Using dynamic fields in sealed content
By Simon Thorpe on Aug 13, 2008
One very useful feature of information rights management technologies is the ability to place dynamic fields or watermarks into IRM-protected (sealed) content. If the end user accessing the sealed document has been assigned the rights to print, these dynamic watermarks ensure information about the end user, the document and the time of access are written into the printed copies. It is also a nice reminder to end users whilst content is open that the document is protected.
Note: Dynamic watermarks are different from conventional watermarks in that they can contain information about the end user, and the end user’s environment (e.g. the hostname of the computer on which the content is being opened). Conventional watermarks only contain information about the author of the content, not the end user.
Oracle IRM provides this functionality for PDF, Word and Excel documents and there are a variety of dynamic watermark fields that can be inserted. Note this functionality does not use the native watermarking functionality inside Word, Excel or Acrobat so the use of the word “watermarking” could be misleading. When the Oracle IRM Desktop renders a document it searches for a specific list of fields embedded in the document. These fields are typically included at creation-time from a document template. When it finds a watermark field it replaces the field contents, depending upon the title of the field. Therefore a field with the name, OracleIRM_User, will be replaced with the name of the currently authenticated user.
What follows is a list of available IRM watermark fields and a short description of their use:
OracleIRM_ClientIP: Local IP address of the computer accessing content.
OracleIRM_ClientVersion: Version number of the Oracle IRM Desktop.
OracleIRM_Context: IRM classification of the content.
OracleIRM_DefaultURL: URL to the status page shown when contact access is denied.
OracleIRM_FileName: Filename of the content being accessed.
OracleIRM_FilePath: Path to the file being accessed.
OracleIRM_HostName: Hostname of computer accessing content.
OracleIRM_ItemCode: Unique identifier of content.
OracleIRM_Language: Locale of computer.
OracleIRM_LicenceServerName: Name of the IRM service to which the content is sealed.
OracleIRM_Manufacturer: Name of vendor who created the IRM Desktop integration.
OracleIRM_MimeType: Unsealed MIME type.
OracleIRM_PrimaryServerURL: URL of the IRM service.
OracleIRM_PublicationTime: Trusted time and date the content was sealed.
OracleIRM_SealedBy: IRM user who sealed the content.
OracleIRM_Time: Trusted time at which the sealed content was opened.