Assured federated records management
View Patent ↗A record is managed by obtaining from an external system on which a stored object comprising the record is stored a property of the stored object as stored on the external system. A stored property associated with the record is compared with the obtained property of the stored object. In the event the comparison does not match, responsive action is taken.
1. A method for managing a record, comprising:
generating, at a management system, a proxy object for an object stored at an external system;
selecting, based at least in part on a protection or compliance policy, one or more properties that are derived based at least in part on properties associated with the object, wherein the selected properties permit detection of violations of the protection or compliance policy and comprise a minimum or a smallest set of information that is sufficient to detect violations of the protection or compliance policy;
storing, in the proxy object, the selected one or more properties;
storing, in the proxy object, a location of the object at the external system;
performing an integrity check on the proxy object, including by:
accessing, based at least in part on the location stored in the proxy object, the properties associated with the object at the external system;
comparing, using a processor, the properties associated with the object at the external system with the one or more properties stored in the proxy object;
determining whether the one or more properties stored in the proxy object match the properties associated with the object; and
in the event that the one or more properties stored in the proxy object do not match the properties associated with the object, taking responsive action that includes presenting via a user interface an indication that the object at the external system is compromised; and
wherein the record is included in a plurality of records and the integrity check is performed in connection with an integrity checking process that includes:
selecting from the plurality of records a first subset of records to be processed, wherein any exceptions detected in the first subset of records are written to a first exception log; and
selecting from the plurality of records a second subset of records to be processed, wherein any exceptions detected in the second subset of records are written to a second exception log.
2. The method of claim 1 , wherein the one or more stored properties are included in a set of record data configured to represent the stored object in a records management system configured to manage the record.
3. The method of claim 1 , wherein the external system is a system other than a records management system on which the record is located.
4. The method of claim 1 , wherein the external system is not able to be configured to render the stored object immutable on the external system.
5. The method of claim 1 , wherein a first record is associated with a first stored object that is associated with a first application and a second proxy object is associated with a second stored object that is associated with a second application.
6. The method of claim 1 , wherein a first record is associated with a first stored object on a first external system and a second record is associated with a second stored object on a second external system.
7. The method of claim 1 , wherein the first subset of records and/or the second subset of records includes the plurality of records.
8. The method of claim 1 , wherein selecting the second subset of records includes selecting from records that are not selected during selection of the first subset of records.
9. The method of claim 1 further comprising:
obtaining a schedule or frequency associated with processing a plurality of proxy objects;
using the obtained schedule or frequency to determine a first date and/or time at which to process the first subset of records, wherein the first exception log includes the first date and/or time; and
using the obtained schedule or frequency to determine a second date and/or time at which to process the second subset of records, wherein the second exception log includes the second date and/or time.
10. The method of claim 9 further comprising:
displaying at least the first date and/or time with an exception indicator in the event the first exception log contains at least one exception or a no-exception indicator in the event the first exception log contains no exceptions; and
displaying at least the second date and/or time with an exception indicator in the event the second exception log contains at least one exception or a no-exception indicator in the event the second exception log contains no exceptions.
11. The method of claim 10 further comprising:
receiving an indication associated with displaying the first subset of records associated with the first exception log; and
in response to the indication, displaying the first subset of records.
12. The method of claim 11 further comprising:
receiving a second indication associated with displaying exception log(s) in which a selected record from the first subset of records was processed; and
in response to the second indication, displaying information associated with the exception log(s) in which the selected record was processed.
13. The method of claim 1 , wherein the one or more stored properties include at least one of the following: a hash of the contents of the stored object, a permission associated with reading, a permission associated with writing or a permission associated with executing.
14. The method of claim 1 further comprising:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the name of the property for which the content of the object at the external system and the property stored in the proxy object do not match.
15. The method of claim 1 further comprising:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the content of the object at the external system and the property stored in the proxy object.
16. A system for managing a record, comprising:
a communication interface configured to:
generate, at a management system, a proxy object for an object stored at an external system;
select, based at least in part on a protection or compliance policy, one or more properties that are derived based at least in part on properties associated with the object, wherein the selected properties permit detection of violations of the protection or compliance policy and comprise a minimum or a smallest set of information that is sufficient to detect violations of the protection or compliance policy;
store, in the proxy object, the selected one or more properties;
store, in the proxy object, a location of the object at the external system;
perform an integrity check on the proxy object, including by:
accessing, based at least in part on the location stored in the proxy object, the properties associated with the object at the external system;
comparing, using a processor, the properties associated with the object at the external system with the one or more properties stored in the proxy object;
determining whether the one or more properties stored in the proxy object match the properties associated with the object; and
in the event that the one or more properties stored in the proxy object do not match the properties associated with the object, taking responsive action that includes presenting via a user interface an indication that the object at the external system is compromised; and
wherein the record is included in a plurality of records and the integrity check is performed in connection with an integrity checking process that includes:
selecting from the plurality of records a first subset of records to be processed, wherein any exceptions detected in the first subset of records are written to a first exception log; and
selecting from the plurality of records a second subset of records to be processed, wherein any exceptions detected in the second subset of records are written to a second exception log.
17. The system of claim 16 , wherein the one or more stored properties include at least one of the following: a hash of the contents of the stored object, a permission associated with reading, a permission associated with writing or a permission associated with executing.
18. The system of claim 16 , wherein the processor is further configured to:
receive an indication to display more information; and
in response to receiving the indication, present via the user interface the name of the property for which the content of the object at the external system and the property stored in the proxy object do not match.
19. The system of claim 16 , wherein the processor is further configured to:
receive an indication to display more information; and
in response to receiving the indication, present via the user interface the content of the object at the external system and the property stored in the proxy object.
20. A computer program product for managing a record, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
generating, at a management system, a proxy object for an object stored at an external system;
selecting, based at least in part on a protection or compliance policy, one or more properties that are derived based at least in part on properties associated with the object, wherein the selected properties permit detection of violations of the protection or compliance policy and comprise a minimum or a smallest set of information that is sufficient to detect violations of the protection or compliance policy;
storing, in the proxy object, the selected one or more properties;
storing, in the proxy object, a location of the object at the external system;
performing an integrity check on the proxy object, including by:
accessing, based at least in part on the location stored in the proxy object, the properties associated with the object at the external system;
comparing, using a processor, the properties associated with the object at the external system with the one or more properties stored in the proxy object;
determining whether the one or more properties stored in the proxy object match the properties associated with the object; and
in the event that the one or more properties stored in the proxy object do not match the properties associated with the object, taking responsive action that includes presenting via a user interface an indication that the object at the external system is compromised; and
wherein the record is included in a plurality of records and the integrity check is performed in connection with an integrity checking process that includes:
selecting from the plurality of records a first subset of records to be processed, wherein any exceptions detected in the first subset of records are written to a first exception log; and
selecting from the plurality of records a second subset of records to be processed, wherein any exceptions detected in the second subset of records are written to a second exception log.
21. The computer program product of claim 20 , wherein the one or more stored properties include at least one of the following: a hash of the contents of the stored object, a permission associated with reading, a permission associated with writing or a permission associated with executing.
22. The computer program product of claim 20 further comprising computer instructions for:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the name of the property for which the content of the object at the external system and the property stored in the proxy object do not match.
23. The computer program product of claim 20 further comprising computer instructions for:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the content of the object at the external system and the property stored in the proxy object.