Enterprise-oriented Digital Rights Management Mechanism: eDRM

It is impractical to use traditional access control mechanisms to design a digital content access control mechanism for an organization since even a role-based access control mechanism only guarantees that it can be flexibly applied to the determined access policy for various roles in an organization. It cannot allow users to flexibly define various access rights for different digital contents for diverse applications. To make sure these requirements can be satisfied and also combine the hierarchy structure of organization to the access control and thus protect digital content from being illegally duplicated, printed, deleted, noted, modified and stored, in this paper, we apply a digital certificate to record each user's role(s) and the corresponding access rights inherited from the access policies defined by the administration department in the organization.