Compliance processing of rights managed data
Performing compliance processing is disclosed. An indication is received that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the restriction. It is ensured that the content can be accessed without the restriction to perform the compliance processing.
1. A method of performing compliance processing, comprising:
receiving an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the access restriction; and
using a processor to process the content to ensure the content can be accessed without the access restriction to perform the compliance processing, wherein using the processor to ensure the content can be accessed without the access restriction still allows the access restriction to restrict the end-user recipient from accessing the content if the access restriction restricts the end-user recipient, wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes performing an at least partly automated negotiation between a first entity associated with the access restriction and a second entity associated with the compliance processing to obtain from the first entity access to the content by the second entity to enable the second entity to perform the compliance processing, and wherein the compliance processing could not be performed by the second entity without the access obtained through negotiation with the first entity.
2. A method as recited in claim 1 , wherein the first entity comprises a rights management system and the second entity comprises a compliance system.
3. A method as recited in claim 1 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes agreeing to enforce the access restriction with respect to the end-user recipient of the content.
4. A method as recited in claim 1 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes receiving a version of the content without the access restriction.
5. A method as recited in claim 4 , wherein the version comprises one of at least two versions of the content sent by a sender of the content, and the sender sends the content with the access restriction to the end-user recipient.
6. A method as recited in claim 4 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing further includes receiving one or more rules for accessing the content to be enforced with respect to the end-user recipient of the content, and enforcing the rules with respect to a forwarded version of the content sent to the end-user recipient.
7. A method as recited in claim 1 , wherein the indication is received prior to allowing the end-user recipient of the content to receive, access, or use the content.
8. A method as recited in claim 7 , wherein the end user is allowed to receive, access, or use the content when the content is determined to be compliant.
9. A method as recited in claim 1 , wherein the content is associated with a plurality of access keys, and at least one of the access keys can be used by a compliance system to access the content without the access restriction and another one of the keys can be used by the end-user recipient of the content to access the content subject to the access restriction.
10. A method as recited in claim 1 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes determining whether the content can be accessed without the access restriction to perform the compliance processing.
11. A method as recited in claim 10 , wherein if it is determined the content cannot be accessed without the access restriction, the content is blocked.
12. A method as recited in claim 10 , wherein determining whether the content can be accessed without the access restriction to perform the compliance processing includes determining one or more of the following: whether the content is encrypted, whether the content is controlled by rights management, whether the content is of a known type, whether the content is a restricted type, whether the sender of the content negotiates access to the content for compliance processing, whether a specified access key can be used to by pass an access restriction of the content, and whether an access restriction of the content can be passed for compliance processing.
13. A method as recited in claim 10 , wherein determining whether the content can be accessed without the access restriction to perform the compliance processing includes performing one or more of the following: examining a header associated with the content, measuring randomness of the data in the content to determine whether the content is encrypted, and analyzing a profile of the content.
14. A method as recited in claim 1 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes determining whether a previously received access key can be used to access the content.
15. A method as recited in claim 1 , wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes obtaining from a key server an access key that can be used to pass the access restriction.
16. A method as recited in claim 15 , wherein a sender of the content uses an encryption key obtained from the key server to encrypt the content for enforcement of the access restriction.
17. A method as recited in claim 1 , wherein the access restriction specifies one or more of the following: one or more users that can access the content, how the content can be used, and when the content can be accessed.
18. A method as recited in claim 1 , wherein the compliance processing includes performing one or more of the following: controlling the content, indexing the content, searching the content, archiving the content, retrieving the content, displaying the content, rendering the content, analyzing the content, scanning the content, analyzing the content to perform single instance store, analyzing the content for a virus or a malware, and verifying the content complies with one or more rules or regulatory restrictions.
19. A system for performing compliance processing, comprising:
a communication interface configured to receive an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the access restriction; and
a processor configured to process the content to ensure the content can be accessed without the access restriction to perform the compliance processing, wherein ensuring the content can be accessed without the access restriction still allows the access restriction to restrict the end-user recipient from accessing the content if the access restriction restricts the end-user recipient, wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes performing an at least partly automated negotiation between a first entity associated with the access restriction and a second entity associated with the compliance processing to obtain from the first entity access to the content by the second entity to enable the second entity to perform the compliance processing, and wherein the compliance processing could not be performed by the second entity without the access obtained through negotiation with the first entity.
20. A computer program product for performing compliance processing, the computer program product being embodied in a non-transitory computer readable medium and comprising computer instructions for:
receiving an indication that compliance processing is to be performed with respect to content that is subject to an access restriction that would prevent the compliance processing from being performed if the content were not able to be accessed without the access restriction; and processing the content to ensure the content can be accessed without the access restriction to perform the compliance processing, wherein ensuring the content can be accessed without the access restriction still allows the access restriction to restrict the end-user recipient from accessing the content if the access restriction restricts the end-user recipient, wherein ensuring the content can be accessed without the access restriction to perform the compliance processing includes performing an at least partly automated negotiation between a first entity associated with the access restriction and a second entity associated with the compliance processing to obtain from the first entity access to the content by the second entity to enable the second entity to perform the compliance processing, and wherein the compliance processing could not be performed by the second entity without the access obtained through negotiation with the first entity.