Patent ID: 6990492
Filing Date: 2006-01-24
Classification: G06F,Y10S

Abstract:
1. A method for controlling access to information on a computer system being accessible to a plurality of users, wherein the computer system has information including a plurality of data objects, the steps comprising: providing an access right for each user-object relationship between a user and a data object, wherein each user can have a plurality of relationships to each data object, wherein at least one user has a plurality of relationships with one data object, and wherein each access right comprises a security classification such that there is a respective security classification for each user-object relationship; obtaining a request from a user for information about a data object where the user has a plurality of relationships with the data object, each relationship defining a respective user-object relationship; finding the plurality of user-object relationships; determining the security classification for each user-object relationship; determining a security classification of the data object; granting the user access to the data object if a level of one of the security classifications for all the user-object relationships is greater than a level of the security classification of the data object; and denying the user access to the data object if the security classifications for all the user-object relationships are less than a level of the security classification of the data object.