DATA DEPENDENT RESTRICTIONS
A method of controlling access to a digital resource of a group of digital resources, the method comprising: determining information sensitive features comprised in information contents of the resources for which access to the features are limited to a selection of users from a group of users associated with the group of resources; determining if contents of the digital resource comprise at least one of the information sensitive features; determining whether a user of the group of users has authorization to access at least a portion of the resource based on the at least one information sensitive feature; and enabling the user access only to the at least portion of the resource for which the user is determined to have authorization.
1 . A method of controlling access to a digital resource of a group of digital resources, the method comprising:
determining information sensitive features comprised in information contents of the resources for which access to the features are limited to a selection of users from a group of users associated with the group of resources;
determining if contents of the digital resource comprise at least one of the information sensitive features;
determining whether a user of the group of users has authorization to access at least a portion of the resource based on the at least one information sensitive feature; and
enabling the user access only to the at least portion of the resource for which the user is determined to have authorization.
2 . The method according to claim 1 and determining that the user does not have authorization to access at least a portion of the resource.
3 . The method according to claim 1 and determining that the user has authorization to access all of the resource.
4 . The method according to claim 1 wherein the at least a portion of the resource comprises only a portion of the resource.
5 . The method according to claim 4 and comprising masking or deleting that portion of the resource for which the user is determined not to have authorization access to provide a redacted resource.
6 . The method according to claim 5 wherein masking or deleting comprises modifying a renderer that renders the resource but not the resource as received by the renderer.
7 . The method according to claim 5 and enabling the user access to the redacted resource.
8 . The method according to claim 1 wherein determining authorization comprises determining a confidentiality level for each of the at least one information sensitive feature and using the confidentiality level to determine authorization.
9 . The method according to claim 8 and using an artificial intelligence to determine the confidentiality level.
10 . The method according to claim 1 wherein determining authorization comprises determining respective levels of clearance for the users in the group of users and using the clearance levels to determine authorization.
11 . The method according to claim 10 and using an artificial intelligence to determine the respective levels of clearance.
12 . The method according to claim 10 wherein determining authorization comprises determining a confidentiality level for each of the at least one information sensitive feature and determining authorization as a function of the confidentiality level for each of the at least one information sensitive feature and the clearance levels.
13 . The method according to claim 1 wherein determining authorization comprises teaching an artificial intelligence (AI) to determine authorizations for a plurality of users and a plurality of resources and using the AI to determine whether the user has authorization to access the at least portion of the resource
14 . The method according to claim 1 wherein the at least one information sensitive feature comprises a plurality of information sensitive features.
15 . The method according to claim 1 wherein and the at least one information sensitive feature comprises at least one information sensitive text feature.
16 . The method according to claim 1 wherein the at least one information sensitive feature comprises at least one information sensitive image feature.
17 . The method according to claim 1 wherein the at least one information sensitive feature comprises at least one information sensitive audio feature.
18 . The method according to claim 1 wherein the at least one information sensitive feature comprises at least one information sensitive video feature.
19 . A communications system for providing secure access to a digital resource of a group of digital resources accessible via a communications network, the system comprising:
a data processing hub accessible via an IP (internet protocol) address; and
a plurality of user equipment (UEs) useable to communicate via the communications network, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB);
wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub and the SWB comprises or has access to computer executable instructions executable by the SWB to carry out the method according to claim 1 .