Sharing data between distributed computer systems that use different classification schemes for data access control

摘要

A replication system comprises a group of databases which share data, the databases use different classification schemes for data access control and the sharing of data includes translating classifications markings during import and export of data. The invention uses the concept of origin classification, this represents a classification as it appeared in a database of the replication group when the classification was exported from that database. Origin classification is used within the replication system to facilitate translation of classification markings (e.g. top secret (TS), secret (S), confidential (C), restricted (R), unclassified (U)) between peer databases that use different classification schemes. The access control list may contain group-based or role based access control.