Microsoft tightens up rights management

Microsoft has used the InfoSec Europe event to release the first service packs for its Rights Management Services software.

The code, as part of Windows Server 2003, allows enterprises to control and monitor the distribution of documents. The service pack includes support for two-factor authentication, and allows the rights management software to work outside the corporate network.

It is built around the concept of enterprise rights management. This embeds code into documents which communicate with a central server to decide who can read, change or email the material.

"The code gives you complete control over your data," said Piyush Lumba, senior product manager at Microsoft's Security Business Technology Unit.

"Who can read it, what they did with it and who it was sent to can all be controlled. You can even record unsuccessful attempts to access the information."

The software is available for download from the Microsoft website (see link below).

"Rights management is going to be a solid growth area next year," said Stuart Okin, a partner at Accenture and former Microsoft head of security.

"We are seeing pilot schemes in enterprises at the moment. Those, if successful, will be expanded across enterprises so that managers will have fine control of their data."