Virtual collaboration systems and methods

• US 10,097,557 B2
• Filed: 01/27/2016
• Issued: 10/09/2018
• Est. Priority Date: 10/01/2015
• Status: Active Grant

• Current Assignee: Lam Research Corporation
• Original Assignee: Lam Research Corporation
• Inventors: Armer, Michael
• Primary Examiner(s): Lynch, Sharon S
• Application Number:
  US15/007,391
• Publication Number:
  US 20170099297A1
• Time in Patent Office: 986 Days
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/30 Profiles

Abstract

A system including a domain controller and a document, policy, and collaboration servers. The document server receives a request signal based on an input received at a web browser of a user device and generates an authentication signal. The request signal requests access to a document. The document server provides a cloud-based service for access to the document. The domain controller, based on the authentication signal, determines a profile or authorization level of a user. The document server, based on the profile or the authorization level, transmits a second authentication signal to the user device. The policy server stores a digital rights management policy for the user. The collaboration server: based on the second authentication signal, receives a digital rights management signal from the user device; and based on the digital rights management policy of the user, permits a controller of the user device to access the document.

Claims

1. A system comprising:

a document server configured to (i) receive a first request signal based on an input received at a web browser of a first user device, and (ii) generate a first authentication signal based on the first request signal, wherein the first request signal requests access to view a first document at the first user device or download the first user document to the first user device, and wherein the document server provides a cloud-based service for the first user device to access the first document;

a first domain controller configured to, based on the first authentication signal, determine a profile or authorization level of a first user of the first user device,

wherein the document server is configured to, based on the profile or the authorization level, transmit a second authentication signal to the first user device;

a policy server comprising memory, wherein the memory is configured to store a digital rights management policy for the first user;

a mail server configured to;

send a first email notification to a second user device requesting access to the first document for the first user,

receive a first response signal from the second user device indicating whether the first user is permitted access to the first document,

based on the first response signal, send a second email notification to a third user device requesting access to the first document for the first user,

receive a second response signal indicating whether the first user is permitted access to the first document, and

sending a third email notification to the first user device indicating whether the first user is permitted access to the first document; and

a collaboration server configured to (i) based on the second authentication signal and the third email notification, receive a digital rights management signal from the first user device, and (ii) based on the digital rights management policy of the first user, permit a controller of the first user device to access the first document, wherein the collaboration server is separate from the document server, and the first domain controller; and

wherein the system is a virtual collaboration center (VCC) system configured to share the first document and other documents between network devices, wherein the network devices include the first user device; and

the document server is configured to execute a configurator application to create a plurality of VCC instances,

wherein each of the plurality of VCC instances includes one or more of the network devices and is assigned ownership of one or more of the first document and the other documents, and wherein the first user and the first user device are associated with one of the plurality of VCC instances.

2. The system of claim 1, wherein:

the document server is configured to (i) receive a second request signal from the second user device requesting a permission of the first user be changed for the first document; and

(ii) updated permissions of the first user; and

the collaboration server is configured to, based on the updated permissions of the first user, prevent the controller of the first user device from accessing the first document.

3. The system of claim 1, wherein:

the document server is configured to, based on the profile or authorization level, send an instruction signal to the mail server; and

the mail server is configured to, based on the instruction signal, send an email notification to the first user device indicating whether the first user is authorized to access the first document.

4. The system of claim 1, wherein:

the document server is configured to receive a username and password from the first user device;

the first domain controller is configured to (i) based on the username and password, determine whether the first user is authorized to login, and (ii) send to the document server an indication signal indicating whether the first user is authorized to login;

the document server is configured to permit login of the first user based on the indication signal; and

the collaboration server is configured to, based on whether the first user is logged in and the authorization level of the first user, permit management access, collaboration access, or dashboard access to the first user.

5. The system of claim 1, wherein:

the document server is configured to (i) receive via the web browser a second document from the first user device, (ii) encrypt the second document, and (iii) receive an authorization signal from the first user device for the second user device, wherein the authorization signal indicates a second authorization level of a second user of the second user device; and

the document server or the collaboration server is configured to, based on the second authorization level, permit access to the second document by the second user.

6. The system of claim 1, wherein:

the first request signal requests decryption, downloading or editing access to the first document; and

the mail server is configured to send an email notification to the first user device indicating whether the first user is authorized to decrypt, download or edit the first document.

7. The system of claim 1, wherein:

the digital rights management policy comprises a plurality of permissions;

the document server is configured to (i) receive a second request signal from the second user device requesting access to the first document be permitted for the first user, (ii) update the authorization level based on the second request signal, and (iii) update one of the plurality of permissions for the first document in the policy server; and

the collaboration server is configured to permit access to the first document based on the updated one of the plurality of permissions.

8. The system of claim 1, wherein the document server is configured to either (i) apply a watermark to the first document prior to storing and viewing the first document on the first user device, or (ii) cause the controller of the first user device to apply a watermark to the first document prior to storing and viewing the first document on the first user device, such that the first document is stored with the watermark in the first user device.

9. The system of claim 1, further comprising a database server configured to store data for a dashboard, wherein the document server is configured to:

receive a link or second request signal from the first user device, wherein the link is to the dashboard or the second request signal requests access to the dashboard;

access the data in the database server; and

provide the data to the first user device.

10. The system of claim 9, wherein the document server is configured to either (i) apply a watermark over content being displayed on the web browser, or (ii) cause the controller of the first device to apply a watermark over the dashboard when viewed via the web browser, wherein the content includes for the dashboard.

21. The system of claim 1, wherein:

the document server is configured to transmit the first authentication signal to the first domain controller; and

the domain controller is separate from the document server and is configured to transmit the profile or authorization level of the first user to the document server.

22. The system of claim 1, wherein:

the policy server is configured to transmit the digital rights management signal to the collaboration server; and

the collaboration server is configured to (i) based on the digital rights management signal and the digital rights management policy, verify digital rights permissions of the first user device, and (ii) based on the verification of the digital rights permissions, permit the controller of the first user device to access the first document.

23. The system of claim 1, wherein:

the first document is stored in a memory of the first user device; and

the collaboration server is configured to permit the controller of the first user device to at least one of access or decrypt the first document stored in the memory of the first user device.

24. The system of claim 1, wherein:

the first domain controller receives the profile from a second domain controller;

the first domain controller is configured to, based on the first authentication signal and the profile as provided by the second domain controller, verify the authorization level of the first user; and

the second domain controller is separate from the document server and the first domain controller.

25. The system of claim 1, wherein the document server is configured to, during setup of the first user device, download a digital rights management application to the first user device to establish the controller of the first user device as a digital rights management controller able to perform a digital rights management verification to verify the authorization level of the first user.

11. A method comprising:

receiving a first request signal at a document server based on an input received at a web browser of a first user device;

generating a first authentication signal based on the first request signal, wherein the first request signal requests access to view a first document at the first user device or download the first document to the first user device, and wherein the document server provides a cloud-based service for the first user device to access the first document;

based on the first authentication signal, determining a profile or authorization level of a first user of the first user device,

wherein the document server is configured to, based on the profile or the authorization level, transmit a second authentication signal to the first user device;

storing a digital rights management policy for the first user in a memory of a policy server;

sending from a mail server a first email notification to a second user device requesting access to the first document for the first user;

receiving at the mail server a first response signal from the second user device indicating whether the first user is permitted access to the first document;

based on the first response signal, send a second email notification from the mail server to a third user device requesting access to the first document for the first user;

receive at the mail server a second response signal indicating whether the first user is permitted access to the first document;

sending a third email notification from the mail server to the first user device indicating whether the first user is permitted access to the first document;

based on the second authentication signal and the third email notification, receiving at a collaboration server a digital rights management signal from the first user device;

based on the digital rights management policy of the first user, permitting a controller of the first user device to access the first document, wherein the collaboration server is separate from the document server;

wherein the method is implemented via a virtual collaboration center (VCC) system that is configured to share the first document and other documents between network devices, and wherein the network devices include the first user device; and

executing a configurator application at the document server to create a plurality of VCC instances, wherein each of the plurality of VCC instances includes one or more of the network devices and is assigned ownership of one or more of the first document and the other documents, and wherein the first user and the first user device are associated with one of the plurality of VCC instances.

12. The method of claim 11, further comprising:

receiving at the document server a second request signal from the second user device requesting a permission of the first user be changed for the first document;

updating permissions of the first user; and

based on the updated permissions of the first user, preventing via the collaboration server the controller of the first user device from accessing the first document.

13. The method of claim 11, further comprising:

based on the profile or authorization level, sending via the document server an instruction signal to the mail server; and

based on the instruction signal, sending from the mail server an email notification to the user device indicating whether the first user is authorized to access the first document.

14. The method of claim 11, further comprising:

receiving at the document server a username and password from the first user device;

based on the username and password, determining whether the first user is authorized to login;

sending to the document server an indication signal indicating whether the first user is authorized to login;

permitting login of the first user based on the indication signal; and

based on whether the first user is logged in and the authorization level of the first user, permit management access, collaboration access, or dashboard access to the first user.

15. The method of claim 11, further comprising:

receiving via the web browser a second document from the first user device;

encrypting the second document;

receiving an authorization signal from the first user device for the second user device, wherein the authorization signal indicates a second authorization level of a second user of the second user device; and

based on the second authorization level, permitting access to the second document by the second user.

16. The method of claim 11, further comprising sending an email notification to the first user device from the mail server indicating whether the first user is authorized to decrypt, download or edit the first document, wherein the first request signal requests decryption, downloading or editing access to the first document.

17. The method of claim 11, further comprising:

receiving at the document server a second request signal from the second user device requesting access to the first document be permitted for the first user;

updating the authorization level based on the second request signal, wherein the digital rights management policy comprises a plurality of permissions;

updating one of the plurality of permissions for the first document in the policy server; and

permitting via the collaboration server access to the first document based on the updated one of the plurality of permissions.

18. The method of claim 11, further comprising, via the document server, either (i) applying a watermark to the first document prior to viewing on the first user device, or (ii) causing the controller of the first user device to apply a watermark to the first document prior to viewing on the first user device.

19. The method of claim 11, further comprising:

storing data for a dashboard at a database server;

receiving a link or second request signal from the first user device at the document server, wherein the link is to the dashboard or the second request signal requests access to the dashboard;

accessing the data in the database server; and

providing the data to the first user device.

20. The method of claim 19, further comprising, via the document server, either (i) applying a watermark over content being displayed on the web browser, or (ii) causing the controller of the first device to apply a watermark over the dashboard when viewed via the web browser, wherein the content includes for the dashboard.

26. A system comprising:

a document server configured to (i) receive a first request signal based on an input received at a web browser of a first user device, and (ii) generate a first authentication signal based on the first request signal, wherein the first request signal requests access to a first document, and wherein the document server provides a cloud-based service for the first user device to access the first document;

a first domain controller configured to, based on the first authentication signal, determine a profile or authorization level of a first user of the first user device,

wherein the document server is configured to, based on the profile or the authorization level, transmit a second authentication signal to the first user device;

a policy server comprising memory, wherein the memory is configured to store a digital rights management policy for the first user; and

a collaboration server configured to (i) based on the second authentication signal, receive a digital rights management signal from the first user device, and (ii) based on the digital rights management policy of the first user, permit a controller of the first user device to access the first document, wherein the collaboration server is separate from the document server and the first domain controller,

wherein

the system is a virtual collaboration center (VCC) system configured to share the first document and other documents between network devices,

the network devices include the first user device,

the document server is configured to execute a configurator application to create a plurality of VCC instances,

each of the plurality of VCC instances includes one or more of the network devices and is assigned ownership of one or more of the first document and the other documents,

the first user and the first user device are associated with one of the plurality of VCC instances, and

when the first request signal requests access to delete the first document, the document server deletes the first document, generates a certificate of deletion and sends instructions for an electronic mail (email) notification to be sent to the first user device comprising a link to the certificate of deletion.