy including multi-layer access privilege that are defined to person or categories of persons that have permission to view certain unredacted content in the document, the certain unredacted content being based on previously specified types of content viewable by the person or categories of persons; and
an application client computing device in communication with the application server, the application client computing device configured to be utilized by a user to view a displayed redacted logical page on a graphical user interface of the application client computing device.
2. The system of claim 1 , wherein the plurality of redaction policies specify that a particular asset field of a document is to be hidden from view.
3. The system of claim 1 , wherein the plurality of redaction policies are created using regular expression.
4. The system of claim 1 , wherein the plurality of redaction policies are applied to the document in the logical page in computer memory based on pattern matching.
5. The system of claim 1 , wherein the document repository is internal to an organization.
6. The system of claim 1 , wherein the document repository is external to an organization.
7. The system of claim 1 , wherein the document stored in the document repository is in a file format that is capable of being converted into a .pdf file format.
8. The system of claim 1 , wherein the document stored in the document repository is in at least one of the following file formats: .bmp, .img, .png, .doc, .txt, .rtf, .xls, and .ppt.
9. A method for redacting at least one asset field from at least one document stored in a document repository, the method comprising:
receiving, at a processor of a computing server, an instruction to retrieve a document stored in a document repository;
creating a logical page in computer memory to recreate the document stored in the document repository, by the processor of the computing server;
determining a document class associated with the document stored in the document repository, by the processor of the computing server;
receive and apply a redaction policy from a user instructing selection of an arbitrary portion of the document;
based on the associated document class, applying a plurality of redaction policies to the selected arbitrary portion of the document in the logical page in computer memory, by the processor of the computing server, wherein the plurality of redaction policies specify that a particular asset field of a document is to be hidden from view and the plurality of redaction policies including at least one multi-layer redaction policy, the at least one multi-layer redaction policy including multi-layer access privilege that are defined to person or categories of persons that have permission to view certain unredacted content in the document, the certain unredacted content being based on previously specified types of content viewable by the person or categories of persons;
determining an identity of a user submitting the instruction to retrieve the document stored in the document repository;
determining an associated role for the user;
determining that the associated role is permitted to view content of the asset field for the applied plurality of redaction policies; and
displaying an unredacted version of the logical page to a user on a graphical user interface of a second computing device.
10. The method of claim 9 , wherein the plurality of redaction policies is created using regular expression.
11. The method of claim 9 , wherein the plurality of redaction policies are applied to the document in the logical page in computer memory based on pattern matching.
12. The method of claim 9 , wherein the document repository is internal to an organization.
13. The method of claim 9 , wherein the document repository is external to an organization.
14. The method of claim 9 , wherein the document stored in the document repository is in a file format that is capable of being converted into a .pdf file format.
15. A method for redacting at least one asset field from at least one document stored in a document repository, the method comprising:
receiving, at a processor of a computing server, an instruction to retrieve a document stored in a document repository;
creating a logical page in computer memory to recreate the document stored in the document repository, by the processor of the computing server;
determining a document class associated with the document stored in the document repository, by the processor of the computing server;
receive and apply a redaction policy from a user instructing selection of an arbitrary portion of the document;
based on the associated document class, applying a plurality of redaction policies to the selected arbitrary portion of the document in the logical page in computer memory, by the processor of the computing server, the plurality of redaction policies specifying that a particular asset field of a document is to be hidden from view and the plurality of redaction policies including at least one multi-layer redaction policy, the at least one multi-layer redaction policy including multi-layer access privilege that are defined to person or categories of persons that have permission to view certain unredacted content in the document, the certain unredacted content being based on previously specified types of content viewable by the person or categories of persons; and
displaying the redacted logical page to a user on a graphical user interface of a second computing device.
16. The method of claim 15 , wherein the plurality of redaction policies are created using regular expression.
17. The method of claim 15 , wherein the document repository is internal to an organization.
18. The method of claim 15 , wherein the document repository is external to an organization.
19. The method of claim 15 , wherein the document stored in the document repository is in a file format that is capable of being converted into a .pdf file format.
20. The method of claim 15 , wherein the document stored in the document repository is in at least one of the following file formats: .bmp, .img, .png, .doc, .txt, .rtf, .xls, and .ppt.
21. The system of claim 1 , wherein the multi-layer access privilege that are defined to person or categories of persons that have permission to view certain unredacted content in the document comprise:
low level of access privileges for a low access privilege person including permission to view certain types of unredacted content in the document but not other types of content in the document;
high level of access privileges for a high access privilege person including permission to view more types of unredacted content in the document compared with the low access privilege person.
22. The system of claim 21 ,
wherein the low level of access privileges for the low access privilege person includes permission to view mailing address in an unredacted form in the document but not a social security number in the document;
wherein the high level of access privileges for the high access privilege person includes permission to view a mailing address and a social security number in an unredacted form in the document.
23. The system of claim 1 , further comprising migrating a federated redaction policy to at least one local server of a particular software system.
24. The method of claim 9 , further comprising migrating a federated redaction policy to at least one local server of a particular software system.
25. The method of claim 15 , further comprising migrating a federated redaction policy to at least one local server of a particular software system.