Transcript EMC Documentum Information Rights Management

EMC Documentum Information
Rights Management
EMC Content Management and Archiving
© Copyright 2007 EMC Corporation. All rights reserved.
1
IRM Server Key and Policy Management
Desktop Integration
 Content is always encrypted
 The keys are always separated from the content
 The local key is destroyed after use
Workflow Integrations
Content Owner
File Share
+
Policy
+
Policy
EMC Documentum Repository
IRM Policy
Server
EMC Documentum eRoom
© Copyright 2007 EMC Corporation. All rights reserved.
2
EMC Documentum IRM Workflow
Secure Data Sharing
Partner
Network
Author
Partner
Corporate
VPN
Network
Internet
Review
Hacker
Content
Server
© Copyright 2007 EMC Corporation. All rights reserved.
IRM Policy
Server
3
Industry Use Examples for IRM
 Manufacturing
– Sharing of new product specifications,
planning, R&D, and pricing documents
 Government
– Share information on a need-to-know basis
within intelligence community
 Healthcare
– Communications with business associates
– Control of PHI dissemination
 Financial and Legal Services
–
–
–
–
On-line mergers and acquisitions
Protect customer data
High value research circulation control
Secure distribution of bills of lading
© Copyright 2007 EMC Corporation. All rights reserved.
4
Customer Case Study
Large Global Energy Supplier
Requirements
 Protect highly valuable financial information shared as PDF and Office files
 Leverage existing SharePoint and Documentum systems wherever possible
 Prevent external access to documents that might be emailed or otherwise
distributed outside of collaboration system or repository
IRM Solution
 IRM policies were specified and mapped to existing corporate policies for
information distribution. These policies govern which after-delivery controls
(e.g. print, copy/paste, offline access rights) apply to which documents.
 Initially, confidential documents were protected using a manual batch process
and uploaded to internal SharePoint sites
 Now, end users can manually add files to a Documentum cabinet or folder and
have IRM policies applied automatically

A single access control list (ACL) governs who can access a document

A single retention policy governs expiration and deletion
© Copyright 2007 EMC Corporation. All rights reserved.
5
Customer Case Study
Global Energy Infrastructure & Construction Firm
Requirements
 Prevent unauthorized access to project documents distributed via email
 Require multiple level of access and rights depending on group membership
 Must be easy to mechanical engineers and project managers to use
IRM Solution
 Document owners protect documents directly from Adobe Acrobat and
distributes through portal
 No access outside of current insider list
 Username watermark raises the bar on re-distribution of printed copies
© Copyright 2007 EMC Corporation. All rights reserved.
6
Global Shipping Firm
Requirements
 Provide a web-based mechanism for authorized global customers to
download and print Bills of Lading
 Prevent users from saving copies of files locally or printing additional
copies
IRM Solution
 PDF files generated from database queries
 IRM Server Management API protects PDF and applies the IRM policy
to the file automatically without end-user intervention
 IRM Server Extension API reports on print operations; the permission
to toggled in business database based on document state
© Copyright 2007 EMC Corporation. All rights reserved.
7
Questions
© Copyright 2007 EMC Corporation. All rights reserved.
8