Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Microsoft details new rights management technology

Stacy Cowley and Paul Roberts, IDG News Service   Today’s Top Stories    or  Other Security Stories  
 

Sign up to receive Security Resource Alerts

February 21, 2003 (IDG News Service) -- Microsoft Corp. said today that it is developing add-on security technology for its forthcoming Windows Server 2003 operating system software that will allow organizations to implement rights-management protections on corporate documents such as e-mail messages and data files.
The Windows Rights Management Services (RMS) will be able to enforce protection policies by controlling which users can access specific content and what access rights they are granted. Companies will, for example, be able to restrict content copying, forwarding and printing in applications such as portal, e-mail and word-processing software.
"What this really is about is having customers trust their platform more when they're using it to manage sensitive internal business information such as financial reports and business plans inside the organization," said Mike Nash, vice president of Microsoft's Security Business Unit.
The rights management features will be built into the Office 2003 versions of the Microsoft Word, Excel, PowerPoint and Outlook applications, according to Amy Carroll, group manager of Microsoft's Windows Trusted Platform Technologies group.
However, only users of Microsoft's most recent products will be able to fully take advantage of the technology. RMS relies on the proposed Extensible Rights Markup Language (XrML) standard, an XML-based language that is heavily backed by Microsoft but has yet to attract broad industry support. While Office 2003, Microsoft's Office update scheduled for mid-2003, supports XrML and will work with RMS, older versions of Microsoft Office, including the currently available Office XP, won't work with the technology.
Microsoft, however, will be developing application programming interfaces that will allow RMS-enabled documents to be viewed using the Microsoft Internet Explorer as well as any of Microsoft's supported operating systems, starting with Windows 98 Second Edition.
Beyond that, the company defended its choice of the new XrML standard.
"Despite being new, XrML is the richest and best developed of the rights management languages," said John Manferdelli, general manager of the Windows Trusted Platform Technologies group.
The XrML standard will allow Microsoft to extend its rights management technology to desktop applications and documents, as well as to the Web, according to Nash.
"At the end of the day, you need to make sure your platform can be more trustworthy. It's about enabling security ... and making people willing to be comfortable and to share broadly," Nash said.
RMS won't be available at Windows Server 2003's launch, which is slated for April. Instead, RMS will be entering beta in the second quarter, with no final release date announced, according to Microsoft. Pricing details are also still being determined, but the software will be sold as an add-on module.
Also in the second quarter, Microsoft will release two software kits to aid developers in building rights management functionality into their applications.
"Software development kits will make it easy to develop applications that use rights management consistently. We need to make sure that rights management can be used in a consistent way and can be applied across a broad set of applications," Nash said.
Microsoft is currently working on RMS with several hardware partners, independent software vendors and likely early-adopter customers, according to Stuart Okin, Microsoft U.K.'s chief security officer.
Microsoft is seeing particular interest in RMS from government customers and those in the pharmaceutical industry, Okin said. Organizations in those industries often have detailed security and access policies already in place and are eager to explore technical solutions for enforcing those procedures, he said.
Joris Evers, in Amsterdam, contributed to this report.


Reprinted with permission from

For more news from IDG visit IDG.net
Story copyright 2006 International Data Group. All rights reserved.


Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"A video is making the rounds showing how Vista SP1 has significantly improved Vista's immensely annoying User Account Control (UAC)...." Read more...
"So are you getting excited about a nice, long weekend for Memorial Day? Well, before you start cooking hot dogs..." Read more...
Read more Security posts or See all Blogs
Mozilla launches Firefox 3.0 RC1 early
Microsoft: Don't misunderstand UAC, other Vista features
HP confirms XP SP3 endless reboot snafu, promises patch
More top stories...
Microsoft pulls Windows Home Server backup feature
Yahoo tells Icahn that its own board knows best
Tools circulate that crack Debian, Ubuntu keys
Specialists have retrieved about 99% of the data on a disk drive on board the crashed space shuttle Columbia. Don't miss the photographs of the recovered drive.
These big ideas were supposed to revolutionize technology, but they never actually appeared. In a few cases, you'll be glad they didn't.
Nearly 20 years after the first Internet worm, Steven J. Vaughan-Nichols takes stock of the malware/anti-malware landscape and spotlights how the two sides are approaching the battle.
Though some thought it was released too soon, Mac OS X 10.5 has matured into a solid operating system, says reviewer Michael DeAgonia.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Why SaaS is Vital to Email and Web Security
Why SaaS is Vital to Email and Web Security
Download this webcast, free, compilments of Webroot Software
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Securing Financial Services Beyond the Perimeter
Intercept Spam & Viruses With MessageLabs
Meeting PCI Compliance with SonicWALL Global Management System
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo