International Business Machines Corporation

Hayato Kiriyama

Tomohiro Shioya

Tadashi Tsumura

Sanehiro Furuichi

Masami Tada

Taku Aratsu

Hideo Ichinomiya

Determining the content of access control to data based on classification results obtained by classifying data includes recording setting information that sets a plurality of classification engines for predetermined conditions related to either data or to the access to the data and acquiring data subject to access when access to the data subject to access is requested. Responsive to satisfaction of predetermined conditions related to either the data subject to the access or access to the data subject to access, classification of data subject to access by the plurality of classification engines set for predetermined conditions in the setting information is indicated using a processor. Further, using the processor, the content of access control to the data subject to access based on classification results obtained by the plurality of classification engines classifying data subject to access is determined based on the indicating classification of data.

Device and method for determining content of access control of data

A mechanism is provided for sensor sharing control dynamically. One or more sensor use permissions are received from one or more sensor provider terminals. For each sensor use permission, a sensor use permission is recorded in an authorization policy thereby forming a set of authorization policies. A use request is recorded for sensor use request information received from a sensor user terminal in a request policy. A search is performed for any authorization policy in the set of authorization policies that matches the request policy. Responsive to identifying the authorization policy that matches the request policy, a list of sensors included in the sensor use permissions of an authorization policy that matches the request policy is created. The list of sensors is transmitted to the sensor user terminal, where the search is performed again dynamically when the request policy or one of the set of authorization policies is changed.

Sensor sharing control

At least one of data, an indication of the data, and metadata associated with the data is received at a first computing system, wherein the data is to be categorized. It is determined that at least part of the data is not to be categorized by the first computing system. In response to a determination that at least part of the data is not to be categorized by the first computing system, it is determined that a second computing system is indicated for categorization of the data and at least one of the data, an indication of the data, and the metadata associated with the data is transmitted from the first computing system to the second computing system.

Categorizing data to perform access control

A sensitivity label for document information in a document may be determined in real time, according to one embodiment, by flexibly and dynamically determining a sensitivity label for the document based on content included in information within the document. Information within a document varies from day to day, for example, document information may decrease in importance with time, increase in importance due to an event, etc. Therefore, the sensitivity label of the document, according to embodiments described herein, may also change dynamically in accordance with document content, information, etc.

Growing community of inventors

Kawasaki, Japan

Hayato Kiriyama