System and method for managing collaboration in a networked secure exchange environment

• US 10,013,566 B2
• Filed: 12/16/2016
• Issued: 07/03/2018
• Est. Priority Date: 04/27/2012
• Status: Active Grant

• Current Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Original Assignee: IntraLinks Incorporated (SS&C Technologies Holdings Incorporated)
• Inventors: Meyer, Jerry Lee, Velamoor, Sudhakar, Hakhinian, Mushegh
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US15/382,452
• Publication Number:
  US 20170091466A1
• Time in Patent Office: 564 Days
• Field of Search: 726 28, 726 4, 726 29, 726 7
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security

Abstract

In embodiments of the present invention improved capabilities are described for securely viewing computer data content, such as documents, presentations, spreadsheets, emails, blog entries, texts, and the like, wherein a secure exchange server is controlled by an intermediate business entity, and access to retention restricted computer data content is granted to a user of a second business entity when the secure exchange server receives appropriate login authentication data, wherein the retention restricted computer data content is accessible to the at least one user of the second business entity as limited by the content retention restriction, which is provided by a user of a third business entity.

Claims

1. A method comprising:

receiving, by a server-based content management facility, a computer data content and an indication of permission from a client computing device across a computer network, wherein the indication of permission restricts access to the computer data content to a designated mobile computing device through a content retention policy;

storing, by a server-based content management facility, the computer data content and the indication of permission;

granting access, by the content management facility, to the computer data content to the designated mobile computing device through a secure viewing facility provided by the content management facility; and

restricting viewing, through the secure viewing facility, of the computer data content as presented by the designated mobile computing device to only an authenticated designated mobile computing device, wherein the granted access is in accordance with the content retention policy;

wherein the secure viewing facility;

authenticates permission to view the computer data content via face recognition using a camera integrated in the designated mobile computing device; and

reacts to eye gaze direction by blocking the computer data from view if the user looks away from the designated mobile computing device.

2. The method of claim 1, wherein the designated mobile computing device is at least one of a smart phone, a tablet computing device, and a laptop computer.

3. The method of claim 1, wherein the computer data content is downloaded to the designated mobile computing device once access is granted.

4. The method of claim 3, wherein the computer data content is permitted to be viewed when there is no connection between the designated mobile computing device and the server-based content management facility.

5. The method of claim 3, wherein the downloaded computer data content is restricted from being printed.

6. The method of claim 3, wherein the downloaded computer data content is restricted from being copied.

7. The method of claim 3, wherein the downloaded computer data content can only be accessed by the secure viewing facility.

8. The method of claim 3, wherein the downloaded computer data content is modified and transmitted to the server-based content management facility.

9. The method of claim 8, wherein the modified computer data content is indicated as having been modified in metadata stored in or associated with the computer data content.

10. The method of claim 1, wherein the granting of access is limited to access of only the current version of the computer data content.

11. The method of claim 1, wherein the secure viewing facility tracks viewing of the computer data content.

12. The method of claim 11, wherein the tracked viewing is reported to the server-based content management facility.

13. The method of claim 1, wherein the secure viewing facility authenticates permission to view the computer data content via face recognition using a sensor.

14. The method of claim 13, wherein the sensor is an integrated sensor and is a biometric sensor.

15. The method of claim 1, wherein the secure viewing facility restricts viewing by distorting those portions of the computer data content not selected for viewing.

16. The method of claim 1, wherein the content retention policy is associated with an offer of conditional retention restriction, wherein access to the content is removed when an offer condition is not met.

17. The method of claim 1, wherein the content retention policy sets a duration of time for access to the content.

18. The method of claim 1, wherein the content retention policy at least one of printing, copying, and sharing the content.

19. The method of claim 1, wherein the content retention policy restricts storing the content to at least one specified computer device.