Method for providing information security protocols to an electronic

Abstract

A method of controlling the unauthorized disclosure of classified data that is used to describe an event that has been calendared in an electronic calendaring application of an interactive information handling system in which the calendar owner assigns a security classification to an event as it is being calendared. The classification assigned is pre-established by an information security protocol that is either unique to the calendar function or a more comprehensive information security system for the organization. The security classes are pre-established by the system. When the calendar data is presented in a format that allows event descriptions to be readable such as when a day calendar is viewable on the display terminal or in a printed copy, an overall security lable is displayed and printed out when the display is converted to hard copy. The period covered by the security label generally corresponds to the period that is selected for viewing. The security classification displayed is the highest security class of any of the event descriptions that are displayed. Data structures are established for each calendar entry which store the data in the system. These data structures are scanned to determine the overall classification that is displayed for the day calendar. Since a readable security classification label is automatically applied, regardless of whether the calendar presentation is on the display screen or in hard copy, all of the requirements of the established information security system are met and the electronic calendaring application need not be treated as an exception to the information security system. The method allows each calendar user on the system that has an assigned permission level to view classified event descriptions at or below his or her assigned security level with a security label automatically displayed or printed.