Dynamic, temporary data access token

• US 10,068,102 B2
• Filed: 06/05/2012
• Issued: 09/04/2018
• Est. Priority Date: 06/28/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chakra, Al, Li, Yongcheng, Wu, Yuping Connie
• Primary Examiner(s): Shaw, Brian F
• Application Number:
  US13/488,845
• Publication Number:
  US 20120246710A1
• Time in Patent Office: 2,282 Days
• Field of Search: 726 9, 726 7, 726 8, 726 28, 370 42, 370250, 370342, 370450, 713200, 713171
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

Provided are techniques for generating a temporary data access token for a subset of data for a specific period of time for a non-registered user who did not register with a computer providing access to the subset of the data. In response to the non-registered user attempting to access the subset of data with the temporary data access token, it is determined whether the temporary data access token is valid for the subset of data based on the specified period of time. In response to the temporary data access token being valid, the subset of data is provided to the non-registered user. In response to the temporary data access token not being valid, access is denied to the subset of data by the non-registered user.

Claims

1. A method implemented in a software application of a computer, the software application comprising a plurality of application components, the method comprising:

sending, using a hardware processor of the computer, a configuration policy of a temporary data access token to a registered user, wherein the configuration policy allows access to a first portion of data without allowing access to a second portion of the data, and wherein at least one of the first portion of the data and the second portion of the data is comprised of one or more of the plurality of application components; and

receiving, using the hardware processor of the computer, an updated configuration policy from the registered user to allow access to the second portion of the data without allowing access to the first portion of the data, and

wherein a non-registered user utilizing the temporary data access token associated with the updated configuration policy is denied access to the first portion of the data and allowed access to the second portion of the data by a software other than the software application.

2. The method of claim 1, wherein the registered user assigns the temporary data access token to the non-registered user.

3. The method of claim 1, wherein the temporary data access token enables any of data viewing and data editing.

4. The method of claim 1, wherein the data comprises a plurality of portions comprising data segments.

5. The method of claim 1, wherein the temporary data access token is generated using the hardware processor of the computer.

6. A computer, comprising:

a hardware processor; and

storage coupled to the hardware processor, wherein the storage stores a software application comprising a plurality of application components, and wherein the hardware processor is configured to execute the software application to perform operations, wherein the operations comprise;

sending a configuration policy of a temporary data access token to a registered user, wherein the configuration policy allows access to a first portion of data without allowing access to a second portion of the data, and wherein at least one of the first portion of the data and the second portion of the data is comprised of one or more of the plurality of application components; and

receiving an updated configuration policy from the registered user to allow access to the second portion of the data without allowing access to the first portion of the data, and

wherein a non-registered user utilizing the temporary data access token associated with the updated configuration policy is denied access to the first portion of the data and allowed access to the second portion of the data by a software other than the software application.

7. The computer of claim 6, wherein the registered user assigns the temporary data access token to the non-registered user.

8. The computer of claim 6, wherein the temporary data access token enables any of data viewing and editing.

9. The computer of claim 6, wherein the data comprises a plurality of portions comprising data segments.

10. The computer of claim 6, wherein the temporary data access token is generated using the hardware processor of the computer.

11. A computer program product comprising a non-transitory computer readable storage medium including a computer readable software application, the computer readable software application comprising a plurality of application components, wherein the computer readable software application, when executed by a hardware processor on a computer causes the computer to perform:

sending a configuration policy of a temporary data access token to a registered user, wherein the configuration policy allows access to a first portion of data without allowing access to a second portion of the data, and wherein at least one of the first portion of the data and the second portion of the data is comprised of one or more of the plurality of application components; and

receiving an updated configuration policy from the registered user to allow access to the second portion of the data without allowing access to the first portion of the data, and

wherein a non-registered user utilizing the temporary data access token associated with the updated configuration policy is denied access to the first portion of the data and allowed access to the second portion of the data by a software other than the computer readable software application.

12. The computer program product of claim 11, wherein the registered user assigns the temporary data access token to the non-registered user.

13. The computer program product of claim 11, wherein the temporary data access token enables any of data viewing and editing.

14. The computer program product of claim 11, wherein the data comprises a plurality of portions comprising data segments.

15. The computer program product of claim 11 wherein the temporary data access token is generated using the hardware processor of the computer.